{"api_version":"v1","generated_at":"2026-10-09T19:40:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-bogdan-bendziukov-squeeze-f8ede17faf97","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/squeeze","name":"Squeeze","next_cursor":null,"observations":[{"affected":"\u2264 1.7.7","affected_versions_present":true,"cve_id":"CVE-2026-32415","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32415","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-29T09:51:59.409Z","patch_url":"","primary_source":"","published":"2026-03-13T11:42:15.203Z"},{"affected":"\u2264 1.6","affected_versions_present":true,"cve_id":"CVE-2025-31002","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-31002","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:12:03.328Z","patch_url":"","primary_source":"","published":"2025-04-09T16:10:21.173Z"},{"affected":"\u2264 1.6","affected_versions_present":true,"cve_id":"CVE-2025-31003","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-31003","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:12:03.354Z","patch_url":"","primary_source":"","published":"2025-04-09T16:10:20.595Z"},{"affected":"n/a \u2264 1.4","affected_versions_present":true,"cve_id":"CVE-2024-35767","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-35767","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:09:55.268Z","patch_url":"","primary_source":"","published":"2024-06-21T16:00:18.705Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Bogdan Bendziukov"}}