Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions next-rspack could let attackers run code
published 18 days ago
Summary
The next-rspack component used in GitHub Actions had two security weaknesses that could let a malicious user execute unwanted code. The vendor has released an updated version that fixes these issues. Apply the latest TuxCare‑provided build (15.5.23‑tuxcare.2) as soon as possible.
What to do
- Update GitHub Actions next-rspack to version 15.5.23-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | next-rspack |
>= 15.5.23-tuxcare.0, < 15.5.23-tuxcare.2 Fix: upgrade to 15.5.23-tuxcare.2
|
Original advisory text
TuxCare security update for next-rspack (2 CVEs)
TuxCare rebuilt next-rspack to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLSA-2026-1792256962 · OSV
Track software like this
Free during beta