{"api_version":"v1","generated_at":"2026-10-08T06:35:00+00:00","product":{"cve_count":20,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-facebook-hermes-2cabb65496c5","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/hermes","name":"Hermes","next_cursor":null,"observations":[{"affected":"< da8990f737ebb9d9810633502f65ed462b819c09","affected_versions_present":true,"cve_id":"CVE-2023-30470","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-30470","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:09:25.765Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-30470","primary_source":"","published":"2023-05-18T21:27:57.350Z"},{"affected":"< e6ed9c1a4b02dc219de1648f44cd808a56171b81","affected_versions_present":true,"cve_id":"CVE-2023-28081","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28081","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:16:02.965Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-28081","primary_source":"","published":"2023-05-18T21:26:49.822Z"},{"affected":"< e6ed9c1a4b02dc219de1648f44cd808a56171b81","affected_versions_present":true,"cve_id":"CVE-2023-25933","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-25933","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:20:00.366Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-25933","primary_source":"","published":"2023-05-18T21:24:58.365Z"},{"affected":"< a6dcafe6ded8e61658b40f5699878cd19a481f80","affected_versions_present":true,"cve_id":"CVE-2023-24833","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-24833","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:21:32.835Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-24833","primary_source":"","published":"2023-05-18T21:24:11.057Z"},{"affected":"< 5cae9f72975cf0e5a62b27fdd8b01f103e198708","affected_versions_present":true,"cve_id":"CVE-2023-24832","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-24832","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:23:54.785Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-24832","primary_source":"","published":"2023-05-18T21:24:01.747Z"},{"affected":"< a00d237346894c6067a594983be6634f4168c9ad","affected_versions_present":true,"cve_id":"CVE-2023-23557","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-23557","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T21:20:13.134Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-23557","primary_source":"","published":"2023-05-18T21:19:41.668Z"},{"affected":"< a6dcafe6ded8e61658b40f5699878cd19a481f80","affected_versions_present":true,"cve_id":"CVE-2023-23556","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-23556","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-31T13:49:25.972Z","patch_url":"https://www.facebook.com/security/advisories/cve-2023-23556","primary_source":"","published":"2023-05-18T21:16:43.874Z"},{"affected":"unspecified < commit prior to 6aa825e480d48127b480b08d13adf70033237097","affected_versions_present":true,"cve_id":"CVE-2022-40138","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-40138","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T12:14:39.797Z","patch_url":"https://github.com/facebook/hermes/commit/6aa825e480d48127b480b08d13adf70033237097","primary_source":"","published":"2022-10-11T00:00:00.000Z"},{"affected":"unspecified < prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374","affected_versions_present":true,"cve_id":"CVE-2022-35289","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-35289","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T09:36:43.334Z","patch_url":"https://github.com/facebook/hermes/commit/5b6255ae049fa4641791e47fad994e8e8c4da374","primary_source":"","published":"2022-10-11T00:00:00.000Z"},{"affected":"unspecified < prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1","affected_versions_present":true,"cve_id":"CVE-2022-32234","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-32234","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T07:39:49.627Z","patch_url":"https://github.com/facebook/hermes/commit/06eaec767e376bfdb883d912cb15e987ddf2bda1","primary_source":"","published":"2022-10-11T00:00:00.000Z"},{"affected":"unspecified < 0.12.0","affected_versions_present":true,"cve_id":"CVE-2022-27810","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-27810","fixed":"0.12.0 < unspecified","last_modified":"2024-08-03T05:32:59.901Z","patch_url":"https://www.facebook.com/security/advisories/cve-2022-27810","primary_source":"","published":"2022-10-06T00:00:00.000Z"},{"affected":"unspecified < 0.10.0","affected_versions_present":true,"cve_id":"CVE-2021-24044","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-24044","fixed":"0.10.0 < unspecified","last_modified":"2024-08-03T19:21:17.267Z","patch_url":"https://www.facebook.com/security/advisories/cve-2021-24044","primary_source":"","published":"2022-01-15T00:35:08.000Z"},{"affected":"unspecified < 0.10.0","affected_versions_present":true,"cve_id":"CVE-2021-24045","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-24045","fixed":"0.10.0 < unspecified","last_modified":"2024-08-03T19:21:17.287Z","patch_url":"https://github.com/facebook/hermes/commit/55e1b2343f4deb1a1b5726cfe1e23b2068217ff2","primary_source":"","published":"2021-12-13T20:30:11.000Z"},{"affected":"commit prior to d86e185e485b6330216dee8e854455c694e3a36e","affected_versions_present":true,"cve_id":"CVE-2021-24037","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-24037","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T19:21:17.277Z","patch_url":"https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e","primary_source":"","published":"2021-06-15T22:00:11.000Z"},{"affected":"commit prior to 86543ac47e59c522976b5632b8bf9a2a4583c7d2","affected_versions_present":true,"cve_id":"CVE-2020-1896","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1896","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:53:59.880Z","patch_url":"https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2","primary_source":"","published":"2021-02-02T06:50:11.000Z"},{"affected":"commit prior to 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0","affected_versions_present":true,"cve_id":"CVE-2020-1915","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1915","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:53:59.849Z","patch_url":"https://github.com/facebook/hermes/commit/8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0","primary_source":"","published":"2020-10-26T20:20:13.000Z"},{"affected":"commit prior to b2021df620824627f5a8c96615edbd1eb7fdddfc","affected_versions_present":true,"cve_id":"CVE-2020-1914","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1914","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:53:59.745Z","patch_url":"https://github.com/facebook/hermes/commit/b2021df620824627f5a8c96615edbd1eb7fdddfc","primary_source":"","published":"2020-10-08T18:50:11.000Z"},{"affected":"commit prior to 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6","affected_versions_present":true,"cve_id":"CVE-2020-1913","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1913","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:53:59.912Z","patch_url":"https://github.com/facebook/hermes/commit/2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6","primary_source":"","published":"2020-09-09T19:00:19.000Z"},{"affected":"commit prior to 091835377369c8fd5917d9b87acffa721ad2a168","affected_versions_present":true,"cve_id":"CVE-2020-1912","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1912","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:54:00.338Z","patch_url":"https://github.com/facebook/hermes/commit/091835377369c8fd5917d9b87acffa721ad2a168","primary_source":"","published":"2020-09-09T18:50:17.000Z"},{"affected":"commit prior to fe52854cdf6725c2eaa9e125995da76e6ceb27da","affected_versions_present":true,"cve_id":"CVE-2020-1911","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-1911","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T06:53:59.783Z","patch_url":"https://github.com/facebook/hermes/commit/fe52854cdf6725c2eaa9e125995da76e6ceb27da","primary_source":"","published":"2020-09-04T02:35:20.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Facebook"}}