{"api_version":"v1","generated_at":"2026-10-07T20:40:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-huggingface-datasets-6dae19586545","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/datasets","name":"datasets","next_cursor":null,"observations":[{"affected":"datasets: \u2264 5.0.0","affected_versions_present":true,"cve_id":"CVE-2026-66007","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66007","fixed":"datasets: f989ef9b4cc6c0039a7a82458eebca49e2b58b4b","last_modified":"2026-10-01T15:20:14.881Z","patch_url":"https://github.com/huggingface/datasets/pull/8325","primary_source":"","published":"2026-07-24T14:58:10.035Z"},{"affected":"datasets: \u2264 5.00","affected_versions_present":true,"cve_id":"CVE-2026-65010","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-65010","fixed":"datasets: ad2d853ae2ce41d8068c23b44c2e29004312ccee","last_modified":"2026-10-01T15:20:14.218Z","patch_url":"https://github.com/huggingface/datasets/issues/8296","primary_source":"","published":"2026-07-23T17:55:52.165Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"huggingface"}}