{"api_version":"v1","generated_at":"2026-10-07T17:25:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-dagu-org-dagu-e7bfe82bfbf8","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/dagu","name":"dagu","next_cursor":null,"observations":[{"affected":">= 2.0.0, < 2.3.1","affected_versions_present":true,"cve_id":"CVE-2026-33344","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33344","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-24T19:57:38.816Z","patch_url":"https://github.com/dagu-org/dagu/commit/7d07fda8f9de3ae73dfb081ccd0639f8059c56bb","primary_source":"","published":"2026-03-24T19:23:56.617Z"},{"affected":"< 2.2.4","affected_versions_present":true,"cve_id":"CVE-2026-31886","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31886","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-13T19:43:18.359Z","patch_url":"https://github.com/dagu-org/dagu/commit/12c2e5395bd9331d49ca103593edfd0db39c4f38","primary_source":"","published":"2026-03-13T19:32:09.415Z"},{"affected":"< 2.2.4","affected_versions_present":true,"cve_id":"CVE-2026-31882","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31882","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-13T19:43:56.406Z","patch_url":"https://github.com/dagu-org/dagu/pull/1752","primary_source":"","published":"2026-03-13T19:28:25.615Z"},{"affected":"<= 1.16.7","affected_versions_present":true,"cve_id":"CVE-2026-27598","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27598","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T21:02:19.359Z","patch_url":"https://github.com/dagu-org/dagu/commit/e2ed589105d79273e4e6ac8eb31525f765bb3ce4","primary_source":"","published":"2026-02-25T00:27:40.654Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"dagu-org"}}