{"api_version":"v1","generated_at":"2026-10-08T11:20:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-flarum-framework-f203303789cc","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/framework","name":"framework","next_cursor":null,"observations":[{"affected":"< 1.8.16; >= 2.0.0-beta.1, < 2.0.0-rc.1","affected_versions_present":true,"cve_id":"CVE-2026-41887","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41887","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T19:26:53.642Z","patch_url":"","primary_source":"","published":"2026-05-08T15:50:38.484Z"},{"affected":"< 1.8.10","affected_versions_present":true,"cve_id":"CVE-2025-27794","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27794","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-12T15:29:21.831Z","patch_url":"https://github.com/flarum/framework/commit/a05aaea3ee1e0a8b870935183193cd6052f1d402","primary_source":"","published":"2025-03-12T14:00:21.862Z"},{"affected":"< 1.8.5","affected_versions_present":true,"cve_id":"CVE-2024-21641","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-21641","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-03T14:40:49.162Z","patch_url":"https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr","primary_source":"","published":"2024-01-05T21:02:56.513Z"},{"affected":"< 1.8.0","affected_versions_present":true,"cve_id":"CVE-2023-40033","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-40033","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-02T16:00:40.870Z","patch_url":"https://github.com/flarum/framework/commit/d1059c1cc79fe61f9538f3da55e8f42abbede570","primary_source":"","published":"2023-08-16T20:34:11.445Z"},{"affected":"< 1.7.0","affected_versions_present":true,"cve_id":"CVE-2023-27577","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27577","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T14:58:55.839Z","patch_url":"https://github.com/flarum/framework/commit/1761660c98ea5a3e9665fb8e6041d1f2ee62a444","primary_source":"","published":"2023-03-10T20:56:58.989Z"},{"affected":">= 1.3.0, < 1.6.3","affected_versions_present":true,"cve_id":"CVE-2023-22489","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22489","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:30:11.801Z","patch_url":"https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015","primary_source":"","published":"2023-01-13T18:03:46.954Z"},{"affected":"< 1.6.3","affected_versions_present":true,"cve_id":"CVE-2023-22488","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22488","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:30:24.264Z","patch_url":"https://github.com/flarum/framework/commit/d0a2b95dca57d3dae9a0d77b610b1cb1d0b1766a","primary_source":"","published":"2023-01-12T19:24:16.494Z"},{"affected":"< 1.6.3","affected_versions_present":true,"cve_id":"CVE-2023-22487","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22487","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:30:35.411Z","patch_url":"https://github.com/flarum/framework/commit/ab1c868b978e8b0d09a5d682c54665dae17d0985","primary_source":"","published":"2023-01-11T19:49:37.668Z"},{"affected":">= 1.5.0, < 1.6.2","affected_versions_present":true,"cve_id":"CVE-2022-41938","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41938","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:36:43.774Z","patch_url":"https://github.com/flarum/framework/commit/690de9ce0ffe7ac4d45b73e303f44340c3433138","primary_source":"","published":"2022-11-19T00:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"flarum"}}