{"api_version":"v1","generated_at":"2026-10-09T23:10:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-cockpit-hq-cockpit-db1584218173","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/cockpit","name":"cockpit","next_cursor":null,"observations":[{"affected":"cockpit: 2.12.0 < 2.14.1","affected_versions_present":true,"cve_id":"CVE-2026-105217","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-105217","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-05T13:16:36.168Z","patch_url":"","primary_source":"","published":"2026-10-04T17:09:52.997Z"},{"affected":"cockpit: < 2.14.1","affected_versions_present":true,"cve_id":"CVE-2026-82449","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82449","fixed":"cockpit: 2.14.1","last_modified":"2026-09-24T14:20:25.046Z","patch_url":"https://github.com/Cockpit-HQ/Cockpit/commit/5d65ae7b63a261a63e8809e5fba857ef3eadb2ac","primary_source":"","published":"2026-08-29T12:05:35.516Z"},{"affected":"\u2264 2.14.0","affected_versions_present":true,"cve_id":"CVE-2026-58467","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58467","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:09.658Z","patch_url":"","primary_source":"","published":"2026-07-02T20:04:56.875Z"},{"affected":"Cockpit: \u2264 2.14.0","affected_versions_present":true,"cve_id":"CVE-2026-23695","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23695","fixed":"Cockpit: 72a83fcfe85ad8330e9ae834bc02fa517b5749e9","last_modified":"2026-10-08T15:22:17.814Z","patch_url":"https://github.com/Cockpit-HQ/Cockpit/commit/72a83fcfe85ad8330e9ae834bc02fa517b5749e9","primary_source":"","published":"2026-05-15T16:33:46.897Z"},{"affected":"2.13.0; 2.13.1; 2.13.2; 2.13.3; 2.13.4; 2.13.5","affected_versions_present":true,"cve_id":"CVE-2026-6626","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6626","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-20T15:23:47.915Z","patch_url":"","primary_source":"","published":"2026-04-20T09:45:12.067Z"},{"affected":"< 2.13.5","affected_versions_present":true,"cve_id":"CVE-2026-31891","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31891","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-18T18:36:30.952Z","patch_url":"https://github.com/Cockpit-HQ/Cockpit/security/advisories/GHSA-7x5c-vfhj-9628","primary_source":"","published":"2026-03-18T02:58:12.427Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"cockpit-hq"}}