{"api_version":"v1","generated_at":"2026-10-08T09:05:00+00:00","product":{"cve_count":72,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-coollabsio-coolify-7f510baa8cd3","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/coolify","name":"Coolify","next_cursor":"djE6NTA","observations":[{"affected":"Coolify: 4.0, 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-100746","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100746","fixed":"Coolify: 4.1.1","last_modified":"2026-09-28T13:48:00.442Z","patch_url":"https://vuldb.com/vuln/410617","primary_source":"","published":"2026-09-27T03:30:18.973Z"},{"affected":"Coolify: 4.1.0, 4.1.1, 4.1.2","affected_versions_present":true,"cve_id":"CVE-2026-100744","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100744","fixed":"Coolify: 4.2.0","last_modified":"2026-09-30T15:11:34.608Z","patch_url":"https://vuldb.com/vuln/410615","primary_source":"","published":"2026-09-27T01:15:13.433Z"},{"affected":"coolify: \u2264 4.3.17","affected_versions_present":true,"cve_id":"CVE-2026-86117","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86117","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:21:04.350Z","patch_url":"","primary_source":"","published":"2026-09-05T09:59:07.349Z"},{"affected":"< 4.2.0","affected_versions_present":true,"cve_id":"CVE-2026-84694","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84694","fixed":"4.2.0","last_modified":"2026-09-02T11:13:47.345Z","patch_url":"https://github.com/coollabsio/coolify","primary_source":"","published":"2026-09-02T00:37:50.990Z"},{"affected":"4.1.0; 4.1.1","affected_versions_present":true,"cve_id":"CVE-2026-15507","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-15507","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T15:20:01.822Z","patch_url":"","primary_source":"","published":"2026-07-12T22:00:11.042Z"},{"affected":"< 4.0.0-beta.469","affected_versions_present":true,"cve_id":"CVE-2026-59734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59734","fixed":"4.0.0-beta.469.","last_modified":"2026-07-09T18:16:19.863Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-4fhp-xqqp-w7vv","primary_source":"","published":"2026-07-09T17:35:05.368Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42201","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42201","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T13:58:15.968Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-f35h-g2c2-q36v","primary_source":"","published":"2026-07-07T03:29:13.739Z"},{"affected":"< 4.0.0-beta.469","affected_versions_present":true,"cve_id":"CVE-2026-34158","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34158","fixed":"4.0.0-beta.469.","last_modified":"2026-07-07T13:38:48.452Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-j6j2-frv3-g6f7","primary_source":"","published":"2026-07-07T03:28:33.647Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34170","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34170","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:55:10.465Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-3g6r-cxv5-3c7h","primary_source":"","published":"2026-07-07T03:23:40.061Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-34037","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34037","fixed":"4.0.0-beta.464.","last_modified":"2026-07-07T14:02:21.731Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-ggrr-wrvr-x83v","primary_source":"","published":"2026-07-07T03:21:52.088Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34048","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34048","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:56:10.936Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-mw6q-2hmg-mhxv","primary_source":"","published":"2026-07-07T03:19:42.772Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34057","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34057","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:11:31.594Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-6r3g-w7x8-54fj","primary_source":"","published":"2026-07-07T03:17:37.605Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-42143","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42143","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:41:30.787Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-6pmw-6m96-4v4m","primary_source":"","published":"2026-07-07T03:15:04.280Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42147","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42147","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T14:33:48.769Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-pwm4-w33c-wjf3","primary_source":"","published":"2026-07-07T03:13:50.436Z"},{"affected":"< 4.0.0-beta.466","affected_versions_present":true,"cve_id":"CVE-2026-34044","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34044","fixed":"4.0.0-beta.466.","last_modified":"2026-07-09T14:42:53.428Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-565g-9j4m-wqmr","primary_source":"","published":"2026-07-07T03:12:30.401Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34152","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34152","fixed":"4.0.0-beta.471.","last_modified":"2026-07-09T14:42:58.988Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-5qp8-9gg7-4c86","primary_source":"","published":"2026-07-07T03:11:14.111Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34149","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34149","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:07:09.741Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-4vff-6j8j-qhcg","primary_source":"","published":"2026-07-07T03:09:33.827Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34171","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34171","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T12:56:28.312Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-389w-cc6x-wr2m","primary_source":"","published":"2026-07-07T03:07:50.372Z"},{"affected":"< 4.0.0-beta.466","affected_versions_present":true,"cve_id":"CVE-2026-34034","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34034","fixed":"4.0.0-beta.466.","last_modified":"2026-07-07T12:51:01.534Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-rpr8-p7jc-x844","primary_source":"","published":"2026-07-07T03:06:31.815Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34168","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34168","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:31:57.058Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-mh8x-fppq-cp77","primary_source":"","published":"2026-07-07T03:05:18.855Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42145","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42145","fixed":"4.0.0-beta.474.","last_modified":"2026-07-09T14:43:05.636Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-66gv-g2w9-6wxp","primary_source":"","published":"2026-07-07T03:03:58.895Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34198","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34198","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:36:25.549Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-cgj8-7m5q-x5gv","primary_source":"","published":"2026-07-07T03:01:19.285Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34058","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34058","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:40:48.893Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-rh5x-qx77-fq9v","primary_source":"","published":"2026-07-07T02:58:57.633Z"},{"affected":"< 