{"api_version":"v1","generated_at":"2026-10-06T22:50:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-devtron-labs-devtron-efc873ff6613","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/devtron","name":"devtron","next_cursor":null,"observations":[{"affected":"devtron: \u2264 2.2.0","affected_versions_present":true,"cve_id":"CVE-2026-82882","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82882","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:20:36.690Z","patch_url":"","primary_source":"","published":"2026-08-31T21:11:01.297Z"},{"affected":"<= 2.0.0","affected_versions_present":true,"cve_id":"CVE-2026-25538","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25538","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-05T18:37:58.750Z","patch_url":"https://github.com/devtron-labs/devtron/commit/d2b0d260d858ab1354b73a8f50f7f078ca62706f","primary_source":"","published":"2026-02-04T21:37:04.483Z"},{"affected":"< 0.7.2","affected_versions_present":true,"cve_id":"CVE-2024-45794","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45794","fixed":"0.7.2","last_modified":"2024-11-07T19:33:42.084Z","patch_url":"https://github.com/devtron-labs/devtron/security/advisories/GHSA-q78v-cv36-8fxj","primary_source":"","published":"2024-11-07T17:42:58.662Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"devtron-labs"}}