{"api_version":"v1","generated_at":"2026-10-07T06:55:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-sinatra-sinatra-7085f94eabcc","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/sinatra","name":"sinatra","next_cursor":null,"observations":[{"affected":"< 4.2.0","affected_versions_present":true,"cve_id":"CVE-2025-61921","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61921","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-10T20:54:47.627Z","patch_url":"https://github.com/sinatra/sinatra/pull/1823","primary_source":"","published":"2025-10-10T19:28:10.688Z"},{"affected":">= 3.0, < 3.0.4; >= 2.0, < 2.2.3","affected_versions_present":true,"cve_id":"CVE-2022-45442","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-45442","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-04T16:09:56.861Z","patch_url":"https://github.com/sinatra/sinatra/commit/ea8fc9495a350f7551b39e3025bfcd06f49f363b","primary_source":"","published":"2022-11-28T00:00:00.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"sinatra"}}