{"api_version":"v1","generated_at":"2026-10-07T08:25:00+00:00","product":{"cve_count":5,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-elysiajs-elysia-245e03fedda2","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/elysia","name":"elysia","next_cursor":null,"observations":[{"affected":"< 1.4.29","affected_versions_present":true,"cve_id":"CVE-2026-56669","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56669","fixed":"1.4.29.","last_modified":"2026-07-10T15:02:07.512Z","patch_url":"https://github.com/elysiajs/elysia/security/advisories/GHSA-9643-4qgh-g8mx","primary_source":"","published":"2026-07-08T20:25:18.200Z"},{"affected":"< 1.4.27","affected_versions_present":true,"cve_id":"CVE-2026-31865","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31865","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-18T18:39:09.024Z","patch_url":"https://github.com/elysiajs/elysia/security/advisories/GHSA-8hq9-phh3-p2wp","primary_source":"","published":"2026-03-18T02:50:55.403Z"},{"affected":"< 1.4.26","affected_versions_present":true,"cve_id":"CVE-2026-30837","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30837","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-11T15:33:53.271Z","patch_url":"https://github.com/elysiajs/elysia/security/advisories/GHSA-f45g-68q3-5w8x","primary_source":"","published":"2026-03-10T20:12:14.627Z"},{"affected":"< 1.4.18","affected_versions_present":true,"cve_id":"CVE-2025-66457","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66457","fixed":"1.4.18.","last_modified":"2025-12-12T19:39:02.677Z","patch_url":"https://github.com/elysiajs/elysia/security/advisories/GHSA-8vch-m3f4-q8jf","primary_source":"","published":"2025-12-09T20:03:45.918Z"},{"affected":">= 1.4.0, < 1.4.17","affected_versions_present":true,"cve_id":"CVE-2025-66456","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66456","fixed":"1.4.17.","last_modified":"2025-12-09T20:35:44.683Z","patch_url":"https://github.com/elysiajs/elysia/security/advisories/GHSA-hxj9-33pp-j2cc","primary_source":"","published":"2025-12-09T19:43:10.252Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"elysiajs"}}