CLSA-2026-1789061392

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1789061392.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1789061392
Upstream
GHSA (3)
Published
2026-09-10T17:29:52Z
Modified
2026-10-15T09:48:00Z
Summary
TuxCare security update for league/commonmark (3 CVEs)
Details

TuxCare rebuilt league/commonmark to address 3 CVEs. Fixed in 1.6.7-p5+tuxcare.

Affected packages

TuxCare:Packagist / league/commonmark

Package

Name
league/commonmark
Purl
pkg:composer/league/commonmark

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.6.7
Fixed
1.6.7-p5+tuxcare

Affected versions

1.*
1.6.7
1.6.7-p1+tuxcare
1.6.7-p2+tuxcare
1.6.7-p3+tuxcare
1.6.7-p4+tuxcare

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1789061392.json"
tuxcare
{
    "base_version":  "1.6.7",
    "fixed_version":  "1.6.7-p5+tuxcare"
}