CLSA-2026-1790080922

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1790080922.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790080922
Upstream
CVE (2)
Published
2026-09-22T12:42:02Z
Modified
2026-10-15T09:47:08Z
Summary
TuxCare security update for 2 packages (2 CVEs)
Details

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 5.4.14-tuxcare.3.

Affected packages

TuxCare:npm / @vitejs/plugin-legacy

Package

Name
@vitejs/plugin-legacy
Purl
pkg:npm/%40vitejs/plugin-legacy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.14-tuxcare.0
Fixed
5.4.14-tuxcare.3

Affected versions

5.*
5.4.14-tuxcare.1
5.4.14-tuxcare.2
5.4.14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1790080922.json"
tuxcare 
{
    "base_version":  "5.4.14",
    "fixed_version":  "5.4.14-tuxcare.3"
}

TuxCare:npm / vite

Package

Name
vite
Purl
pkg:npm/vite

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.14-tuxcare.0
Fixed
5.4.14-tuxcare.3

Affected versions

5.*
5.4.14-tuxcare.1
5.4.14-tuxcare.2
5.4.14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1790080922.json"
tuxcare 
{
    "base_version":  "5.4.14",
    "fixed_version":  "5.4.14-tuxcare.3"
}