4.0.0-beta.466","affected_versions_present":true,"cve_id":"CVE-2026-34035","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34035","fixed":"4.0.0-beta.466.","last_modified":"2026-07-07T13:41:35.267Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-3xm2-hqg8-4m2p","primary_source":"","published":"2026-07-07T02:56:44.328Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34047","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34047","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:29:58.274Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-652w-qv22-2r7c","primary_source":"","published":"2026-07-07T02:54:59.968Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42172","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42172","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T13:57:00.744Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-c83f-5ph7-x8xv","primary_source":"","published":"2026-07-07T02:52:58.684Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42200","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42200","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T12:49:05.094Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-mv4c-9x67-rrmv","primary_source":"","published":"2026-07-07T02:48:04.402Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42153","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42153","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T13:46:55.120Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-gvc4-f276-r88p","primary_source":"","published":"2026-07-06T21:30:44.813Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34167","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34167","fixed":"4.0.0-beta.471.","last_modified":"2026-07-08T19:43:19.741Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-962v-gxmw-56hc","primary_source":"","published":"2026-07-06T21:28:24.046Z"},{"affected":">= 4.0.0-beta.451, < 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34049","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34049","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T12:46:10.583Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-4mpw-wcj4-v9pp","primary_source":"","published":"2026-07-06T21:22:46.878Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34599","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34599","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:23:47.614Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-q9j6-xcvx-px63","primary_source":"","published":"2026-07-06T21:20:56.608Z"},{"affected":">= 4.0.0-beta.471, < 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42204","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42204","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T14:47:36.729Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-chg4-63hm-xv9x","primary_source":"","published":"2026-07-06T21:17:16.800Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-42148","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42148","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T12:43:59.967Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-x9qh-w4c4-54f9","primary_source":"","published":"2026-07-06T21:14:31.801Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34153","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34153","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T14:51:37.912Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-46hp-7m8g-7622","primary_source":"","published":"2026-07-06T21:12:46.488Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-41899","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41899","fixed":"4.0.0-beta.474.","last_modified":"2026-07-07T14:00:31.814Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-v64c-v633-58xp","primary_source":"","published":"2026-07-06T21:10:40.097Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34050","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34050","fixed":"4.0.0-beta.471.","last_modified":"2026-07-07T13:51:02.738Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-c339-w3cq-2rjr","primary_source":"","published":"2026-07-06T21:08:08.611Z"},{"affected":"< 4.0.0-beta.466","affected_versions_present":true,"cve_id":"CVE-2026-32718","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32718","fixed":"4.0.0-beta.466.","last_modified":"2026-07-07T14:01:24.753Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-f47p-xrgc-977v","primary_source":"","published":"2026-07-06T21:04:59.845Z"},{"affected":"< 4.0.0-beta.469","affected_versions_present":true,"cve_id":"CVE-2026-34038","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34038","fixed":"4.0.0-beta.469.","last_modified":"2026-07-07T12:42:59.446Z","patch_url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-qqrq-r9h4-x6wp","primary_source":"","published":"2026-07-06T20:48:23.396Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-27957","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27957","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T15:29:33.603Z","patch_url":"","primary_source":"","published":"2026-06-30T14:39:06.297Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-27956","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27956","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T15:06:17.965Z","patch_url":"","primary_source":"","published":"2026-06-30T14:38:15.149Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-27955","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27955","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T15:01:03.061Z","patch_url":"","primary_source":"","published":"2026-06-30T14:36:41.055Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-27883","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27883","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-01T14:29:37.674Z","patch_url":"","primary_source":"","published":"2026-06-30T14:32:25.434Z"},{"affected":"< 4.0.0-beta.464","affected_versions_present":true,"cve_id":"CVE-2026-27881","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27881","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T19:04:51.647Z","patch_url":"","primary_source":"","published":"2026-06-30T14:28:38.449Z"},{"affected":"< 4.0.0-beta.461","affected_versions_present":true,"cve_id":"CVE-2026-27882","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27882","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T15:58:02.524Z","patch_url":"","primary_source":"","published":"2026-06-30T14:26:44.422Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34592","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34592","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T13:09:58.983Z","patch_url":"","primary_source":"","published":"2026-06-29T21:47:23.990Z"},{"affected":"< 4.0.0-beta.471","affected_versions_present":true,"cve_id":"CVE-2026-34594","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34594","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-01T14:23:41.076Z","patch_url":"","primary_source":"","published":"2026-06-29T20:21:59.728Z"},{"affected":"< 4.0.0-beta.470","affected_versions_present":true,"cve_id":"CVE-2026-34597","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34597","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T13:16:09.274Z","patch_url":"","primary_source":"","published":"2026-06-29T20:18:37.970Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-41896","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41896","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T12:55:50.036Z","patch_url":"","primary_source":"","published":"2026-06-29T20:16:50.951Z"},{"affected":"< 4.0.0-beta.474","affected_versions_present":true,"cve_id":"CVE-2026-57498","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57498","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T15:59:07.390Z","patch_url":"","primary_source":"","published":"2026-06-29T20:12:07.696Z"},{"affected":"4.0.0","affected_versions_present":true,"cve_id":"CVE-2026-12815","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12815","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T17:52:45.755Z","patch_url":"","primary_source":"","published":"2026-06-21T23:00:10.670Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"coollabsio"}}