TuxCare rebuilt http-proxy-middleware to address 2 CVEs. Fixed in 4.0.0-tuxcare.1.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792000560.json"
{ "base_version": "4.0.0", "fixed_version": "4.0.0-tuxcare.1" }