{"api_version":"v1","generated_at":"2026-10-08T12:50:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-hasura-graphql-engine-2b9a1714c607","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/graphql-engine","name":"graphql-engine","next_cursor":null,"observations":[{"affected":">= 2.46.0, < 2.49.2; >= 2.45.0, < 2.45.5","affected_versions_present":true,"cve_id":"CVE-2026-54698","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54698","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-08T13:02:17.049Z","patch_url":"","primary_source":"","published":"2026-07-07T21:29:23.595Z"},{"affected":"< 1.3.4; >= 2.0.0, < 2.11.5; >= 2.2.0, < 2.20.1","affected_versions_present":true,"cve_id":"CVE-2023-27588","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27588","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T14:57:42.725Z","patch_url":"https://github.com/hasura/graphql-engine/commit/dda54543ee1ecf647ca5d0971b140c3a7b9f4158","primary_source":"","published":"2023-03-14T17:23:10.499Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"hasura"}}