{"api_version":"v1","generated_at":"2026-10-09T23:50:00+00:00","product":{"cve_count":16,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-tandoorrecipes-recipes-d0a194f9e0e5","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/recipes","name":"recipes","next_cursor":null,"observations":[{"affected":"< 2.6.5","affected_versions_present":true,"cve_id":"CVE-2026-27460","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27460","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-13T15:35:58.210Z","patch_url":"","primary_source":"","published":"2026-04-10T19:09:05.883Z"},{"affected":"< 2.6.4","affected_versions_present":true,"cve_id":"CVE-2026-35489","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35489","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T15:58:45.810Z","patch_url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-8w8h-3pv2-3554","primary_source":"","published":"2026-04-07T14:53:18.333Z"},{"affected":"< 2.6.4","affected_versions_present":true,"cve_id":"CVE-2026-35488","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35488","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T14:48:54.946Z","patch_url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xvmf-cfrq-4j8f","primary_source":"","published":"2026-04-07T14:51:25.861Z"},{"affected":"< 2.6.4","affected_versions_present":true,"cve_id":"CVE-2026-35046","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35046","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T15:59:42.719Z","patch_url":"","primary_source":"","published":"2026-04-06T17:20:00.579Z"},{"affected":"< 2.6.4","affected_versions_present":true,"cve_id":"CVE-2026-35045","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35045","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T14:29:07.687Z","patch_url":"","primary_source":"","published":"2026-04-06T17:17:57.647Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-33152","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33152","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-26T19:52:09.977Z","patch_url":"","primary_source":"","published":"2026-03-26T19:07:39.225Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-33153","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33153","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-26T19:52:10.149Z","patch_url":"","primary_source":"","published":"2026-03-26T19:06:16.020Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-33148","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33148","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-26T19:52:10.290Z","patch_url":"","primary_source":"","published":"2026-03-26T19:04:25.511Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-29055","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29055","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T19:49:03.925Z","patch_url":"","primary_source":"","published":"2026-03-26T19:03:06.969Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-28503","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28503","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T13:58:12.010Z","patch_url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-6qpw-gwcq-68fv","primary_source":"","published":"2026-03-26T18:55:53.094Z"},{"affected":"<= 2.5.3","affected_versions_present":true,"cve_id":"CVE-2026-33149","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33149","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T14:55:52.270Z","patch_url":"","primary_source":"","published":"2026-03-26T18:53:22.885Z"},{"affected":"< 2.5.1","affected_versions_present":true,"cve_id":"CVE-2026-25991","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25991","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-13T19:58:00.752Z","patch_url":"https://github.com/TandoorRecipes/recipes/commit/fdf22c5e745740db1fec29d6b4bd3df5d340e6ab","primary_source":"","published":"2026-02-13T18:29:10.900Z"},{"affected":"< 2.5.1","affected_versions_present":true,"cve_id":"CVE-2026-25964","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25964","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-13T20:01:40.545Z","patch_url":"https://github.com/TandoorRecipes/recipes/commit/f7f3524609451ab0b5a4fd760ad0af147d8ed794","primary_source":"","published":"2026-02-13T18:27:08.973Z"},{"affected":"< 1.5.28","affected_versions_present":true,"cve_id":"CVE-2025-23213","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23213","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-28T15:51:05.550Z","patch_url":"https://github.com/TandoorRecipes/recipes/commit/3e37d11c6a3841a00eb27670d1d003f1a713e1cf","primary_source":"","published":"2025-01-28T15:31:19.544Z"},{"affected":"< 1.5.28","affected_versions_present":true,"cve_id":"CVE-2025-23212","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23212","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-28T16:10:06.786Z","patch_url":"https://github.com/TandoorRecipes/recipes/commit/36e83a9d0108ac56b9538b45ead57efc8b97c5ff","primary_source":"","published":"2025-01-28T15:29:07.948Z"},{"affected":"< 1.5.24","affected_versions_present":true,"cve_id":"CVE-2025-23211","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23211","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-28T16:15:33.081Z","patch_url":"https://github.com/TandoorRecipes/recipes/commit/e6087d5129cc9d0c24278948872377e66c2a2c20","primary_source":"","published":"2025-01-28T15:24:27.397Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"TandoorRecipes"}}