{"api_version":"v1","generated_at":"2026-10-08T06:35:00+00:00","product":{"cve_count":4,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-facelessuser-soupsieve-06d876c67cd9","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"soupsieve","next_cursor":null,"observations":[{"affected":"soupsieve: < 2.9","affected_versions_present":true,"cve_id":"CVE-2026-85999","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85999","fixed":"2.9.","last_modified":"2026-09-22T20:29:44.838Z","patch_url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-j934-xhv5-fg8f","primary_source":"","published":"2026-09-17T15:23:37.457Z"},{"affected":"soupsieve: < 2.9","affected_versions_present":true,"cve_id":"CVE-2026-86000","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86000","fixed":"2.9.","last_modified":"2026-09-17T15:45:49.251Z","patch_url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-gjv8-xp57-g29c","primary_source":"","published":"2026-09-17T15:21:57.724Z"},{"affected":"< 2.8.4","affected_versions_present":true,"cve_id":"CVE-2026-49476","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49476","fixed":"2.8.4.","last_modified":"2026-07-15T14:27:06.146Z","patch_url":"https://github.com/facelessuser/soupsieve/commit/28108ab805818c832d9568142a99844fd95a0d39","primary_source":"","published":"2026-07-14T20:53:12.497Z"},{"affected":"< 2.8.4","affected_versions_present":true,"cve_id":"CVE-2026-49477","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49477","fixed":"2.8.4.","last_modified":"2026-07-21T14:49:40.914Z","patch_url":"https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3","primary_source":"","published":"2026-07-14T20:51:29.369Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"facelessuser"}}