{"api_version":"v1","generated_at":"2026-10-09T06:40:00+00:00","product":{"cve_count":14,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-chatwoot-chatwoot-chatwoot-466ba1fefc1d","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"chatwoot/chatwoot","next_cursor":null,"observations":[{"affected":"unspecified < 3.5.2","affected_versions_present":true,"cve_id":"CVE-2024-0640","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-0640","fixed":"3.5.2.","last_modified":"2025-03-20T14:25:04.236Z","patch_url":"https://huntr.com/bounties/08b3bebf-ce3c-4416-b75e-1927ba61de85","primary_source":"","published":"2025-03-20T10:10:52.310Z"},{"affected":"unspecified < 2.4.0","affected_versions_present":true,"cve_id":"CVE-2021-3740","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-3740","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-15T19:03:09.228Z","patch_url":"https://github.com/chatwoot/chatwoot/commit/6fdd4a29969be8423f31890b807d27d13627c50c","primary_source":"","published":"2024-11-15T10:57:09.236Z"},{"affected":"unspecified < 2.5.0","affected_versions_present":true,"cve_id":"CVE-2021-3742","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-3742","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-18T14:53:23.071Z","patch_url":"","primary_source":"","published":"2024-11-15T10:51:25.968Z"},{"affected":"unspecified < 2.6","affected_versions_present":true,"cve_id":"CVE-2021-3741","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-3741","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-20T22:36:41.760Z","patch_url":"","primary_source":"","published":"2024-11-15T10:51:22.667Z"},{"affected":"unspecified < 2.14.0","affected_versions_present":true,"cve_id":"CVE-2023-2109","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-2109","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-05T21:23:18.784Z","patch_url":"https://github.com/chatwoot/chatwoot/commit/a06a5a574ad908b0ef2db7b47d05c3774eeb493d","primary_source":"","published":"2023-04-17T00:00:00.000Z"},{"affected":"unspecified < v2.10.0","affected_versions_present":true,"cve_id":"CVE-2022-3741","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3741","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-09T19:19:52.573Z","patch_url":"https://huntr.dev/bounties/46f6e07e-f438-4540-938a-510047f987d0","primary_source":"","published":"2022-10-28T00:00:00.000Z"},{"affected":"unspecified < 2.8","affected_versions_present":true,"cve_id":"CVE-2022-2901","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-2901","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:53:00.430Z","patch_url":"https://huntr.dev/bounties/cf46e0a6-f1b5-4959-a952-be9e4bac03fe","primary_source":"","published":"2022-09-06T09:15:12.000Z"},{"affected":"unspecified < 2.7.0","affected_versions_present":true,"cve_id":"CVE-2022-0542","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-0542","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T23:32:46.113Z","patch_url":"https://huntr.dev/bounties/e6469ba6-03a2-4b17-8b4e-8932ecd0f7ac","primary_source":"","published":"2022-08-19T17:55:09.000Z"},{"affected":"unspecified < 2.6.0","affected_versions_present":true,"cve_id":"CVE-2022-1021","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1021","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T23:47:43.285Z","patch_url":"https://huntr.dev/bounties/a8187478-75e1-4d62-b894-651269401ca3","primary_source":"","published":"2022-08-19T12:40:10.000Z"},{"affected":"unspecified < 2.5.0","affected_versions_present":true,"cve_id":"CVE-2022-1022","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1022","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T23:47:43.300Z","patch_url":"https://huntr.dev/bounties/2e4ac6b5-7357-415d-9633-65c636b20e94","primary_source":"","published":"2022-04-21T14:25:12.000Z"},{"affected":"unspecified < v2.2","affected_versions_present":true,"cve_id":"CVE-2021-3813","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-3813","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T17:09:08.818Z","patch_url":"https://huntr.dev/bounties/36f02c4f-cf1c-479e-a1ad-091a1ac7cb56","primary_source":"","published":"2022-02-09T14:15:11.000Z"},{"affected":"unspecified < 2.2.0","affected_versions_present":true,"cve_id":"CVE-2022-0527","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-0527","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T23:32:46.234Z","patch_url":"https://huntr.dev/bounties/a2f598f6-c142-449a-96f8-b4b2f7a9e228","primary_source":"","published":"2022-02-09T04:20:11.000Z"},{"affected":"unspecified < 2.2.0","affected_versions_present":true,"cve_id":"CVE-2022-0526","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-0526","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T23:32:46.163Z","patch_url":"https://huntr.dev/bounties/d8f5ce74-2a00-4813-b220-70af771b0edd","primary_source":"","published":"2022-02-09T04:15:10.000Z"},{"affected":"unspecified \u2264 1.11.1","affected_versions_present":true,"cve_id":"CVE-2021-3649","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-3649","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T17:01:07.709Z","patch_url":"https://huntr.dev/bounties/1625088985607-chatwoot/chatwoot","primary_source":"","published":"2021-07-16T13:33:25.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"chatwoot"}}