{"api_version":"v1","generated_at":"2026-10-08T14:25:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-cisagov-malcolm-36b1760f699d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/malcolm","name":"Malcolm","next_cursor":null,"observations":[{"affected":"\u2264 26.07.1","affected_versions_present":true,"cve_id":"CVE-2026-19671","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-19671","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T19:45:58.424Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841","primary_source":"","published":"2026-08-18T19:11:58.230Z"},{"affected":"\u2264 26.07.1","affected_versions_present":true,"cve_id":"CVE-2026-19670","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-19670","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T19:47:33.551Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841","primary_source":"","published":"2026-08-18T19:06:44.659Z"},{"affected":"Malcolm: < 26.07.0","affected_versions_present":true,"cve_id":"CVE-2026-63177","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63177","fixed":"Malcolm: 26.07.0","last_modified":"2026-10-02T20:27:08.611Z","patch_url":"https://github.com/cisagov/Malcolm/security/advisories/GHSA-m5fr-rv3h-xg2r","primary_source":"","published":"2026-08-11T20:30:57.901Z"},{"affected":"Malcolm: < 26.07.0","affected_versions_present":true,"cve_id":"CVE-2026-63134","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63134","fixed":"Malcolm: 26.07.0","last_modified":"2026-10-02T20:23:35.980Z","patch_url":"https://github.com/cisagov/Malcolm/security/advisories/GHSA-65mm-vgrw-vqx4","primary_source":"","published":"2026-08-11T20:29:38.642Z"},{"affected":"Malcolm: < 26.07.0","affected_versions_present":true,"cve_id":"CVE-2026-63133","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63133","fixed":"Malcolm: 26.07.0","last_modified":"2026-10-02T20:15:36.885Z","patch_url":"https://github.com/cisagov/Malcolm/security/advisories/GHSA-c35g-mgc3-95rx","primary_source":"","published":"2026-08-11T20:26:06.123Z"},{"affected":"Malcolm: < 26.06.1","affected_versions_present":true,"cve_id":"CVE-2026-55676","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55676","fixed":"Malcolm: 26.06.1","last_modified":"2026-10-02T20:20:14.228Z","patch_url":"https://github.com/cisagov/Malcolm/security/advisories/GHSA-8cvp-m7pg-qrp7","primary_source":"","published":"2026-08-11T20:24:50.803Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"CISAgov"}}