{"api_version":"v1","generated_at":"2026-10-08T14:45:00+00:00","product":{"cve_count":15,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-ckan-ckan-8eaa479a84b2","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"ckan","next_cursor":null,"observations":[{"affected":">= 2.11.0, < 2.11.5; < 2.10.10","affected_versions_present":true,"cve_id":"CVE-2026-42032","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42032","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T18:15:13.043Z","patch_url":"https://github.com/ckan/ckan/security/advisories/GHSA-cg4x-64p3-x59h","primary_source":"","published":"2026-05-13T18:58:43.109Z"},{"affected":">= 2.11.0, < 2.11.5; < 2.10.10","affected_versions_present":true,"cve_id":"CVE-2026-41255","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41255","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T12:44:14.133Z","patch_url":"","primary_source":"","published":"2026-05-13T18:57:41.256Z"},{"affected":">= 2.11.0, < 2.11.5; < 2.10.10","affected_versions_present":true,"cve_id":"CVE-2026-41132","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41132","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T15:42:18.881Z","patch_url":"","primary_source":"","published":"2026-05-13T18:53:28.250Z"},{"affected":">= 2.11.0, < 2.11.5; < 2.10.10","affected_versions_present":true,"cve_id":"CVE-2026-42031","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42031","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-15T19:15:58.374Z","patch_url":"https://github.com/ckan/ckan/security/advisories/GHSA-h7j7-3rx6-xvcg","primary_source":"","published":"2026-05-13T18:52:35.383Z"},{"affected":"< 2.10.9; >= 2.11.0, < 2.11.4","affected_versions_present":true,"cve_id":"CVE-2025-64100","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64100","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-29T19:29:13.337Z","patch_url":"","primary_source":"","published":"2025-10-29T17:54:51.997Z"},{"affected":">= 2.11.0, < 2.11.4; < 2.10.9","affected_versions_present":true,"cve_id":"CVE-2025-54384","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54384","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-29T17:41:12.571Z","patch_url":"","primary_source":"","published":"2025-10-29T15:26:38.426Z"},{"affected":"< 2.10.7; >= 2.11.0, < 2.11.2","affected_versions_present":true,"cve_id":"CVE-2025-24372","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-24372","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-05T19:27:38.534Z","patch_url":"","primary_source":"","published":"2025-02-05T18:12:09.355Z"},{"affected":"< 2.10.5","affected_versions_present":true,"cve_id":"CVE-2024-43371","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-43371","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-22T19:17:47.929Z","patch_url":"","primary_source":"","published":"2024-08-21T14:47:31.160Z"},{"affected":">= 2.7.0, < 2.10.5","affected_versions_present":true,"cve_id":"CVE-2024-41675","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-41675","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-22T13:35:13.240Z","patch_url":"https://github.com/ckan/ckan/commit/9e89ce8220ab1445e0bd85a67994a51d9d3d2688","primary_source":"","published":"2024-08-21T14:34:31.424Z"},{"affected":">= 2.0, < 2.10.5","affected_versions_present":true,"cve_id":"CVE-2024-41674","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-41674","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-21T15:32:22.705Z","patch_url":"https://github.com/ckan/ckan/commit/f6b032cd7082d784938165bbd113557639002ca7","primary_source":"","published":"2024-08-21T14:31:26.240Z"},{"affected":">= 2.0, < 2.9.11; >= 2.10.0, < 2.10.4","affected_versions_present":true,"cve_id":"CVE-2024-27097","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27097","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-21T15:05:52.767Z","patch_url":"https://github.com/ckan/ckan/commit/81b56c55e5e3651d7fcf9642cd5a489a9b62212c","primary_source":"","published":"2024-03-13T20:40:50.855Z"},{"affected":">= 2.0.0, < 2.9.10; >= 2.10.0, < 2.10.3","affected_versions_present":true,"cve_id":"CVE-2023-50248","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50248","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T22:09:50.003Z","patch_url":"https://github.com/ckan/ckan/commit/bd02018b65c5b81d7ede195d00d0fcbac3aa33be","primary_source":"","published":"2023-12-13T20:47:12.784Z"},{"affected":"< 2.9.9; = 2.10.0","affected_versions_present":true,"cve_id":"CVE-2023-32321","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-32321","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-14T19:07:12.229Z","patch_url":"","primary_source":"","published":"2023-05-26T22:57:00.076Z"},{"affected":">= 2.9.0, < 2.9.7; < 2.8.12","affected_versions_present":true,"cve_id":"CVE-2023-22746","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22746","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:16:37.925Z","patch_url":"https://github.com/ckan/ckan/commit/44af0f0a148fcc0e0fbcf02fe69b7db13459a84b","primary_source":"","published":"2023-02-03T21:07:11.551Z"},{"affected":"2.9.0 < unspecified; unspecified \u2264 2.9.3","affected_versions_present":true,"cve_id":"CVE-2021-25967","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-25967","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-30T15:44:12.543Z","patch_url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25967","primary_source":"","published":"2021-12-01T13:40:09.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"ckan"}}