{"api_version":"v1","generated_at":"2026-10-04T17:50:00+00:00","product":{"cve_count":3,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-jknack-handlebars-java-186ffc990f60","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"handlebars.java","next_cursor":null,"observations":[{"affected":"handlebars.java: 4.5.3 < 4.5.5","affected_versions_present":true,"cve_id":"CVE-2026-103088","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103088","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-30T17:21:46.603Z","patch_url":"","primary_source":"","published":"2026-09-30T00:55:19.940Z"},{"affected":"handlebars.java: < 4.5.3","affected_versions_present":true,"cve_id":"CVE-2026-63490","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63490","fixed":"4.5.3.","last_modified":"2026-08-25T14:41:57.989Z","patch_url":"https://github.com/jknack/handlebars.java/security/advisories/GHSA-g29j-rwfv-h99w","primary_source":"","published":"2026-08-20T14:45:35.727Z"},{"affected":"< 4.5.2","affected_versions_present":true,"cve_id":"CVE-2026-55760","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55760","fixed":"4.5.2.","last_modified":"2026-07-09T14:37:41.666Z","patch_url":"https://github.com/jknack/handlebars.java/security/advisories/GHSA-r4gv-qr8j-p3pg","primary_source":"","published":"2026-07-08T19:31:22.919Z"}],"source_generated_at":"2026-10-04T06:24:23.053Z","vendor":"jknack"}}