{"api_version":"v1","generated_at":"2026-10-08T17:30:00+00:00","product":{"cve_count":29,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-decidim-decidim-69f621dc8d7b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/decidim","name":"decidim","next_cursor":null,"observations":[{"affected":"decidim: < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-44282","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44282","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-15T16:05:47.457Z","patch_url":"","primary_source":"","published":"2026-09-15T15:25:56.036Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45378","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45378","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T16:51:44.298Z","patch_url":"","primary_source":"","published":"2026-08-06T20:15:40.126Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45573","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45573","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-08T02:34:34.588Z","patch_url":"","primary_source":"","published":"2026-08-06T20:14:07.078Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45572","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45572","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:09:19.361Z","patch_url":"","primary_source":"","published":"2026-08-06T20:10:54.774Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45415","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45415","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T15:45:33.809Z","patch_url":"","primary_source":"","published":"2026-08-06T19:33:31.514Z"},{"affected":"< 0.31.5; >= 0.32.0.rc1, < 0.32.0.rc2","affected_versions_present":true,"cve_id":"CVE-2026-45414","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45414","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:50:53.738Z","patch_url":"","primary_source":"","published":"2026-08-06T19:17:17.988Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45377","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45377","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-31T23:37:39.654Z","patch_url":"","primary_source":"","published":"2026-07-31T22:58:22.730Z"},{"affected":"< 0.30.9; >= 0.31.0.rc1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0","affected_versions_present":true,"cve_id":"CVE-2026-45376","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45376","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T17:13:15.144Z","patch_url":"","primary_source":"","published":"2026-07-31T22:34:27.181Z"},{"affected":"< 0.30.9; >= 0.31.0, < 0.31.5; >= 0.32.0.rc1, < 0.32.0.rc2","affected_versions_present":true,"cve_id":"CVE-2026-45330","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45330","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T20:35:20.109Z","patch_url":"","primary_source":"","published":"2026-07-31T22:05:21.773Z"},{"affected":">= 0.31.1, < 0.31.5; >= 0.32.0.rc1, < 0.32.0.rc2","affected_versions_present":true,"cve_id":"CVE-2026-45086","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45086","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T17:16:23.640Z","patch_url":"","primary_source":"","published":"2026-07-31T21:44:11.803Z"},{"affected":">= 0.31.0.rc1, < 0.31.1; >= 0.19.0, < 0.30.5","affected_versions_present":true,"cve_id":"CVE-2026-40869","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40869","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-21T19:35:55.139Z","patch_url":"https://github.com/decidim/decidim/security/advisories/GHSA-w5xj-99cg-rccm","primary_source":"","published":"2026-04-21T19:08:28.239Z"},{"affected":"> 0.31.0.rc1, < 0.31.1; >= 0.0.1, < 0.30.5","affected_versions_present":true,"cve_id":"CVE-2026-40870","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40870","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-21T19:52:15.178Z","patch_url":"","primary_source":"","published":"2026-04-21T19:06:09.135Z"},{"affected":">= 0.31.0.rc1, < 0.31.1; < 0.30.5","affected_versions_present":true,"cve_id":"CVE-2026-23891","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23891","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-14T16:29:24.311Z","patch_url":"","primary_source":"","published":"2026-04-13T16:52:16.448Z"},{"affected":">= 0.30.0, < 0.30.4; >= 0.31.0.r1, < 0.31.0","affected_versions_present":true,"cve_id":"CVE-2025-65017","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-65017","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-03T17:09:47.635Z","patch_url":"https://github.com/decidim/decidim/pull/13571","primary_source":"","published":"2026-02-03T15:05:24.738Z"},{"affected":">= 0.28.0, < 0.28.3","affected_versions_present":true,"cve_id":"CVE-2024-45594","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45594","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-13T18:43:57.042Z","patch_url":"","primary_source":"","published":"2024-11-13T16:21:37.850Z"},{"affected":"< 