{"api_version":"v1","generated_at":"2026-10-07T19:40:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-koel-koel-ed7a4e02df76","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/koel","name":"koel","next_cursor":null,"observations":[{"affected":"< 9.7.1","affected_versions_present":true,"cve_id":"CVE-2026-54491","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54491","fixed":"9.7.1.","last_modified":"2026-08-20T19:47:26.429Z","patch_url":"https://github.com/koel/koel/security/advisories/GHSA-6qvr-wjmv-v8mm","primary_source":"","published":"2026-08-19T20:48:12.951Z"},{"affected":"< 9.7.0","affected_versions_present":true,"cve_id":"CVE-2026-54493","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54493","fixed":"9.7.0.","last_modified":"2026-08-21T18:13:02.201Z","patch_url":"https://github.com/koel/koel/security/advisories/GHSA-6p96-cfg5-4vhp","primary_source":"","published":"2026-08-19T20:46:50.890Z"},{"affected":"< 9.7.1","affected_versions_present":true,"cve_id":"CVE-2026-54494","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54494","fixed":"9.7.1","last_modified":"2026-08-25T14:14:08.109Z","patch_url":"https://github.com/koel/koel/security/advisories/GHSA-rjg7-r26h-cfp2","primary_source":"","published":"2026-08-19T20:46:01.824Z"},{"affected":"< 9.7.0","affected_versions_present":true,"cve_id":"CVE-2026-54492","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54492","fixed":"9.7.0.","last_modified":"2026-08-20T13:43:02.603Z","patch_url":"https://github.com/koel/koel/security/advisories/GHSA-w79m-f3jx-779v","primary_source":"","published":"2026-08-19T20:44:33.090Z"},{"affected":"< 9.7.1","affected_versions_present":true,"cve_id":"CVE-2026-50552","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50552","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-15T15:25:23.537Z","patch_url":"","primary_source":"","published":"2026-06-12T18:51:46.028Z"},{"affected":"< 9.3.5","affected_versions_present":true,"cve_id":"CVE-2026-47260","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47260","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-13T03:28:32.095Z","patch_url":"","primary_source":"","published":"2026-06-12T18:50:42.766Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"koel"}}