{"api_version":"v1","generated_at":"2026-10-07T18:10:00+00:00","product":{"cve_count":1,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-shivammathur-setup-php-57513d441a9b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/setup-php","name":"setup-php","next_cursor":null,"observations":[{"affected":">= 2.25.0, < 2.37.1","affected_versions_present":true,"cve_id":"CVE-2026-46420","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46420","fixed":"2.37.1.","last_modified":"2026-07-20T18:15:56.324Z","patch_url":"https://github.com/shivammathur/setup-php/security/advisories/GHSA-pqwm-q9pv-ph8r","primary_source":"","published":"2026-07-17T19:51:10.253Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"shivammathur"}}