{"api_version":"v1","generated_at":"2026-10-06T13:10:00+00:00","product":{"cve_count":11,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-microsoft-ufo-e0c0ca322b72","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/ufo","name":"UFO","next_cursor":null,"observations":[{"affected":"< 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-62316","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62316","fixed":"3.0.8.","last_modified":"2026-08-25T14:19:38.936Z","patch_url":"https://github.com/microsoft/UFO/security/advisories/GHSA-vf4c-mf32-gf2h","primary_source":"","published":"2026-08-21T20:17:21.272Z"},{"affected":"UFO: < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-73297","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73297","fixed":"3.0.8.","last_modified":"2026-08-12T16:49:58.405Z","patch_url":"https://github.com/microsoft/UFO/security/advisories/GHSA-7hrg-r8xr-p8gr","primary_source":"","published":"2026-08-12T16:31:35.224Z"},{"affected":"UFO: < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-73296","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73296","fixed":"3.0.8.","last_modified":"2026-08-13T14:07:14.159Z","patch_url":"https://github.com/microsoft/UFO/security/advisories/GHSA-24fq-m9rr-g3mm","primary_source":"","published":"2026-08-12T16:29:03.154Z"},{"affected":"< 3.0.7","affected_versions_present":true,"cve_id":"CVE-2026-55440","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55440","fixed":"3.0.7.","last_modified":"2026-07-16T16:23:56.463Z","patch_url":"https://github.com/microsoft/UFO/security/advisories/GHSA-hxjv-fmjf-wmjf","primary_source":"","published":"2026-07-16T15:35:51.346Z"},{"affected":">= 3.0.0, < 3.0.6","affected_versions_present":true,"cve_id":"CVE-2026-54568","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54568","fixed":"3.0.6.","last_modified":"2026-07-16T18:03:30.788Z","patch_url":"https://github.com/microsoft/UFO/security/advisories/GHSA-hc27-j4p9-qm2x","primary_source":"","published":"2026-07-16T15:32:06.556Z"},{"affected":"3.0.1-4-ge2626659","affected_versions_present":true,"cve_id":"CVE-2026-46538","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46538","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T12:38:02.790Z","patch_url":"","primary_source":"","published":"2026-05-27T21:56:55.361Z"},{"affected":"3.0.1-4-ge2626659","affected_versions_present":true,"cve_id":"CVE-2026-46416","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46416","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T13:01:35.272Z","patch_url":"","primary_source":"","published":"2026-05-27T21:56:14.234Z"},{"affected":"3.0.1-4-ge2626659","affected_versions_present":true,"cve_id":"CVE-2026-46414","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46414","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-02T16:17:43.150Z","patch_url":"","primary_source":"","published":"2026-05-27T21:54:51.681Z"},{"affected":"3.0.1-4-ge2626659","affected_versions_present":true,"cve_id":"CVE-2026-46402","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46402","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-30T01:51:53.437Z","patch_url":"","primary_source":"","published":"2026-05-27T21:54:06.646Z"},{"affected":"3.0.1-4-ge2626659","affected_versions_present":true,"cve_id":"CVE-2026-46544","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46544","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T13:18:09.622Z","patch_url":"","primary_source":"","published":"2026-05-27T21:53:11.257Z"},{"affected":"<= 3.0.0","affected_versions_present":true,"cve_id":"CVE-2026-45322","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45322","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-28T13:21:51.736Z","patch_url":"","primary_source":"","published":"2026-05-27T21:32:50.171Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"microsoft"}}