{"api_version":"v1","generated_at":"2026-10-08T03:10:00+00:00","product":{"cve_count":7,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-simplemachines-smf-7efdc6a8f901","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/smf","name":"SMF","next_cursor":null,"observations":[{"affected":"SMF: \u2264 2.1.7","affected_versions_present":true,"cve_id":"CVE-2026-43621","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-43621","fixed":"SMF: 6f0dc61958aa86a4b436a222f6176812ed5bbb95","last_modified":"2026-10-01T15:20:01.095Z","patch_url":"https://github.com/SimpleMachines/SMF/commit/6f0dc61958aa86a4b436a222f6176812ed5bbb95","primary_source":"","published":"2026-08-26T21:27:52.842Z"},{"affected":"2.1.0 < 2.1.7; b4d23dfd74a511587c605f9d294cefc3a75b4b26","affected_versions_present":true,"cve_id":"CVE-2026-61520","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61520","fixed":"4bf35cf9e45573a5f55a6f52995086c1da89c096; 3.0.0","last_modified":"2026-07-28T01:49:53.198Z","patch_url":"https://github.com/SimpleMachines/SMF/commit/4bf35cf9e45573a5f55a6f52995086c1da89c096","primary_source":"","published":"2026-07-14T20:17:15.901Z"},{"affected":"2.1.0 \u2264 2.1.7; 3.0.0","affected_versions_present":true,"cve_id":"CVE-2026-39903","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39903","fixed":"7d048f8d66aab9af51cd6ee110fbad103cf673e8; a7875e876a647572dd4c45da881b875092caac3d","last_modified":"2026-07-28T01:48:45.607Z","patch_url":"https://github.com/SimpleMachines/SMF/pull/9182","primary_source":"","published":"2026-07-10T16:03:20.983Z"},{"affected":"2.1.4","affected_versions_present":true,"cve_id":"CVE-2025-2583","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-2583","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-21T12:41:44.675Z","patch_url":"","primary_source":"","published":"2025-03-21T06:31:06.127Z"},{"affected":"2.1.4","affected_versions_present":true,"cve_id":"CVE-2025-2582","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-2582","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-21T12:41:42.523Z","patch_url":"","primary_source":"","published":"2025-03-21T06:31:04.195Z"},{"affected":"2.1.4","affected_versions_present":true,"cve_id":"CVE-2024-7438","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-7438","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-10T06:26:12.241Z","patch_url":"","primary_source":"","published":"2024-08-03T15:31:03.669Z"},{"affected":"2.1.4","affected_versions_present":true,"cve_id":"CVE-2024-7437","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-7437","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-10T06:26:10.103Z","patch_url":"","primary_source":"","published":"2024-08-03T14:31:04.930Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"SimpleMachines"}}