{"api_version":"v1","generated_at":"2026-10-08T05:10:00+00:00","product":{"cve_count":5,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-step-security-harden-runner-88574d85e6de","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"harden-runner","next_cursor":null,"observations":[{"affected":"< 2.16","affected_versions_present":true,"cve_id":"CVE-2026-32947","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32947","fixed":"2.16.0.","last_modified":"2026-03-20T16:05:57.731Z","patch_url":"https://github.com/step-security/harden-runner/security/advisories/GHSA-46g3-37rh-v698","primary_source":"","published":"2026-03-20T04:03:03.687Z"},{"affected":"< 2.16.0","affected_versions_present":true,"cve_id":"CVE-2026-32946","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32946","fixed":"2.16.0.","last_modified":"2026-03-20T15:47:42.018Z","patch_url":"https://github.com/step-security/harden-runner/security/advisories/GHSA-g699-3x6g-wm3g","primary_source":"","published":"2026-03-20T03:58:40.557Z"},{"affected":"< 2.14.2","affected_versions_present":true,"cve_id":"CVE-2026-25598","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25598","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-10T16:00:59.966Z","patch_url":"","primary_source":"","published":"2026-02-09T18:58:57.074Z"},{"affected":">= 0.12.0, < 2.12.0","affected_versions_present":true,"cve_id":"CVE-2025-32955","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32955","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-22T02:19:09.748Z","patch_url":"","primary_source":"","published":"2025-04-21T20:45:58.105Z"},{"affected":"< 2.10.2","affected_versions_present":true,"cve_id":"CVE-2024-52587","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-52587","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-19T14:38:08.418Z","patch_url":"","primary_source":"","published":"2024-11-18T22:03:15.657Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"step-security"}}