{"api_version":"v1","generated_at":"2026-10-08T07:55:00+00:00","product":{"cve_count":8,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-lycheeorg-lychee-155904281791","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/lychee","name":"Lychee","next_cursor":null,"observations":[{"affected":"< 7.5.4","affected_versions_present":true,"cve_id":"CVE-2026-39957","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39957","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-09T19:08:20.555Z","patch_url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-4v4c-g2jv-4g25","primary_source":"","published":"2026-04-09T16:14:56.133Z"},{"affected":"< 7.5.3","affected_versions_present":true,"cve_id":"CVE-2026-33738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33738","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-27T13:55:55.702Z","patch_url":"https://github.com/LycheeOrg/Lychee/commit/d2e2606a0223d5a384d5b806db1b31eb587adc5c","primary_source":"","published":"2026-03-26T20:25:44.648Z"},{"affected":"< 7.5.2","affected_versions_present":true,"cve_id":"CVE-2026-33644","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33644","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-30T11:30:40.546Z","patch_url":"https://github.com/LycheeOrg/Lychee/commit/28c5261fb9deab4f9420c8cc2f73a87425939107","primary_source":"","published":"2026-03-26T20:04:18.728Z"},{"affected":"< 7.5.1","affected_versions_present":true,"cve_id":"CVE-2026-33537","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33537","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-27T19:46:28.419Z","patch_url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-vq6w-prpf-h287","primary_source":"","published":"2026-03-26T20:01:19.377Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-22784","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22784","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-12T18:55:55.328Z","patch_url":"https://github.com/LycheeOrg/Lychee/commit/f021a29f9ab2bafa81d9f5e32ff5bc89915c7d41","primary_source":"","published":"2026-01-12T18:37:55.183Z"},{"affected":"< 6.6.13","affected_versions_present":true,"cve_id":"CVE-2025-53018","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53018","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-27T13:58:56.661Z","patch_url":"","primary_source":"","published":"2025-06-27T13:00:14.086Z"},{"affected":">= 6.6.6, < 6.6.10","affected_versions_present":true,"cve_id":"CVE-2025-50202","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-50202","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-18T14:00:25.727Z","patch_url":"","primary_source":"","published":"2025-06-18T04:13:01.405Z"},{"affected":"< 5.0.2","affected_versions_present":true,"cve_id":"CVE-2023-52082","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-52082","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-27T15:32:17.641Z","patch_url":"https://github.com/LycheeOrg/Lychee/commit/33354a2ce7cf700cc4ee537b7b8b94dfc1e84ad4","primary_source":"","published":"2023-12-28T15:46:24.291Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"LycheeOrg"}}