CLSA-2026-1792206289

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792206289.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792206289
Upstream
CVE (2)
Published
2026-10-17T03:04:46Z
Modified
2026-10-17T07:00:42Z
Summary
TuxCare security update for @next/bundle-analyzer (2 CVEs)
Details

TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 12.3.7-tuxcare.8.

Affected packages

TuxCare:npm / @next/bundle-analyzer

Package

Name
@next/bundle-analyzer
Purl
pkg:npm/%40next/bundle-analyzer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12.3.7-tuxcare.0
Fixed
12.3.7-tuxcare.8

Affected versions

12.*
12.3.7-tuxcare.1
12.3.7-tuxcare.4
12.3.7-tuxcare.6
12.3.7-tuxcare.7
12.3.7

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792206289.json"
tuxcare 
{
    "base_version":  "12.3.7",
    "fixed_version":  "12.3.7-tuxcare.8"
}