{"api_version":"v1","generated_at":"2026-10-08T23:40:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-huggingface-huggingface-smolagents-bd6bcf4419c1","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"huggingface/smolagents","next_cursor":null,"observations":[{"affected":"unspecified < 1.22.0","affected_versions_present":true,"cve_id":"CVE-2025-11844","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11844","fixed":"1.22.0.","last_modified":"2025-10-22T14:09:51.303Z","patch_url":"https://github.com/huggingface/smolagents/commit/f570ed5e17999d4cf7d5e79c2830fbaefab8a794","primary_source":"","published":"2025-10-22T13:13:55.882Z"},{"affected":"unspecified < 1.17.0","affected_versions_present":true,"cve_id":"CVE-2025-5120","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-5120","fixed":"1.17.0.","last_modified":"2025-07-28T14:09:25.944Z","patch_url":"https://github.com/huggingface/smolagents/commit/33a942e62b6fbf6a35d41f1c735bda2d64c163d0","primary_source":"","published":"2025-07-27T07:57:07.134Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"huggingface"}}