{"api_version":"v1","generated_at":"2026-10-09T07:55:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-humhub-cfiles-0bb812279658","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/cfiles","name":"cfiles","next_cursor":null,"observations":[{"affected":"< 0.16.11; >= 0.17.0, < 0.17.2","affected_versions_present":true,"cve_id":"CVE-2025-65963","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-65963","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-26T16:13:16.288Z","patch_url":"","primary_source":"","published":"2025-11-25T23:38:49.198Z"},{"affected":"< 0.16.10","affected_versions_present":true,"cve_id":"CVE-2025-54790","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54790","fixed":"0.16.10.","last_modified":"2025-08-04T15:22:29.986Z","patch_url":"https://github.com/humhub/cfiles/security/advisories/GHSA-rfvq-g9rm-pgqj","primary_source":"","published":"2025-08-01T23:37:23.353Z"},{"affected":"< 0.6.10","affected_versions_present":true,"cve_id":"CVE-2025-54789","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54789","fixed":"0.16.10.","last_modified":"2025-08-04T15:40:11.383Z","patch_url":"https://github.com/humhub/cfiles/commit/f022bdd1cc54334a7a2a6f90a8168bb9583a2f00","primary_source":"","published":"2025-08-01T23:26:32.195Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"humhub"}}