{"api_version":"v1","generated_at":"2026-10-08T08:50:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-internet2-grouper-6d1902cabd39","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/grouper","name":"Grouper","next_cursor":null,"observations":[{"affected":"Grouper: 5.8.3 \u2264 5.22.5, 6.0.0 < 6.4.1, 7.0.0 < 7.5.1","affected_versions_present":true,"cve_id":"CVE-2026-103470","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103470","fixed":"Upgrade to fixed container version","last_modified":"2026-09-30T19:06:00.204Z","patch_url":"https://docs.grouper.internet2.edu/wiki/spaces/Grouper/pages/240549893/","primary_source":"","published":"2026-09-30T15:53:00.372Z"},{"affected":"5.17.1 < 5.20.5","affected_versions_present":true,"cve_id":"CVE-2025-59714","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59714","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-19T13:48:56.733Z","patch_url":"","primary_source":"","published":"2025-09-19T00:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Internet2"}}