{"api_version":"v1","generated_at":"2026-10-09T16:10:00+00:00","product":{"cve_count":69,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-churchcrm-crm-6e4a87a79f6e","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/crm","name":"CRM","next_cursor":"djE6NTA","observations":[{"affected":"< 7.4.0","affected_versions_present":true,"cve_id":"CVE-2026-58411","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58411","fixed":"7.4.0.","last_modified":"2026-07-21T19:05:39.783Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-p6j6-vrpg-4pp8","primary_source":"","published":"2026-07-13T21:05:18.739Z"},{"affected":"< 7.4.0","affected_versions_present":true,"cve_id":"CVE-2026-58410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58410","fixed":"7.4.0.","last_modified":"2026-07-14T13:07:30.546Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-jjcj-h3cm-p7x7","primary_source":"","published":"2026-07-13T20:26:17.070Z"},{"affected":"< 7.4.0","affected_versions_present":true,"cve_id":"CVE-2026-58409","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58409","fixed":"7.4.0.","last_modified":"2026-07-14T13:06:18.072Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-37mf-vq43-5qp9","primary_source":"","published":"2026-07-13T20:05:56.086Z"},{"affected":"< 7.4.0","affected_versions_present":true,"cve_id":"CVE-2026-58408","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58408","fixed":"7.4.0.","last_modified":"2026-07-14T12:57:34.313Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-4vj2-gm78-3q63","primary_source":"","published":"2026-07-13T19:43:48.352Z"},{"affected":"< 7.3.2","affected_versions_present":true,"cve_id":"CVE-2026-44548","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44548","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T15:05:29.129Z","patch_url":"","primary_source":"","published":"2026-05-12T22:33:34.256Z"},{"affected":">= 7.2.0, < 7.3.1","affected_versions_present":true,"cve_id":"CVE-2026-44547","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44547","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T15:36:49.207Z","patch_url":"","primary_source":"","published":"2026-05-12T22:30:15.737Z"},{"affected":"< 7.3.2","affected_versions_present":true,"cve_id":"CVE-2026-42288","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42288","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-18T14:35:42.523Z","patch_url":"","primary_source":"","published":"2026-05-12T22:25:33.352Z"},{"affected":"< 7.3.2","affected_versions_present":true,"cve_id":"CVE-2026-42289","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42289","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T12:36:48.339Z","patch_url":"","primary_source":"","published":"2026-05-12T22:23:25.126Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40593","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40593","fixed":"7.2.0.","last_modified":"2026-04-20T14:56:05.666Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-7h46-9f64-p49q","primary_source":"","published":"2026-04-18T00:02:59.606Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40581","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40581","fixed":"7.2.0.","last_modified":"2026-04-20T16:15:58.183Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-6qxv-xw9j-77pj","primary_source":"","published":"2026-04-17T23:51:32.765Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40485","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40485","fixed":"7.2.0.","last_modified":"2026-04-20T13:36:05.319Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-x2qh-xmhq-4jpx","primary_source":"","published":"2026-04-17T23:29:35.884Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40484","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40484","fixed":"7.2.0.","last_modified":"2026-04-20T14:56:29.684Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-2932-77f9-62fx","primary_source":"","published":"2026-04-17T23:25:06.319Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40483","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40483","fixed":"7.2.0.","last_modified":"2026-04-20T16:16:17.841Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-wjmf-w8gj-rx7g","primary_source":"","published":"2026-04-17T23:20:44.900Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40582","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40582","fixed":"7.2.0.","last_modified":"2026-04-20T14:56:36.921Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-8cwr-x83m-mh9x","primary_source":"","published":"2026-04-17T23:16:13.862Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40480","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40480","fixed":"7.2.0.","last_modified":"2026-04-20T16:16:00.433Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-5w59-32c8-933v","primary_source":"","published":"2026-04-17T23:07:30.126Z"},{"affected":"< 7.2.0","affected_versions_present":true,"cve_id":"CVE-2026-40482","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40482","fixed":"7.2.0.","last_modified":"2026-04-20T16:16:32.247Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-hc37-vx3w-34fg","primary_source":"","published":"2026-04-17T22:58:48.528Z"},{"affected":"< 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-39940","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39940","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-16T13:26:41.668Z","patch_url":"","primary_source":"","published":"2026-04-13T16:34:58.495Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39941","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39941","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-10T14:05:39.204Z","patch_url":"https://github.com/ChurchCRM/CRM/commit/d2f7f36e2ea342419026ddc4bc4ea8efbf5e7e98","primary_source":"","published":"2026-04-09T15:38:07.444Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39337","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39337","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:41:52.764Z","patch_url":"","primary_source":"","published":"2026-04-07T18:08:27.227Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39319","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39319","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T14:39:12.132Z","patch_url":"","primary_source":"","published":"2026-04-07T18:05:18.331Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39344","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39344","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T18:45:18.870Z","patch_url":"","primary_source":"","published":"2026-04-07T18:04:24.341Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39343","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39343","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:04.899Z","patch_url":"","primary_source":"","published":"2026-04-07T18:03:25.042Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39342","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39342","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:03:35.431Z","patch_url":"","primary_source":"","published":"2026-04-07T18:02:40.266Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39341","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39341","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T15:35:00.605Z","patch_url":"","primary_source":"","published":"2026-04-