{"api_version":"v1","generated_at":"2026-10-08T19:55:00+00:00","product":{"cve_count":7,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-bluewave-labs-checkmate-26e8043c3337","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/checkmate","name":"Checkmate","next_cursor":null,"observations":[{"affected":"\u2264 3.11.0","affected_versions_present":true,"cve_id":"CVE-2026-85390","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85390","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-05T02:01:53.814Z","patch_url":"","primary_source":"","published":"2026-09-03T18:54:23.866Z"},{"affected":"Checkmate: >= 3.3.0, < 3.9.2","affected_versions_present":true,"cve_id":"CVE-2026-71862","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71862","fixed":"3.9.2.","last_modified":"2026-08-21T21:43:42.303Z","patch_url":"https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-3m74-8cg9-rp8j","primary_source":"","published":"2026-08-21T18:00:32.871Z"},{"affected":"Checkmate: >= 3.5.1, < 3.9.2","affected_versions_present":true,"cve_id":"CVE-2026-70656","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-70656","fixed":"3.9.2.","last_modified":"2026-08-21T18:07:11.885Z","patch_url":"https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-4c6j-p2cv-wf56","primary_source":"","published":"2026-08-21T17:59:28.639Z"},{"affected":"Checkmate: < 3.9.1","affected_versions_present":true,"cve_id":"CVE-2026-55241","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55241","fixed":"3.9.1.","last_modified":"2026-08-25T11:51:15.776Z","patch_url":"https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-9xvg-x28f-m78m","primary_source":"","published":"2026-08-21T17:57:10.014Z"},{"affected":"\u2264 2.1.0","affected_versions_present":true,"cve_id":"CVE-2026-72588","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72588","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T13:22:16.638Z","patch_url":"","primary_source":"","published":"2026-08-10T10:41:39.341Z"},{"affected":"<= 3.5.1","affected_versions_present":true,"cve_id":"CVE-2026-31836","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31836","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-20T21:27:29.683Z","patch_url":"","primary_source":"","published":"2026-03-20T17:50:12.545Z"},{"affected":"< 3.4.0","affected_versions_present":true,"cve_id":"CVE-2026-30829","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30829","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-10T17:58:13.860Z","patch_url":"","primary_source":"","published":"2026-03-07T05:46:00.460Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"bluewave-labs"}}