Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Rollup macOS package lets attackers run code
published 19 days ago
Summary
The Rollup package for macOS (rollup‑darwin‑x64) contains a security weakness that could allow an attacker to execute code on a vulnerable system. This could compromise the integrity of your builds or the host machine. Update to version 4.22.4‑tuxcare.1 as soon as possible to close the gap.
What to do
- Update rollup @rollup/rollup-darwin-x64 to version 4.22.4-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | rollup | @rollup/rollup-darwin-x64 |
>= 4.22.4-tuxcare.0, < 4.22.4-tuxcare.1 Fix: upgrade to 4.22.4-tuxcare.1
|
Original advisory text
TuxCare security update for @rollup/rollup-darwin-x64 (1 CVE)
TuxCare rebuilt @rollup/rollup-darwin-x64 to address 1 CVE. Fixed in 4.22.4-tuxcare.1.
Timeline
Published16 Oct 2026
Updated16 Oct 2026
First seen16 Oct 2026
Sources
CLSA-2026-1792161064 · OSV
Track software like this
Free during beta