07T18:01:42.325Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39340","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39340","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T18:45:58.503Z","patch_url":"","primary_source":"","published":"2026-04-07T18:00:09.383Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39339","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39339","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:11.055Z","patch_url":"","primary_source":"","published":"2026-04-07T17:58:50.015Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39338","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39338","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T15:57:12.789Z","patch_url":"","primary_source":"","published":"2026-04-07T17:57:30.410Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39336","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39336","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:40:33.123Z","patch_url":"","primary_source":"","published":"2026-04-07T17:40:55.153Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39334","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39334","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:08:28.055Z","patch_url":"","primary_source":"","published":"2026-04-07T17:38:45.436Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39333","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39333","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:17.229Z","patch_url":"","primary_source":"","published":"2026-04-07T17:38:02.576Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39332","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39332","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T14:41:01.071Z","patch_url":"","primary_source":"","published":"2026-04-07T17:37:23.574Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39331","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39331","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:39:56.463Z","patch_url":"","primary_source":"","published":"2026-04-07T17:36:41.987Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39330","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39330","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:09:08.271Z","patch_url":"","primary_source":"","published":"2026-04-07T17:34:30.429Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39329","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39329","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:23.647Z","patch_url":"","primary_source":"","published":"2026-04-07T17:33:30.119Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39328","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39328","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T15:50:07.852Z","patch_url":"","primary_source":"","published":"2026-04-07T17:32:41.364Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39327","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39327","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:39:00.851Z","patch_url":"","primary_source":"","published":"2026-04-07T17:31:37.384Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39326","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39326","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:29.975Z","patch_url":"","primary_source":"","published":"2026-04-07T17:30:57.529Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39325","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39325","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T15:48:09.561Z","patch_url":"","primary_source":"","published":"2026-04-07T17:29:19.882Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-39318","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39318","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T17:25:34.147Z","patch_url":"","primary_source":"","published":"2026-04-07T17:27:51.450Z"},{"affected":"< 7.1.1","affected_versions_present":true,"cve_id":"CVE-2026-39335","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39335","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T18:47:09.445Z","patch_url":"","primary_source":"","published":"2026-04-07T17:23:08.968Z"},{"affected":"< 7.0.0","affected_versions_present":true,"cve_id":"CVE-2026-35576","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35576","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-09T15:46:32.060Z","patch_url":"https://github.com/ChurchCRM/CRM/pull/8016","primary_source":"","published":"2026-04-07T17:11:24.846Z"},{"affected":"< 6.5.3","affected_versions_present":true,"cve_id":"CVE-2026-35575","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35575","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T18:35:14.962Z","patch_url":"","primary_source":"","published":"2026-04-07T17:08:43.354Z"},{"affected":"< 6.5.3","affected_versions_present":true,"cve_id":"CVE-2026-35572","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35572","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T19:59:43.438Z","patch_url":"","primary_source":"","published":"2026-04-07T17:07:57.506Z"},{"affected":"< 6.5.3","affected_versions_present":true,"cve_id":"CVE-2026-35573","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35573","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T18:49:46.996Z","patch_url":"","primary_source":"","published":"2026-04-07T17:06:07.161Z"},{"affected":"< 6.5.3","affected_versions_present":true,"cve_id":"CVE-2026-35574","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35574","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-07T17:26:30.431Z","patch_url":"","primary_source":"","published":"2026-04-07T17:04:21.184Z"},{"affected":"< 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-35534","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35534","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:19:01.737Z","patch_url":"","primary_source":"","published":"2026-04-07T15:47:44.342Z"},{"affected":"< 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-32880","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32880","fixed":"7.0.2.","last_modified":"2026-03-20T14:41:30.274Z","patch_url":"https://github.com/ChurchCRM/CRM/security/advisories/GHSA-7gq6-xmpx-qc7c","primary_source":"","published":"2026-03-20T01:04:08.408Z"},{"affected":"< 6.8.1","affected_versions_present":true,"cve_id":"CVE-2026-26059","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26059","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-19T21:23:56.193Z","patch_url":"","primary_source":"","published":"2026-02-19T18:45:53.171Z"},{"affected":"< 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-24855","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24855","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-30T15:50:58.147Z","patch_url":"https://github.com/ChurchCRM/CRM/commit/0cd0d211459b8c19509d36b3c1dfcd7f8c10d914","primary_source":"","published":"2026-01-30T15:08:31.006Z"},{"affected":"< 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-24854","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24854","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-30T15:57:32.491Z","patch_url":"http://github.com/ChurchCRM/CRM/commit/748f5084fc06c5e12463dc7fdd62d1d31fc08d38","primary_source":"","published":"2026-01-30T15:05:12.017Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"ChurchCRM"}}