TuxCare rebuilt 17 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.9.1-tuxcare.1.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792102359.json"
{ "base_version": "2.9.1", "fixed_version": "2.9.1-tuxcare.1" }