0.27.8","affected_versions_present":true,"cve_id":"CVE-2024-41673","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-41673","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-01T17:47:27.814Z","patch_url":"","primary_source":"","published":"2024-10-01T14:58:34.521Z"},{"affected":"< 0.27.7","affected_versions_present":true,"cve_id":"CVE-2024-39910","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39910","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T19:58:06.959Z","patch_url":"https://github.com/decidim/decidim/commit/47adca81cabea898005ec07b130b008f2a2be99f","primary_source":"","published":"2024-09-16T18:38:11.423Z"},{"affected":"< 0.27.7; >= 0.28.0, < 0.28.2","affected_versions_present":true,"cve_id":"CVE-2024-32034","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32034","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T20:00:04.199Z","patch_url":"https://github.com/decidim/decidim/commit/23fc8d702a4976727f78617f5e42353d67931645","primary_source":"","published":"2024-09-16T18:38:09.562Z"},{"affected":"< 0.27.6; >= 0.28.0.rc1, < 0.28.1","affected_versions_present":true,"cve_id":"CVE-2024-32469","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32469","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T02:13:39.100Z","patch_url":"","primary_source":"","published":"2024-07-10T19:10:36.304Z"},{"affected":"< 0.27.6; >= 0.28.0.rc1, < 0.28.1","affected_versions_present":true,"cve_id":"CVE-2024-27095","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27095","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:27:59.577Z","patch_url":"","primary_source":"","published":"2024-07-10T19:07:45.995Z"},{"affected":"< 0.27.6","affected_versions_present":true,"cve_id":"CVE-2024-27090","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27090","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:27:57.819Z","patch_url":"","primary_source":"","published":"2024-07-10T18:25:26.241Z"},{"affected":">= 0.27.0, < 0.27.5","affected_versions_present":true,"cve_id":"CVE-2023-51447","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51447","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-26T14:47:59.180Z","patch_url":"https://github.com/decidim/decidim/security/advisories/GHSA-9w99-78rj-hmxq","primary_source":"","published":"2024-02-20T17:29:35.677Z"},{"affected":">= 0.0.1.alpha3, < 0.26.9; >= 0.27.0, < 0.27.5; >= 0.4.rc3, < 2.0.9","affected_versions_present":true,"cve_id":"CVE-2023-48220","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-48220","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-24T15:04:40.243Z","patch_url":"https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp","primary_source":"","published":"2024-02-20T17:24:37.791Z"},{"affected":">= 0.23.0, < 0.27.5","affected_versions_present":true,"cve_id":"CVE-2023-47635","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-47635","fixed":"0.27.5","last_modified":"2024-08-22T13:25:39.658Z","patch_url":"https://github.com/decidim/decidim/security/advisories/GHSA-f3qm-vfc3-jg6v","primary_source":"","published":"2024-02-20T16:45:39.305Z"},{"affected":">= 0.10.0, < 0.26.9; >= 0.27.0, < 0.27.5","affected_versions_present":true,"cve_id":"CVE-2023-47634","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-47634","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T21:16:42.668Z","patch_url":"","primary_source":"","published":"2024-02-20T16:37:51.966Z"},{"affected":">= 0.23.2, < 0.26.8; >= 0.27.0, < 0.27.4","affected_versions_present":true,"cve_id":"CVE-2023-36465","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36465","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-19T18:48:00.313Z","patch_url":"","primary_source":"","published":"2023-10-06T11:56:46.825Z"},{"affected":">= 0.14.0, < 0.26.7; >= 0.27.0, < 0.27.3","affected_versions_present":true,"cve_id":"CVE-2023-34089","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-34089","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-04T19:55:37.787Z","patch_url":"","primary_source":"","published":"2023-07-11T17:36:14.670Z"},{"affected":">= 0.27.0, < 0.27.3","affected_versions_present":true,"cve_id":"CVE-2023-34090","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-34090","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-23T15:27:20.029Z","patch_url":"https://github.com/decidim/decidim/releases/tag/v0.27.3","primary_source":"","published":"2023-07-11T17:29:36.629Z"},{"affected":">= 0.25.0, < 0.26.7; >= 0.27.0, < 0.27.3","affected_versions_present":true,"cve_id":"CVE-2023-32693","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-32693","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-04T19:54:10.232Z","patch_url":"","primary_source":"","published":"2023-07-11T17:19:26.138Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"decidim"}}