{"api_version":"v1","generated_at":"2026-10-08T14:05:00+00:00","product":{"cve_count":29,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-exiv2-exiv2-b8012ede29b0","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/exiv2","name":"exiv2","next_cursor":null,"observations":[{"affected":"< 0.28.8","affected_versions_present":true,"cve_id":"CVE-2026-25884","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25884","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T20:15:22.706Z","patch_url":"https://github.com/Exiv2/exiv2/pull/3462","primary_source":"","published":"2026-03-02T19:41:21.157Z"},{"affected":"< 0.28.8","affected_versions_present":true,"cve_id":"CVE-2026-27596","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27596","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T20:25:31.790Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-3wgv-fg4w-75x7","primary_source":"","published":"2026-03-02T19:40:48.559Z"},{"affected":"< 0.28.8","affected_versions_present":true,"cve_id":"CVE-2026-27631","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27631","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T20:28:01.516Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-p2pw-7935-c73j","primary_source":"","published":"2026-03-02T19:40:45.351Z"},{"affected":"< 0.28.6","affected_versions_present":true,"cve_id":"CVE-2025-55304","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55304","fixed":"0.28.6.","last_modified":"2025-08-29T15:27:17.130Z","patch_url":"https://github.com/Exiv2/exiv2/pull/3335","primary_source":"","published":"2025-08-29T15:00:05.975Z"},{"affected":"< 0.28.6","affected_versions_present":true,"cve_id":"CVE-2025-54080","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54080","fixed":"0.28.6.","last_modified":"2025-08-29T14:58:23.574Z","patch_url":"https://github.com/Exiv2/exiv2/commit/e737332427711f15bcdc4e903203d6b7493eaec0","primary_source":"","published":"2025-08-29T14:50:17.623Z"},{"affected":">= 0.28.0, < 0.28.5","affected_versions_present":true,"cve_id":"CVE-2025-26623","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-26623","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-19T15:15:44.716Z","patch_url":"","primary_source":"","published":"2025-02-18T19:24:31.701Z"},{"affected":">= 0.28.0, < 0.28.3","affected_versions_present":true,"cve_id":"CVE-2024-39695","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39695","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:26:15.941Z","patch_url":"https://github.com/Exiv2/exiv2/pull/3006","primary_source":"","published":"2024-07-08T15:14:27.639Z"},{"affected":">= 0.28.0, < 0.28.2","affected_versions_present":true,"cve_id":"CVE-2024-24826","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24826","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:28:12.916Z","patch_url":"https://github.com/Exiv2/exiv2/pull/2337","primary_source":"","published":"2024-02-12T22:17:27.997Z"},{"affected":">= 0.28.0 < 0.28.2","affected_versions_present":true,"cve_id":"CVE-2024-25112","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25112","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:36:21.619Z","patch_url":"https://github.com/Exiv2/exiv2/pull/2337","primary_source":"","published":"2024-02-12T22:11:13.693Z"},{"affected":"= 0.28.0","affected_versions_present":true,"cve_id":"CVE-2023-44398","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-44398","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-26T21:15:17.204Z","patch_url":"https://github.com/Exiv2/exiv2/commit/e884a0955359107f4031c74a07406df7e99929a5","primary_source":"","published":"2023-11-06T17:30:54.394Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37623","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37623","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.312Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-mvc4-g5pv-4qqq","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37622","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37622","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.646Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1788","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37621","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37621","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.357Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1778","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37620","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37620","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.285Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1769","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37619","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37619","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.284Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1752","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37618","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37618","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.291Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1759","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37616","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37616","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.227Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1758","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-37615","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37615","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.281Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1758","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-34335","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-34335","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T00:05:52.591Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1750","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-34334","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-34334","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T00:05:52.788Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-hqjh-hpv8-8r9p","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"< 0.27.5","affected_versions_present":true,"cve_id":"CVE-2021-32815","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32815","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-19T14:12:57.892Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1739","primary_source":"","published":"2021-08-09T00:00:00.000Z"},{"affected":"<= 0.27.3","affected_versions_present":true,"cve_id":"CVE-2021-32617","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32617","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T23:25:30.946Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-w8mv-g8qq-36mj","primary_source":"","published":"2021-05-17T00:00:00.000Z"},{"affected":"< v0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29623","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29623","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:06.285Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-6253-qjwm-3q4v","primary_source":"","published":"2021-05-13T00:00:00.000Z"},{"affected":"< 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29464","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29464","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:02:51.950Z","patch_url":"https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54","primary_source":"","published":"2021-04-30T00:00:00.000Z"},{"affected":"< 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29463","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29463","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-15T17:14:39.960Z","patch_url":"https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b","primary_source":"","published":"2021-04-30T00:00:00.000Z"},{"affected":"< 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29473","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29473","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:05.516Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2","primary_source":"","published":"2021-04-26T00:00:00.000Z"},{"affected":"<= 0.27.3","affected_versions_present":true,"cve_id":"CVE-2021-29470","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29470","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:05.421Z","patch_url":"https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj","primary_source":"","published":"2021-04-23T00:00:00.000Z"},{"affected":"< 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29458","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29458","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:02:51.987Z","patch_url":"https://github.com/Exiv2/exiv2/pull/1536","primary_source":"","published":"2021-04-19T00:00:00.000Z"},{"affected":"< 0.27.4","affected_versions_present":true,"cve_id":"CVE-2021-29457","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29457","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:02:51.923Z","patch_url":"https://github.com/Exiv2/exiv2/issues/1529","primary_source":"","published":"2021-04-19T00:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Exiv2"}}