{"api_version":"v1","generated_at":"2026-10-09T07:45:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-cyclonedx-cyclonedx-node-npm-9cea4683415a","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"cyclonedx-node-npm","next_cursor":null,"observations":[{"affected":"cyclonedx-node-npm: < 6.0.0","affected_versions_present":true,"cve_id":"CVE-2026-71538","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71538","fixed":"6.0.0.","last_modified":"2026-09-17T15:30:52.840Z","patch_url":"https://github.com/CycloneDX/cyclonedx-node-npm/security/advisories/GHSA-q69g-4hcv-6jg4","primary_source":"","published":"2026-09-17T14:35:39.144Z"},{"affected":">= 2.1.0, < 5.0.0","affected_versions_present":true,"cve_id":"CVE-2026-55849","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55849","fixed":"5.0.0.","last_modified":"2026-07-09T19:36:40.011Z","patch_url":"https://github.com/CycloneDX/cyclonedx-node-npm/security/advisories/GHSA-v75r-vx73-82pj","primary_source":"","published":"2026-07-08T21:10:15.798Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"CycloneDX"}}