{"api_version":"v1","generated_at":"2026-10-06T11:50:00+00:00","product":{"cve_count":38,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-bigbluebutton-bigbluebutton-79ff3744bede","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/bigbluebutton","name":"bigbluebutton","next_cursor":null,"observations":[{"affected":"bigbluebutton: < 3.0.29","affected_versions_present":true,"cve_id":"CVE-2026-55489","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55489","fixed":"3.0.29.","last_modified":"2026-08-21T11:23:38.257Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-jxpq-r3h3-p75g","primary_source":"","published":"2026-08-20T21:36:35.127Z"},{"affected":"bigbluebutton: < 3.0.29","affected_versions_present":true,"cve_id":"CVE-2026-55491","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55491","fixed":"3.0.29.","last_modified":"2026-08-21T15:50:11.735Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-57p5-c888-74f9","primary_source":"","published":"2026-08-20T21:35:42.546Z"},{"affected":"bigbluebutton: < 3.0.23","affected_versions_present":true,"cve_id":"CVE-2026-46355","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46355","fixed":"3.0.23.","last_modified":"2026-08-25T15:26:14.221Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-38fw-2gq7-ccgr","primary_source":"","published":"2026-08-20T21:34:40.529Z"},{"affected":"bigbluebutton: < 3.0.23","affected_versions_present":true,"cve_id":"CVE-2026-46682","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46682","fixed":"3.0.23.","last_modified":"2026-08-21T21:45:22.172Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-gfv2-46v4-jvw5","primary_source":"","published":"2026-08-20T21:33:56.431Z"},{"affected":"< 3.0.21","affected_versions_present":true,"cve_id":"CVE-2026-46353","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46353","fixed":"3.0.21.","last_modified":"2026-07-16T18:41:31.957Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-43hc-5g2m-cqff","primary_source":"","published":"2026-07-16T18:06:54.645Z"},{"affected":"< 3.0.23","affected_versions_present":true,"cve_id":"CVE-2026-46404","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46404","fixed":"3.0.23.","last_modified":"2026-07-17T18:06:48.388Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-xqm3-6q7q-4v5h","primary_source":"","published":"2026-07-16T18:04:11.116Z"},{"affected":"< 3.0.21","affected_versions_present":true,"cve_id":"CVE-2026-46351","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46351","fixed":"3.0.21.","last_modified":"2026-07-17T13:59:11.141Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-7959-pf2v-xc4h","primary_source":"","published":"2026-07-16T17:58:53.070Z"},{"affected":"< 3.0.19; < 1.7.0; < 5.4.3","affected_versions_present":true,"cve_id":"CVE-2026-27737","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27737","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T12:11:53.931Z","patch_url":"","primary_source":"","published":"2026-05-18T21:11:17.611Z"},{"affected":"< 3.0.24","affected_versions_present":true,"cve_id":"CVE-2026-41127","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41127","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T13:12:52.166Z","patch_url":"","primary_source":"","published":"2026-04-21T23:24:46.671Z"},{"affected":"< 3.0.24","affected_versions_present":true,"cve_id":"CVE-2026-41126","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41126","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T14:16:24.217Z","patch_url":"","primary_source":"","published":"2026-04-21T23:22:34.575Z"},{"affected":">= 3.0.0, < 3.0.20","affected_versions_present":true,"cve_id":"CVE-2026-27736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27736","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T21:33:41.504Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-65cv-rg9f-qqrx","primary_source":"","published":"2026-02-25T16:27:01.507Z"},{"affected":"< 3.0.20","affected_versions_present":true,"cve_id":"CVE-2026-27467","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27467","fixed":"3.0.20.","last_modified":"2026-02-24T18:49:12.218Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-6gj9-5rhm-68j8","primary_source":"","published":"2026-02-21T07:18:26.156Z"},{"affected":"< 3.0.22","affected_versions_present":true,"cve_id":"CVE-2026-27466","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27466","fixed":"3.0.22.","last_modified":"2026-02-24T18:48:15.788Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wmhx-qw2p-w6gc","primary_source":"","published":"2026-02-21T07:14:49.851Z"},{"affected":"< 3.0.13","affected_versions_present":true,"cve_id":"CVE-2025-61602","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61602","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-10T14:30:50.944Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/pull/23651","primary_source":"","published":"2025-10-09T20:40:04.658Z"},{"affected":"< 3.0.13","affected_versions_present":true,"cve_id":"CVE-2025-61601","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61601","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-15T19:47:14.421Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/pull/23662","primary_source":"","published":"2025-10-09T20:29:25.006Z"},{"affected":"< 3.0.13","affected_versions_present":true,"cve_id":"CVE-2025-55200","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55200","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-09T19:08:17.415Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/pull/23693","primary_source":"","published":"2025-10-09T18:51:57.884Z"},{"affected":"< 2.6.18; >= 2.7.0, < 2.7.8; >= 2.8.0, < 3.0.0-alpha.7","affected_versions_present":true,"cve_id":"CVE-2024-39302","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39302","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T04:19:20.698Z","patch_url":"","primary_source":"","published":"2024-06-28T20:51:59.312Z"},{"affected":"< 2.6.18; >= 2.7.0, < 2.7.8; >= 2.8.0, < 3.0.0-alpha.7","affected_versions_present":true,"cve_id":"CVE-2024-38518","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38518","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T04:12:25.127Z","patch_url":"","primary_source":"","published":"2024-06-28T20:25:40.743Z"},{"affected":"< 2.6.12; >= 2.7.0-alpha.1, < 2.7.0-rc.1","affected_versions_present":true,"cve_id":"CVE-2023-43798","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43798","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-05T20:19:17.331Z","patch_url":"","primary_source":"","published":"2023-10-30T22:24:59.109Z"},{"affected":"< 2.6.11; >= 2.7.0-alpha.1, < 2.7.0-beta.3","affected_versions_present":true,"cve_id":"CVE-2023-43797","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43797","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-05T20:20:01.467Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/commit/304bc851a00558f99a908880f4ac44234a074c9d","primary_source":"","published":"2023-10-30T22:18:11.821Z"},{"affected":"< 2.6.