CLSA-2026-1792011714

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011714.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792011714
Upstream
CVE (2)
Published
2026-10-14T21:01:54Z
Modified
2026-10-15T09:47:46Z
Summary
TuxCare security update for com.google.protobuf (2 CVEs)
Details

TuxCare rebuilt 4 com.google.protobuf packages to address 2 CVEs. Fixed in 3.7.1-tuxcare.1.

Affected packages

TuxCare:Maven
com.google.protobuf:protobuf-bom

Package

Name
com.google.protobuf:protobuf-bom
Purl
pkg:maven/com.google.protobuf/protobuf-bom

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.1
Fixed
3.7.1-tuxcare.1

Affected versions

3.*
3.7.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011714.json"
tuxcare 
{
    "base_version":  "3.7.1",
    "fixed_version":  "3.7.1-tuxcare.1"
}
com.google.protobuf:protobuf-java

Package

Name
com.google.protobuf:protobuf-java
Purl
pkg:maven/com.google.protobuf/protobuf-java

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.1
Fixed
3.7.1-tuxcare.1

Affected versions

3.*
3.7.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011714.json"
tuxcare 
{
    "base_version":  "3.7.1",
    "fixed_version":  "3.7.1-tuxcare.1"
}
com.google.protobuf:protobuf-java-util

Package

Name
com.google.protobuf:protobuf-java-util
Purl
pkg:maven/com.google.protobuf/protobuf-java-util

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.1
Fixed
3.7.1-tuxcare.1

Affected versions

3.*
3.7.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011714.json"
tuxcare 
{
    "base_version":  "3.7.1",
    "fixed_version":  "3.7.1-tuxcare.1"
}
com.google.protobuf:protobuf-parent

Package

Name
com.google.protobuf:protobuf-parent
Purl
pkg:maven/com.google.protobuf/protobuf-parent

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.1
Fixed
3.7.1-tuxcare.1

Affected versions

3.*
3.7.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011714.json"
tuxcare 
{
    "base_version":  "3.7.1",
    "fixed_version":  "3.7.1-tuxcare.1"
}