{"api_version":"v1","generated_at":"2026-10-08T16:15:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-http4s-blaze-f9fb71d49125","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/blaze","name":"blaze","next_cursor":null,"observations":[{"affected":"blaze: < 0.23.18, >= 1.0.0-M1, < 1.0.0-M42; blaze-http 2.13: < 0.23.18, >= 1.0.0-M1, < 1.0.0-M42; blaze-http 3: < 0.23.18, >= 1.0.0-M1, < 1.0.0-M42; http4s-blaze-server 2.13: < 0.23.18","affected_versions_present":true,"cve_id":"CVE-2026-73494","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73494","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T20:05:52.181Z","patch_url":"","primary_source":"","published":"2026-09-14T17:33:49.671Z"},{"affected":"< 0.23.18; >= 1.0.0-M1, < 1.0.0-M42","affected_versions_present":true,"cve_id":"CVE-2026-73495","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73495","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-13T13:04:05.574Z","patch_url":"","primary_source":"","published":"2026-08-12T21:11:55.180Z"},{"affected":"< 0.23.18; >= 1.0.0-M1, < 1.0.0-M42","affected_versions_present":true,"cve_id":"CVE-2026-73493","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73493","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-13T17:53:19.342Z","patch_url":"","primary_source":"","published":"2026-08-12T21:08:34.981Z"},{"affected":"< 0.14.15","affected_versions_present":true,"cve_id":"CVE-2021-21293","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-21293","fixed":"0.14.15","last_modified":"2024-08-03T18:09:15.127Z","patch_url":"https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1","primary_source":"","published":"2021-02-02T21:35:17.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"http4s"}}