{"api_version":"v1","generated_at":"2026-10-08T18:40:00+00:00","product":{"cve_count":24,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-contao-contao-bdaccd5c9924","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/contao","name":"Contao","next_cursor":null,"observations":[{"affected":">= 5.7.0, < 5.7.7","affected_versions_present":true,"cve_id":"CVE-2026-55825","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55825","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-31T23:33:16.171Z","patch_url":"","primary_source":"","published":"2026-07-31T19:07:40.609Z"},{"affected":">= 4.13.40, < 5.3.47; >= 5.7.0-RC1, < 5.7.7","affected_versions_present":true,"cve_id":"CVE-2026-55824","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55824","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-31T19:58:42.933Z","patch_url":"","primary_source":"","published":"2026-07-31T19:04:00.322Z"},{"affected":">= 5.7.0-RC1, < 5.7.9; >= 5.3.35, < 5.3.48","affected_versions_present":true,"cve_id":"CVE-2026-57232","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57232","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T17:24:45.798Z","patch_url":"","primary_source":"","published":"2026-07-31T18:29:53.924Z"},{"affected":">= 4.0.0, < 4.13.57; >= 5.0.0-RC1, < 5.3.42; >= 5.4.0-RC1, < 5.6.5","affected_versions_present":true,"cve_id":"CVE-2025-65961","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-65961","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-25T19:29:04.630Z","patch_url":"","primary_source":"","published":"2025-11-25T19:06:37.395Z"},{"affected":">= 4.0.0, < 4.13.57; >= 5.0.0-RC1, < 5.3.42; >= 5.4.0-RC1, < 5.6.5","affected_versions_present":true,"cve_id":"CVE-2025-65960","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-65960","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-25T20:00:14.687Z","patch_url":"","primary_source":"","published":"2025-11-25T18:54:48.897Z"},{"affected":">= 5.3.0, < 5.3.38; >= 5.4.0-RC1, < 5.6.1","affected_versions_present":true,"cve_id":"CVE-2025-57759","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-57759","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-28T17:16:55.904Z","patch_url":"https://github.com/contao/contao/security/advisories/GHSA-qqfq-7cpp-hcqj","primary_source":"","published":"2025-08-28T16:32:59.022Z"},{"affected":">= 5.0.0, < 5.3.38; >= 5.4.0-RC1, < 5.6.1","affected_versions_present":true,"cve_id":"CVE-2025-57758","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-57758","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-28T17:20:01.087Z","patch_url":"https://github.com/contao/contao/commit/3f05c603e1c94d34819f837f060df5d66447d0d7","primary_source":"","published":"2025-08-28T16:32:38.664Z"},{"affected":">= 5.0.0-RC1, < 5.3.38; >= 5.4.0-RC1, < 5.6.1","affected_versions_present":true,"cve_id":"CVE-2025-57757","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-57757","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-28T17:48:36.124Z","patch_url":"https://github.com/contao/contao/security/advisories/GHSA-w53m-gxvg-vx7p","primary_source":"","published":"2025-08-28T16:32:03.487Z"},{"affected":">= 4.9.14, < 4.13.56; >= 5.0.0-RC1, < 5.3.38; >= 5.4.0-RC1, < 5.6.1","affected_versions_present":true,"cve_id":"CVE-2025-57756","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-57756","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-28T17:49:26.154Z","patch_url":"https://github.com/contao/contao/security/advisories/GHSA-2xmj-8wmq-7475","primary_source":"","published":"2025-08-28T16:31:40.295Z"},{"affected":">= 4.0.0, < 4.13.54; >= 5.0.0, < 5.3.30; >= 5.4.0, < 5.5.6","affected_versions_present":true,"cve_id":"CVE-2025-29790","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-29790","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-18T18:48:39.399Z","patch_url":"https://github.com/contao/contao/security/advisories/GHSA-vqqr-fgmh-f626","primary_source":"","published":"2025-03-18T18:36:34.279Z"},{"affected":"4.0.0 < 4.13.54; 5.0.0 < 5.3.30; 5.4.0 < 5.5.6","affected_versions_present":true,"cve_id":"CVE-2024-45965","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45965","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-08-27T21:27:09.128Z","patch_url":"","primary_source":"","published":"2024-10-02T00:00:00.000Z"},{"affected":"< 4.13.49","affected_versions_present":true,"cve_id":"CVE-2024-45604","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45604","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-18T13:09:48.444Z","patch_url":"","primary_source":"","published":"2024-09-17T19:56:02.588Z"},{"affected":">=4.0.0, < 4.13.49; >= 5.0.0, < 5.3.15; >= 5.4.0, < 