{"api_version":"v1","generated_at":"2026-10-07T17:35:00+00:00","product":{"cve_count":4,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-craft-cms-craft-cms-77e580fd613a","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Craft CMS","next_cursor":null,"observations":[{"affected":"CMS: < 5.7.5, < 4.15.3","affected_versions_present":true,"cve_id":"CVE-2025-35939","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-35939","fixed":"CMS: 5.7.5, 4.15.3","last_modified":"2026-02-26T18:28:42.701Z","patch_url":"https://github.com/craftcms/cms/pull/17220","primary_source":"","published":"2025-05-07T22:41:29.728Z"},{"affected":"cms: >= 3.0.0-RC1, < 3.9.15, >= 4.0.0-RC1, < 4.14.15, >= 5.0.0-RC1, < 5.6.17","affected_versions_present":true,"cve_id":"CVE-2025-32432","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32432","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-21T04:00:57.147Z","patch_url":"https://github.com/craftcms/cms/commit/e1c85441fa47eeb7c688c2053f25419bc0547b47","primary_source":"","published":"2025-04-25T15:04:06.272Z"},{"affected":"cms: >= 5.0.0-RC1, < 5.5.5, >= 4.0.0-RC1, < 4.13.8","affected_versions_present":true,"cve_id":"CVE-2025-23209","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23209","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T19:09:05.707Z","patch_url":"https://github.com/craftcms/cms/commit/e59e22b30c9dd39e5e2c7fe02c147bcbd004e603","primary_source":"","published":"2025-01-18T00:32:54.954Z"},{"affected":"cms: >= 4.0.0-RC1, < 4.13.2, >= 5.0.0-RC1, < 5.5.2, >= 3.0.0, < 3.9.14","affected_versions_present":true,"cve_id":"CVE-2024-56145","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-56145","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-21T22:55:33.949Z","patch_url":"https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3","primary_source":"","published":"2024-12-18T20:37:34.301Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Craft CMS"}}