{"api_version":"v1","generated_at":"2026-10-07T00:50:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-fish-shell-fish-shell-1a109ef16e65","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"fish-shell","next_cursor":null,"observations":[{"affected":"< 3.6.2","affected_versions_present":true,"cve_id":"CVE-2023-49284","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-49284","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:18:37.222Z","patch_url":"https://github.com/fish-shell/fish-shell/commit/09986f5563e31e2c900a606438f1d60d008f3a14","primary_source":"","published":"2023-12-04T23:46:35.567Z"},{"affected":">= 3.1.0, < 3.4.0","affected_versions_present":true,"cve_id":"CVE-2022-20001","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-20001","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:54:25.700Z","patch_url":"https://github.com/fish-shell/fish-shell/pull/8589","primary_source":"","published":"2022-03-14T00:00:00.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"fish-shell"}}