{"api_version":"v1","generated_at":"2026-10-08T10:35:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-shlinkio-shlink-b3012fb6a8f6","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/shlink","name":"shlink","next_cursor":null,"observations":[{"affected":"shlink: \u2264 5.1.6","affected_versions_present":true,"cve_id":"CVE-2026-92760","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92760","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T15:01:06.137Z","patch_url":"","primary_source":"","published":"2026-09-16T20:32:27.683Z"},{"affected":"5.0.0 \u2264 5.1.5","affected_versions_present":true,"cve_id":"CVE-2026-18738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18738","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-04T15:05:04.836Z","patch_url":"","primary_source":"","published":"2026-08-03T20:53:57.661Z"},{"affected":"3.3.1 \u2264 5.1.5","affected_versions_present":true,"cve_id":"CVE-2026-18737","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18737","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-05T14:22:39.904Z","patch_url":"","primary_source":"","published":"2026-08-03T20:40:28.334Z"},{"affected":"2.6.0 \u2264 5.1.5","affected_versions_present":true,"cve_id":"CVE-2026-18736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18736","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-04T13:45:06.977Z","patch_url":"","primary_source":"","published":"2026-08-03T20:15:22.814Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"shlinkio"}}