{"api_version":"v1","generated_at":"2026-10-09T13:45:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-publisher-not-identified-harness-8173dc5f6e4b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/harness","name":"Harness","next_cursor":null,"observations":[{"affected":"2.28.0; 2.28.1; 2.28.2","affected_versions_present":true,"cve_id":"CVE-2026-15036","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-15036","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-08T15:38:36.035Z","patch_url":"","primary_source":"","published":"2026-07-08T14:30:07.802Z"},{"affected":"3.3.0","affected_versions_present":true,"cve_id":"CVE-2025-10761","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-10761","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-22T14:08:20.975Z","patch_url":"","primary_source":"","published":"2025-09-21T03:02:08.657Z"},{"affected":"3.3.0","affected_versions_present":true,"cve_id":"CVE-2025-10760","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-10760","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-22T14:10:36.828Z","patch_url":"","primary_source":"","published":"2025-09-21T02:32:06.125Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Publisher not identified"}}