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2023-42804","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42804","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-05T20:23:14.540Z","patch_url":"","primary_source":"","published":"2023-10-30T18:14:41.419Z"},{"affected":"< 2.6.0-beta.2","affected_versions_present":true,"cve_id":"CVE-2023-42803","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42803","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-06T20:12:00.883Z","patch_url":"","primary_source":"","published":"2023-10-30T18:11:35.630Z"},{"affected":">= 2.6.0, < 2.6.9; < 2.5.18","affected_versions_present":true,"cve_id":"CVE-2023-33176","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33176","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-12T15:18:46.803Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/pull/18045","primary_source":"","published":"2023-06-26T19:50:25.212Z"},{"affected":"< 2.4-rc-6","affected_versions_present":true,"cve_id":"CVE-2022-23488","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-23488","fixed":"2.4-rc-6.","last_modified":"2025-04-17T14:33:18.205Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-j5g3-f74q-rvfq","primary_source":"","published":"2022-12-17T00:28:46.567Z"},{"affected":"< 2.4.0","affected_versions_present":true,"cve_id":"CVE-2022-23490","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-23490","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-17T14:34:58.102Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4qgc-xhw5-6qfg","primary_source":"","published":"2022-12-16T21:02:30.109Z"},{"affected":">= 2.4-alpha-1, < 2.4.0","affected_versions_present":true,"cve_id":"CVE-2022-41964","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41964","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-17T15:34:13.275Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-fgmj-rx7j-fqr4","primary_source":"","published":"2022-12-16T17:17:15.394Z"},{"affected":"< 2.4.3","affected_versions_present":true,"cve_id":"CVE-2022-41963","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41963","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-17T15:35:44.332Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-v6p9-926c-6qfp","primary_source":"","published":"2022-12-16T13:00:42.459Z"},{"affected":"<2.4-rc-6","affected_versions_present":true,"cve_id":"CVE-2022-41962","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41962","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-17T15:37:50.823Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-88qf-33qm-9mm7","primary_source":"","published":"2022-12-16T12:45:06.499Z"},{"affected":"< v2.4-rc-6","affected_versions_present":true,"cve_id":"CVE-2022-41961","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41961","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-17T17:24:47.412Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wxjp-h88g-7fqg","primary_source":"","published":"2022-12-16T12:24:43.465Z"},{"affected":"< 2.4.3","affected_versions_present":true,"cve_id":"CVE-2022-41960","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41960","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-17T18:07:27.624Z","patch_url":"","primary_source":"","published":"2022-12-15T23:56:26.500Z"},{"affected":"< 2.4.8","affected_versions_present":true,"cve_id":"CVE-2022-31064","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-31064","fixed":"2.4.8","last_modified":"2025-04-22T17:53:58.466Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/pull/15090","primary_source":"","published":"2022-06-27T19:50:14.000Z"},{"affected":"< 2.4.8","affected_versions_present":true,"cve_id":"CVE-2022-31065","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-31065","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:07:44.554Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-8m2p-7qv3-qff7","primary_source":"","published":"2022-06-27T19:45:21.000Z"},{"affected":">= 2.2, < 2.3.18; >= 2.4-alpha-1, < 2.4-rc-6","affected_versions_present":true,"cve_id":"CVE-2022-29235","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29235","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T06:17:54.233Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-x82p-j22f-v4q6","primary_source":"","published":"2022-06-01T23:25:18.000Z"},{"affected":">= 2.2, < 2.3.18; >= 2.4-alpha-1, < 2.4-rc-6","affected_versions_present":true,"cve_id":"CVE-2022-29236","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29236","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T06:17:54.254Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-p93g-r9gm-9v6r","primary_source":"","published":"2022-06-01T23:25:12.000Z"},{"affected":">= 2.2, < 2.3.18; >= 2.4, < 2.4.1","affected_versions_present":true,"cve_id":"CVE-2022-29234","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29234","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:20:10.802Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-36vc-c338-6xjv","primary_source":"","published":"2022-06-01T23:20:14.000Z"},{"affected":">= 2.2, < 2.3.18; >= 2.4-alpha-1, < 2.4-rc-1","affected_versions_present":true,"cve_id":"CVE-2022-29233","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29233","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:20:17.607Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3mr9-p9gw-cf33","primary_source":"","published":"2022-06-01T23:15:15.000Z"},{"affected":">= 2.2, < 2.3.9; >= 2.4-alpha-1, < 2.4-beta-1","affected_versions_present":true,"cve_id":"CVE-2022-29232","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29232","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:20:24.731Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3fqh-p4qr-vfm9","primary_source":"","published":"2022-06-01T22:25:12.000Z"},{"affected":">= 2.2, < 2.3.19; >= 2.4.0, < 2.4.7; >= 2.5-alpha-1, < 2.5.0-beta.2","affected_versions_present":true,"cve_id":"CVE-2022-29169","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29169","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:20:31.969Z","patch_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-rwrv-p665-4vwp","primary_source":"","published":"2022-06-01T22:20:12.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"bigbluebutton"}}