{"api_version":"v1","generated_at":"2026-10-08T02:00:00+00:00","product":{"cve_count":1,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-jhy-soup-aec54fcef2e2","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/soup","name":"soup","next_cursor":null,"observations":[{"affected":"soup: \u2264 1.23.1","affected_versions_present":true,"cve_id":"CVE-2026-75140","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75140","fixed":"soup: 862ba2f1d48ee95609183dbcfc848c9fd7afc76a","last_modified":"2026-08-21T11:21:02.259Z","patch_url":"https://github.com/jhy/jsoup/pull/2556","primary_source":"","published":"2026-08-20T15:56:50.377Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"jhy"}}