5.4.3","affected_versions_present":true,"cve_id":"CVE-2024-45398","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45398","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-18T13:17:36.013Z","patch_url":"","primary_source":"","published":"2024-09-17T19:56:00.791Z"},{"affected":">= 4.13.0, < 4.13.49; >= 5.0.0, < 5.3.15; >= 5.4.0, < 5.4.3","affected_versions_present":true,"cve_id":"CVE-2024-45612","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45612","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-18T14:09:48.584Z","patch_url":"","primary_source":"","published":"2024-09-17T18:29:27.210Z"},{"affected":"< 4.13.40","affected_versions_present":true,"cve_id":"CVE-2024-30262","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-30262","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T01:32:07.058Z","patch_url":"https://github.com/contao/contao/commit/3032baa456f607169ffae82a8920354adb338fe9","primary_source":"","published":"2024-04-09T16:45:57.132Z"},{"affected":">= 4.9.0, < 4.13.40; >= 5.0.0-RC1, < 5.3.4","affected_versions_present":true,"cve_id":"CVE-2024-28235","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28235","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:48:49.584Z","patch_url":"https://github.com/contao/contao/commit/73a2770e2d3535ec9f1b03d54be00e56ebb8ff16","primary_source":"","published":"2024-04-09T15:50:56.531Z"},{"affected":">= 2.0.0, < 4.13.40; >= 5.0.0, < 5.3.4","affected_versions_present":true,"cve_id":"CVE-2024-28234","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28234","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:48:49.568Z","patch_url":"https://github.com/contao/contao/commit/55b995d8d35da0d36bc6a22c53fe6423ab0c4ae2","primary_source":"","published":"2024-04-09T13:59:41.300Z"},{"affected":">= 4.0.0, < 4.13.40; >= 5.0.0, < 5.3.4","affected_versions_present":true,"cve_id":"CVE-2024-28191","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28191","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:48:49.484Z","patch_url":"https://github.com/contao/contao/commit/388859dcf110ca70e0fae68a2a5579ab6a702919","primary_source":"","published":"2024-04-09T13:54:22.129Z"},{"affected":">= 4.0.0, < 4.13.40; >= 5.0.0, < 5.3.4","affected_versions_present":true,"cve_id":"CVE-2024-28190","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28190","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:48:49.506Z","patch_url":"https://github.com/contao/contao/commit/878d28dbe0f408740555d6fc8b634bd3f8febfce","primary_source":"","published":"2024-04-09T13:48:46.324Z"},{"affected":">= 4.0.0, < 4.9.42; >= 4.10.0, < 4.13.28; >= 5.0.0, < 5.1.10","affected_versions_present":true,"cve_id":"CVE-2023-36806","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36806","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:24.200Z","patch_url":"https://github.com/contao/contao/commit/5c9aff32cfc1f7dc452a045862ac2f86a6b9b4b4","primary_source":"","published":"2023-07-25T18:47:34.415Z"},{"affected":">= 2.0.0, < 4.9.40; >= 4.10.0, < 4.13.21; >= 5.0.0, < 5.1.4","affected_versions_present":true,"cve_id":"CVE-2023-29200","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-29200","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-03T19:37:13.854Z","patch_url":"https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df","primary_source":"","published":"2023-04-25T17:00:29.537Z"},{"affected":"< 4.13.3","affected_versions_present":true,"cve_id":"CVE-2022-24899","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24899","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:29:58.265Z","patch_url":"https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c","primary_source":"","published":"2022-05-05T23:45:13.000Z"},{"affected":"< 4.4.56; >= 4.5.0, < 4.9.18; >= 4.10.0, < 4.11.7","affected_versions_present":true,"cve_id":"CVE-2021-37627","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37627","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T01:23:01.173Z","patch_url":"","primary_source":"","published":"2021-08-11T22:50:10.000Z"},{"affected":">= 4.0.0, < 4.4.56; >= 4.5.0, < 4.9.18; >= 4.10.0, < 4.11.7","affected_versions_present":true,"cve_id":"CVE-2021-37626","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37626","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T01:23:01.250Z","patch_url":"","primary_source":"","published":"2021-08-11T22:20:10.000Z"},{"affected":"prior to 2.11","affected_versions_present":true,"cve_id":"CVE-2012-4383","cve_url":"https://cve.blacktree.nl/cve/CVE-2012-4383","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-06T20:35:09.474Z","patch_url":"http://www.openwall.com/lists/oss-security/2012/08/31/14","primary_source":"","published":"2020-01-29T14:42:06.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Contao"}}