CLSA-2026-1792161854

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792161854.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792161854
Upstream
CVE (2)
Published
2026-10-16T14:44:14Z
Modified
2026-10-16T16:31:16Z
Summary
TuxCare security update for @astrojs/upgrade (2 CVEs)
Details

TuxCare rebuilt @astrojs/upgrade to address 2 CVEs. Fixed in 5.18.1-tuxcare.5.

Affected packages

TuxCare:npm / @astrojs/upgrade

Package

Name
@astrojs/upgrade
Purl
pkg:npm/%40astrojs/upgrade

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.1-tuxcare.0
Fixed
5.18.1-tuxcare.5

Affected versions

5.*
5.18.1-tuxcare.2
5.18.1-tuxcare.3
5.18.1-tuxcare.4
5.18.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792161854.json"
tuxcare 
{
    "base_version":  "5.18.1",
    "fixed_version":  "5.18.1-tuxcare.5"
}