{"api_version":"v1","generated_at":"2026-10-08T17:35:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-seventhqueen-kleo-6f677e7dc3a8","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/kleo","name":"Kleo","next_cursor":null,"observations":[{"affected":"\u2264 5.5.0","affected_versions_present":true,"cve_id":"CVE-2025-64363","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64363","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T18:31:10.075Z","patch_url":"","primary_source":"","published":"2025-10-31T11:42:37.131Z"},{"affected":"\u2264 5.4.4","affected_versions_present":true,"cve_id":"CVE-2025-39367","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-39367","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:12:29.568Z","patch_url":"","primary_source":"","published":"2025-04-28T09:07:23.071Z"},{"affected":"\u2264 5.4.4","affected_versions_present":true,"cve_id":"CVE-2024-56209","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-56209","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:10:55.152Z","patch_url":"","primary_source":"","published":"2024-12-31T10:33:43.176Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"SeventhQueen"}}