{"api_version":"v1","generated_at":"2026-10-08T23:25:00+00:00","product":{"cve_count":11,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-mauriceboe-trek-1ae9444fa3fc","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/trek","name":"TREK","next_cursor":null,"observations":[{"affected":"TREK: < 3.3.0","affected_versions_present":true,"cve_id":"CVE-2026-77293","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77293","fixed":"3.3.0.","last_modified":"2026-09-24T18:45:45.240Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","primary_source":"","published":"2026-09-24T18:08:30.599Z"},{"affected":"TREK: < 3.3.0","affected_versions_present":true,"cve_id":"CVE-2026-77320","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77320","fixed":"3.3.0.","last_modified":"2026-09-29T03:05:34.796Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","primary_source":"","published":"2026-09-24T18:05:13.791Z"},{"affected":"TREK: < 3.3.0","affected_versions_present":true,"cve_id":"CVE-2026-77321","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77321","fixed":"3.3.0.","last_modified":"2026-10-05T15:32:36.028Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-qvw8-w937-vcmq","primary_source":"","published":"2026-09-24T18:04:05.947Z"},{"affected":"TREK: < 3.3.0","affected_versions_present":true,"cve_id":"CVE-2026-77294","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77294","fixed":"3.3.0.","last_modified":"2026-09-24T18:35:42.537Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","primary_source":"","published":"2026-09-24T18:04:02.393Z"},{"affected":"TREK: < 3.1.3","affected_versions_present":true,"cve_id":"CVE-2026-62945","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62945","fixed":"3.1.3.","last_modified":"2026-08-21T15:42:07.158Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-r4cp-666p-8f69","primary_source":"","published":"2026-08-20T21:51:19.844Z"},{"affected":"TREK: >= 3.0.0, < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-54509","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54509","fixed":"3.1.0.","last_modified":"2026-08-21T14:57:42.795Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-mx6m-qxv8-w624","primary_source":"","published":"2026-08-20T21:49:49.877Z"},{"affected":"TREK: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-54508","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54508","fixed":"3.1.0.","last_modified":"2026-08-21T21:45:07.846Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-f5vh-p2h5-x735","primary_source":"","published":"2026-08-20T21:46:51.288Z"},{"affected":"TREK: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-54505","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54505","fixed":"3.1.0.","last_modified":"2026-08-25T15:30:48.581Z","patch_url":"https://github.com/liketrek/TREK/security/advisories/GHSA-g8rf-gqrw-4qf9","primary_source":"","published":"2026-08-20T21:44:50.337Z"},{"affected":"< 3.0.18","affected_versions_present":true,"cve_id":"CVE-2026-45410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45410","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-29T14:46:58.159Z","patch_url":"","primary_source":"","published":"2026-05-28T21:23:01.431Z"},{"affected":"< 2.7.2","affected_versions_present":true,"cve_id":"CVE-2026-40185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40185","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-15T15:09:36.514Z","patch_url":"https://github.com/mauriceboe/TREK/commit/16277a3811a00c2983f7486fee83c112986cb179","primary_source":"","published":"2026-04-10T19:40:16.382Z"},{"affected":"< 2.7.2","affected_versions_present":true,"cve_id":"CVE-2026-40184","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40184","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-13T16:12:51.487Z","patch_url":"https://github.com/mauriceboe/TREK/commit/16277a3811a00c2983f7486fee83c112986cb179","primary_source":"","published":"2026-04-10T19:39:32.442Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"mauriceboe"}}