{"api_version":"v1","generated_at":"2026-10-09T08:05:00+00:00","product":{"cve_count":5,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-project-zot-zot-7b5bc592d70b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/zot","name":"zot","next_cursor":null,"observations":[{"affected":"zot: < 2.1.18","affected_versions_present":true,"cve_id":"CVE-2026-61833","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61833","fixed":"2.1.18.","last_modified":"2026-09-23T19:06:14.333Z","patch_url":"https://github.com/project-zot/zot/security/advisories/GHSA-qg67-7m6v-qg25","primary_source":"","published":"2026-09-18T16:55:22.002Z"},{"affected":">= 1.3.0, < v2.1.15","affected_versions_present":true,"cve_id":"CVE-2026-31801","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31801","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-11T16:00:33.441Z","patch_url":"https://github.com/project-zot/zot/security/advisories/GHSA-85jx-fm8m-x8c6","primary_source":"","published":"2026-03-10T20:54:15.164Z"},{"affected":"< 1.4.4-0.20250522160828-8a99a3ed231f","affected_versions_present":true,"cve_id":"CVE-2025-48374","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48374","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-05-23T14:33:24.239Z","patch_url":"","primary_source":"","published":"2025-05-22T20:43:13.708Z"},{"affected":"< 2.1.2","affected_versions_present":true,"cve_id":"CVE-2025-23208","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23208","fixed":"2.1.2.","last_modified":"2025-01-22T14:27:12.141Z","patch_url":"https://github.com/project-zot/zot/commit/002ac62d8a15bf0cba010b3ba7bde86f9837b613","primary_source":"","published":"2025-01-17T22:24:09.406Z"},{"affected":"< 2.1.0","affected_versions_present":true,"cve_id":"CVE-2024-39897","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39897","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:33:11.364Z","patch_url":"https://github.com/project-zot/zot/commit/aaee0220e46bdadd12115ac67c19f9d3153eb1df","primary_source":"","published":"2024-07-09T18:48:24.335Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"project-zot"}}