{"api_version":"v1","generated_at":"2026-10-08T01:05:00+00:00","product":{"cve_count":8,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-bitwarden-server-0f0b10948f7c","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/server","name":"server","next_cursor":null,"observations":[{"affected":"server: < 2026.7.2","affected_versions_present":true,"cve_id":"CVE-2026-71959","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71959","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-17T18:18:08.136Z","patch_url":"","primary_source":"","published":"2026-08-10T13:56:05.142Z"},{"affected":"< 2026.6.0","affected_versions_present":true,"cve_id":"CVE-2026-60104","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-60104","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T22:03:31.357Z","patch_url":"https://github.com/bitwarden/server/pull/7615","primary_source":"","published":"2026-07-08T19:34:49.127Z"},{"affected":"< 2026.5.0","affected_versions_present":true,"cve_id":"CVE-2026-57522","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57522","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T21:34:33.848Z","patch_url":"https://sanjokkarki.com.np/blog/bitwarden-webhook-json-injection","primary_source":"","published":"2026-06-25T19:09:33.881Z"},{"affected":"< 2026.5.0","affected_versions_present":true,"cve_id":"CVE-2026-57521","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57521","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T21:34:33.143Z","patch_url":"https://sanjokkarki.com.np/blog/bitwarden-preview-invoice-idor","primary_source":"","published":"2026-06-25T19:09:08.990Z"},{"affected":"< 2026.5.0","affected_versions_present":true,"cve_id":"CVE-2026-57520","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57520","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T21:34:32.428Z","patch_url":"https://sanjokkarki.com.np/blog/bitwarden-bulk-remove-admin","primary_source":"","published":"2026-06-25T19:08:41.189Z"},{"affected":"< 2026.4.1","affected_versions_present":true,"cve_id":"CVE-2026-43640","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-43640","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T20:01:13.282Z","patch_url":"https://github.com/bitwarden/server/pull/7403","primary_source":"","published":"2026-05-11T17:14:37.931Z"},{"affected":"< 2026.4.0","affected_versions_present":true,"cve_id":"CVE-2026-43639","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-43639","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T20:01:12.570Z","patch_url":"https://github.com/bitwarden/server/pull/7372","primary_source":"","published":"2026-05-11T17:14:04.552Z"},{"affected":"< 2026.4.1","affected_versions_present":true,"cve_id":"CVE-2026-43638","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-43638","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T20:01:11.880Z","patch_url":"https://github.com/bitwarden/server/pull/7394","primary_source":"","published":"2026-05-11T17:13:31.801Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"bitwarden"}}