Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
web3-eth-contract could let attackers compromise system
published 19 days ago
Summary
The web3-eth-contract library used in your applications had a security weakness that could allow a malicious actor to take control of the host system. The problem is fixed in version 1.10.4‑tuxcare.1, so upgrade to that version or later as soon as possible.
What to do
- Update luu-alex web3-eth-contract to version 1.10.4-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | luu-alex | web3-eth-contract |
>= 1.10.4-tuxcare.0, < 1.10.4-tuxcare.1 Fix: upgrade to 1.10.4-tuxcare.1
|
Original advisory text
TuxCare security update for web3-eth-contract (1 CVE)
TuxCare rebuilt web3-eth-contract to address 1 CVE. Fixed in 1.10.4-tuxcare.1.
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792162040 · OSV
Track software like this
Free during beta