{"action":"Upgrade bun to 1.4.4 or later.","affected":[{"fixed":"1.4.4","introduced":"0"}],"component":"bun","cve_ids":[],"ecosystem":"bun","exploited":false,"fixed_versions":["1.4.4"],"ghsa_id":"GHSA-26q8-h657-pf84","id":"tcs_01M5K8J3STWYTBTS90MHGAFQFJ","modified_at":"2026-10-23T02:02:06Z","published_at":"2026-10-23T02:02:06Z","references":["https://github.com/oven-sh/bun/security/advisories/GHSA-26q8-h657-pf84"],"severity":{"label":"high"},"sources":[{"source":"bun-runtime","source_id":"GHSA-26q8-h657-pf84","url":"https://github.com/oven-sh/bun/security/advisories/GHSA-26q8-h657-pf84"}],"summary":"Bundled root certificates trust compromised eMudhra (emSign) intermediate CAs"}