{"api_version":"v1","generated_at":"2026-10-09T07:15:00+00:00","product":{"cve_count":13,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-zenhive-mpp-73bf37d3eb31","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mpp","name":"mpp","next_cursor":null,"observations":[{"affected":"mpp: 0.14.0 < 0.16.2, db464dfa9a86ccda58f0827101f6da6bd8aafa78 < 4b6eaec02af0e8485cfb4ff68f467d075ed5dd6f","affected_versions_present":true,"cve_id":"CVE-2026-87119","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87119","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-22T12:02:31.484Z","patch_url":"","primary_source":"","published":"2026-09-22T11:16:56.232Z"},{"affected":"mpp: 0.14.0 < 0.16.2, 82df569c898be1137189e3648e1edb4af6363651 < 7270edc1dcfb58250cc5ee812876609206564165","affected_versions_present":true,"cve_id":"CVE-2026-89420","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-89420","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-22T12:04:43.291Z","patch_url":"","primary_source":"","published":"2026-09-22T11:16:29.573Z"},{"affected":"mpp: 0.2.0 < 0.16.2, f8904666061fbab695874856d8fcd02c471dfe1b < e12bd4a1cea2e97c2a01fc059c48e5594a7b4a43","affected_versions_present":true,"cve_id":"CVE-2026-88255","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88255","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T14:49:57.782Z","patch_url":"","primary_source":"","published":"2026-09-16T08:24:40.446Z"},{"affected":"mpp: 0.1.0 < 0.16.2, 2d4d1d94aae7790ae0623063961adbeef171fa71 < 2fd91a5ecbd0b0ad2a4ac202b79659e8126dbc0b","affected_versions_present":true,"cve_id":"CVE-2026-89186","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-89186","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T14:50:44.399Z","patch_url":"","primary_source":"","published":"2026-09-16T08:24:15.058Z"},{"affected":"0.2.0 < 0.16.1; d29d54e507918db00a5b65d90136b73166c017d7 < 0482572b47e1ffe1537ab80ab613d47b92833c2d","affected_versions_present":true,"cve_id":"CVE-2026-82750","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82750","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T18:25:42.388Z","patch_url":"","primary_source":"","published":"2026-09-06T16:08:41.089Z"},{"affected":"0.2.0 < 0.16.1; d29d54e507918db00a5b65d90136b73166c017d7 < 0482572b47e1ffe1537ab80ab613d47b92833c2d","affected_versions_present":true,"cve_id":"CVE-2026-82751","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82751","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T18:24:19.598Z","patch_url":"","primary_source":"","published":"2026-09-06T16:07:26.407Z"},{"affected":"0.3.0 < 0.6.3; 65b9e425ce27631c786a5b380b5e4c5ae607ec6d < ecc038088b1cda09ad8a84acc6cc112addb4a68f","affected_versions_present":true,"cve_id":"CVE-2026-67581","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-67581","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-08-19T18:44:31.945Z","patch_url":"https://github.com/ZenHive/mpp/commit/ecc038088b1cda09ad8a84acc6cc112addb4a68f","primary_source":"","published":"2026-08-19T17:20:09.606Z"},{"affected":"0.2.0 < 0.12.0; d29d54e507918db00a5b65d90136b73166c017d7 < ddc46868fba57ccebb567c04709812b466123076","affected_versions_present":true,"cve_id":"CVE-2026-73541","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73541","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-08-19T18:47:04.542Z","patch_url":"https://github.com/ZenHive/mpp/commit/ddc46868fba57ccebb567c04709812b466123076","primary_source":"","published":"2026-08-19T17:20:00.286Z"},{"affected":"0.6.1 < 0.6.4; 542a525563c2fcedd670b593437deca81c6797a4 < 2207d7f456ae14c1d3fcacc6f635bf4f8cee1a34","affected_versions_present":true,"cve_id":"CVE-2026-73136","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73136","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-08-19T18:54:00.153Z","patch_url":"https://github.com/ZenHive/mpp/commit/2207d7f456ae14c1d3fcacc6f635bf4f8cee1a34","primary_source":"","published":"2026-08-19T17:19:52.413Z"},{"affected":"0.2.0 < 0.6.1; f8904666061fbab695874856d8fcd02c471dfe1b < 46c5b0e1311da7d92190dc7d9ea89027a1d365e9","affected_versions_present":true,"cve_id":"CVE-2026-73829","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73829","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-08-19T18:58:33.322Z","patch_url":"https://github.com/ZenHive/mpp/commit/46c5b0e1311da7d92190dc7d9ea89027a1d365e9","primary_source":"","published":"2026-08-19T17:19:43.696Z"},{"affected":"0.2.0 < 0.6.0; d29d54e507918db00a5b65d90136b73166c017d7 < d84e3e528db39654540c2035ea0fbdf7b950d3d1","affected_versions_present":true,"cve_id":"CVE-2026-59252","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59252","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-18T04:12:42.459Z","patch_url":"","primary_source":"","published":"2026-07-17T10:11:54.436Z"},{"affected":"0.2.0 < 0.6.0; d29d54e507918db00a5b65d90136b73166c017d7 < 5d6338e2334084c5f2a78cfcca474830733ed7e8","affected_versions_present":true,"cve_id":"CVE-2026-59694","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59694","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-18T04:12:36.335Z","patch_url":"","primary_source":"","published":"2026-07-17T10:11:49.192Z"},{"affected":"0.2.0 < 0.6.0; d29d54e507918db00a5b65d90136b73166c017d7 < 5d6338e2334084c5f2a78cfcca474830733ed7e8","affected_versions_present":true,"cve_id":"CVE-2026-59695","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59695","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-18T04:12:26.916Z","patch_url":"","primary_source":"","published":"2026-07-17T10:11:43.674Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"ZenHive"}}