{"api_version":"v1","generated_at":"2026-10-10T04:35:00+00:00","product":{"cve_count":7,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-bookwyrm-social-bookwyrm-1b1d2d24a5d1","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"bookwyrm","next_cursor":null,"observations":[{"affected":"bookwyrm: \u2264 0.9.1","affected_versions_present":true,"cve_id":"CVE-2026-86113","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86113","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:21:00.528Z","patch_url":"","primary_source":"","published":"2026-09-05T09:59:04.683Z"},{"affected":"bookwyrm: \u2264 0.9.1","affected_versions_present":true,"cve_id":"CVE-2026-86112","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86112","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:20:59.482Z","patch_url":"","primary_source":"","published":"2026-09-05T09:59:04.004Z"},{"affected":"bookwyrm: \u2264 0.9.1","affected_versions_present":true,"cve_id":"CVE-2026-86111","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86111","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:20:58.524Z","patch_url":"","primary_source":"","published":"2026-09-05T09:59:03.330Z"},{"affected":"< 0.4.5","affected_versions_present":true,"cve_id":"CVE-2022-35953","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-35953","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T17:42:29.535Z","patch_url":"https://huntr.dev/bounties/67ca22bd-19c6-466b-955a-b1ee2da0c575/","primary_source":"","published":"2022-08-12T20:15:13.000Z"},{"affected":"< 0.4.5","affected_versions_present":true,"cve_id":"CVE-2022-35925","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-35925","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T17:43:24.043Z","patch_url":"https://www.github.com/bookwyrm-social/bookwyrm/commit/7bbe42fb30a79a26115524d18b697d895563c92f","primary_source":"","published":"2022-08-02T20:15:15.000Z"},{"affected":"< 0.4.1","affected_versions_present":true,"cve_id":"CVE-2022-31136","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-31136","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:04:09.995Z","patch_url":"https://github.com/bookwyrm-social/bookwyrm/commit/fe33fdcf564a6a5667aef75d5456bea08feab50d","primary_source":"","published":"2022-07-07T17:55:13.000Z"},{"affected":"< 0.3.0","affected_versions_present":true,"cve_id":"CVE-2022-23644","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-23644","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T19:03:06.994Z","patch_url":"","primary_source":"","published":"2022-02-16T18:20:09.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"bookwyrm-social"}}