{"api_version":"v1","generated_at":"2026-10-08T17:50:00+00:00","product":{"cve_count":3,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-coreshop-coreshop-12862a94528b","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"CoreShop","next_cursor":null,"observations":[{"affected":"CoreShop: >= 5.0.1, <= 5.1.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2026-41249","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41249","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-08T19:15:02.639Z","patch_url":"","primary_source":"","published":"2026-06-04T19:26:46.043Z"},{"affected":"< 4.1.9","affected_versions_present":true,"cve_id":"CVE-2026-23959","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23959","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T16:28:21.076Z","patch_url":"https://github.com/coreshop/CoreShop/commit/af80b8f5c7df5f02f44e9c5e0a4a564de274eec2","primary_source":"","published":"2026-01-22T01:57:58.566Z"},{"affected":"CoreShop: < 4.1.8","affected_versions_present":true,"cve_id":"CVE-2026-22242","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22242","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T14:26:19.902Z","patch_url":"https://github.com/coreshop/CoreShop/commit/59e84fec59d113952b6d28a9b30c6317f9e6e5dd","primary_source":"","published":"2026-01-08T09:59:24.849Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"coreshop"}}