{"api_version":"v1","generated_at":"2026-10-09T11:45:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-shuup-shuup-30583bb8641e","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"shuup","next_cursor":null,"observations":[{"affected":"1.6.0 < *","affected_versions_present":true,"cve_id":"CVE-2021-25963","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-25963","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-30T16:26:18.839Z","patch_url":"https://github.com/shuup/shuup/commit/75714c37e32796eb7cbb0d977af5bcaa26573588","primary_source":"","published":"2021-09-30T07:50:11.121Z"},{"affected":"0.4.2 < *","affected_versions_present":true,"cve_id":"CVE-2021-25962","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-25962","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-17T02:11:12.333Z","patch_url":"https://github.com/shuup/shuup/commit/0a2db392e8518410c282412561461cd8797eea51","primary_source":"","published":"2021-09-29T13:55:10.208Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"shuup"}}