{"api_version":"v1","generated_at":"2026-10-05T15:40:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-drupal-drupal-1f1a31e1e215","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/drupal","name":"Drupal","next_cursor":null,"observations":[{"affected":"7.x-1.0 \u2264 7.x-1.22","affected_versions_present":true,"cve_id":"CVE-2026-0749","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0749","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-28T19:12:36.742Z","patch_url":"","primary_source":"","published":"2026-01-28T18:56:05.806Z"},{"affected":"7.x-1.0 \u2264 7.x-1.6","affected_versions_present":true,"cve_id":"CVE-2025-12848","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-12848","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-26T20:52:30.614Z","patch_url":"https://www.drupal.org/node/3105204","primary_source":"","published":"2025-11-26T01:28:33.628Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"Drupal"}}