{"api_version":"v1","generated_at":"2026-10-08T07:35:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-black-lantern-security-bbot-c16f12ce9c55","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/bbot","name":"BBOT","next_cursor":null,"observations":[{"affected":"1.1.7 \u2264 2.8.6","affected_versions_present":true,"cve_id":"CVE-2026-14967","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14967","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-08T15:55:55.659Z","patch_url":"https://github.com/blacklanternsecurity/bbot/commit/c1c6ec05ff998e2fba55a14d1026f12563ccd82f","primary_source":"","published":"2026-07-08T15:03:50.730Z"},{"affected":"2.3.1 \u2264 2.8.6","affected_versions_present":true,"cve_id":"CVE-2026-14966","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14966","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-08T15:57:12.247Z","patch_url":"https://github.com/blacklanternsecurity/bbot/commit/a3f1a2292e2b0a553827c6175b761abe28807735","primary_source":"","published":"2026-07-08T15:03:47.591Z"},{"affected":"2.1.0 \u2264 <=2.8.5","affected_versions_present":true,"cve_id":"CVE-2026-12568","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12568","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-18T12:48:02.115Z","patch_url":"","primary_source":"","published":"2026-06-17T21:53:47.543Z"},{"affected":"2.0.0 \u2264 <=2.8.4","affected_versions_present":true,"cve_id":"CVE-2026-12567","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12567","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-18T12:50:13.202Z","patch_url":"","primary_source":"","published":"2026-06-17T21:51:35.593Z"},{"affected":"2.0.0 \u2264 <=2.8.4","affected_versions_present":true,"cve_id":"CVE-2026-12566","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12566","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-18T12:50:35.439Z","patch_url":"","primary_source":"","published":"2026-06-17T21:48:57.632Z"},{"affected":"2.3.1 \u2264 <=2.8.4","affected_versions_present":true,"cve_id":"CVE-2026-12565","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12565","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-18T12:51:01.213Z","patch_url":"","primary_source":"","published":"2026-06-17T21:45:48.232Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Black Lantern Security"}}