{"api_version":"v1","generated_at":"2026-10-09T09:40:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-lobehub-lobehub-a12833122e10","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/lobehub","name":"lobehub","next_cursor":null,"observations":[{"affected":"lobehub: \u2264 2.2.15","affected_versions_present":true,"cve_id":"CVE-2026-85621","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85621","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T16:54:13.063Z","patch_url":"","primary_source":"","published":"2026-09-04T14:32:12.595Z"},{"affected":"\u2264 2.2.9","affected_versions_present":true,"cve_id":"CVE-2026-59100","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59100","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:25.830Z","patch_url":"","primary_source":"","published":"2026-07-02T19:43:16.068Z"},{"affected":"\u2264 2.2.9","affected_versions_present":true,"cve_id":"CVE-2026-59098","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59098","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:24.480Z","patch_url":"","primary_source":"","published":"2026-07-02T19:42:27.458Z"},{"affected":"lobehub: < 2.2.10","affected_versions_present":true,"cve_id":"CVE-2026-59095","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59095","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-30T17:20:18.413Z","patch_url":"","primary_source":"","published":"2026-07-02T19:41:16.367Z"},{"affected":"\u2264 2.2.9","affected_versions_present":true,"cve_id":"CVE-2026-58580","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58580","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:19.695Z","patch_url":"","primary_source":"","published":"2026-07-02T19:39:19.653Z"},{"affected":"< 2.2.10-canary.15","affected_versions_present":true,"cve_id":"CVE-2026-58578","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58578","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:18.391Z","patch_url":"","primary_source":"","published":"2026-07-02T19:38:21.378Z"},{"affected":"< 2.1.57","affected_versions_present":true,"cve_id":"CVE-2026-54157","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54157","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T18:28:48.372Z","patch_url":"","primary_source":"","published":"2026-06-23T17:43:06.473Z"},{"affected":"< 2.1.48","affected_versions_present":true,"cve_id":"CVE-2026-42045","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42045","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-12T19:03:36.652Z","patch_url":"","primary_source":"","published":"2026-05-12T16:47:32.636Z"},{"affected":"< 2.1.48","affected_versions_present":true,"cve_id":"CVE-2026-39411","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39411","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T20:15:22.363Z","patch_url":"https://github.com/lobehub/lobehub/commit/3327b293d66c013f076cbc16cdbd05a61a3d0428","primary_source":"","published":"2026-04-08T19:37:43.814Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"lobehub"}}
