TuxCare rebuilt karma to address 1 CVE. Fixed in 4.1.0-tuxcare.4.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1788269528.json"