TuxCare rebuilt underscore.string to address 12 CVEs. Fixed in 2.2.1-tuxcare.1.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1775003175.json"