{"api_version":"v1","generated_at":"2026-10-07T21:45:00+00:00","product":{"cve_count":39,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-fleetdm-fleet-ff4fb10be27c","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/fleet","name":"fleet","next_cursor":null,"observations":[{"affected":"fleet: < 4.89.0","affected_versions_present":true,"cve_id":"CVE-2026-103265","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103265","fixed":"fleet: 4.89.0","last_modified":"2026-10-01T15:01:03.061Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-97fg-h5wh-2399","primary_source":"","published":"2026-10-01T10:42:06.965Z"},{"affected":"fleet: < 4.87.0","affected_versions_present":true,"cve_id":"CVE-2026-103264","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103264","fixed":"fleet: 4.87.0","last_modified":"2026-10-01T13:32:04.417Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-vrc8-2wcx-327f","primary_source":"","published":"2026-10-01T10:42:06.306Z"},{"affected":"fleet: < 4.87.0","affected_versions_present":true,"cve_id":"CVE-2026-101047","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101047","fixed":"fleet: 4.87.0","last_modified":"2026-09-30T14:47:15.528Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-q9c5-pp7m-fm2g","primary_source":"","published":"2026-09-27T17:02:35.852Z"},{"affected":"fleet: < 4.89.0","affected_versions_present":true,"cve_id":"CVE-2026-101046","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101046","fixed":"fleet: 4.89.0","last_modified":"2026-09-28T13:16:02.557Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-rxhg-vcww-2mpw","primary_source":"","published":"2026-09-27T17:02:35.154Z"},{"affected":"fleet: < 2026-08-19","affected_versions_present":true,"cve_id":"CVE-2026-101045","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101045","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-30T17:20:13.569Z","patch_url":"","primary_source":"","published":"2026-09-27T17:02:34.472Z"},{"affected":"< 4.86.2","affected_versions_present":true,"cve_id":"CVE-2026-54245","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54245","fixed":"4.86.2.","last_modified":"2026-08-27T13:49:51.927Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-7q96-f8xw-jv5j","primary_source":"","published":"2026-08-26T19:13:22.415Z"},{"affected":"< 4.84.2","affected_versions_present":true,"cve_id":"CVE-2026-46371","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46371","fixed":"4.84.2.","last_modified":"2026-08-27T14:33:22.566Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-x4qr-qw6h-wvxq","primary_source":"","published":"2026-08-26T19:06:12.147Z"},{"affected":"< 4.84.2","affected_versions_present":true,"cve_id":"CVE-2026-46370","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46370","fixed":"4.84.2.","last_modified":"2026-08-29T02:47:37.283Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-vxm7-9x8v-8gm4","primary_source":"","published":"2026-08-26T18:54:31.761Z"},{"affected":"< 4.85.0","affected_versions_present":true,"cve_id":"CVE-2026-41262","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41262","fixed":"4.85.0.","last_modified":"2026-08-26T18:57:43.948Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-gm7f-v959-fr2g","primary_source":"","published":"2026-08-26T18:32:30.669Z"},{"affected":"< 4.87.0","affected_versions_present":true,"cve_id":"CVE-2026-48786","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48786","fixed":"4.87.0.","last_modified":"2026-08-26T18:49:37.564Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-88p2-jj8w-j8qg","primary_source":"","published":"2026-08-26T18:25:09.971Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-46356","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46356","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T19:39:08.867Z","patch_url":"","primary_source":"","published":"2026-05-14T19:03:50.754Z"},{"affected":"< 4.81.1","affected_versions_present":true,"cve_id":"CVE-2026-26191","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26191","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-15T14:15:18.440Z","patch_url":"","primary_source":"","published":"2026-05-14T19:02:12.383Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-26062","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26062","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T19:43:46.038Z","patch_url":"","primary_source":"","published":"2026-05-14T19:00:21.559Z"},{"affected":"< 4.82.0","affected_versions_present":true,"cve_id":"CVE-2026-24899","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24899","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-16T00:52:04.917Z","patch_url":"","primary_source":"","published":"2026-05-14T18:58:26.550Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-24000","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24000","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T19:41:20.490Z","patch_url":"","primary_source":"","published":"2026-05-14T18:56:39.139Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-23998","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23998","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-15T14:12:52.682Z","patch_url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-2rc4-7jc6-qffh","primary_source":"","published":"2026-05-14T18:48:38.765Z"},{"affected":"< 4.81.1","affected_versions_present":true,"cve_id":"CVE-2026-27806","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27806","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T14:24:14.670Z","patch_url":"","primary_source":"","published":"2026-04-08T17:40:24.119Z"},{"affected":"< 4.81.1","affected_versions_present":true,"cve_id":"CVE-2026-34391","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34391","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T19:54:54.644Z","patch_url":"","primary_source":"","published":"2026-03-27T19:19:48.229Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-34389","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34389","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T19:01:30.519Z","patch_url":"","primary_source":"","published":"2026-03-27T19:18:19.470Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-34388","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34388","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T13:44:23.562Z","patch_url":"","primary_source":"","published":"2026-03-27T19:13:00.388Z"},{"affected":"< 4.81.1","affected_versions_present":true,"cve_id":"CVE-2026-34387","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34387","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T19:31:54.764Z","patch_url":"","primary_source":"","published":"2026-03-27T18:31:27.871Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-34386","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34386","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T19:02:07.123Z","patch_url":"","primary_source":"","published":"2026-03-27T18:30:10.512Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-34385","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34385","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T18:54:35.661Z","patch_url":"","primary_source":"","published":"2026-03-27T18:29:05.556Z"},{"affected":"< 4.81.1","affected_versions_present":true,"cve_id":"CVE-2026-29180","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29180","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T18:54:40.828Z","patch_url":"","primary_source":"","published":"2026-03-27T18:27:15.576Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-26061","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26061","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T13:38:29.843Z","patch_url":"","primary_source":"","published":"2026-03-27T18:23:49.791Z"},{"affected":"< 4.81.0","affected_versions_present":true,"cve_id":"CVE-2026-26060","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26060","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T19:32:38.862Z","patch_url":"","primary_source":"","published":"2026-03-27T18:22:43.244Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-27465","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27465","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:26:24.835Z","patch_url":"","primary_source":"","published":"2026-02-26T02:54:04.886Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-25963","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25963","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:27:10.738Z","patch_url":"","primary_source":"","published":"2026-02-26T02:49:21.223Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-23999","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23999","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T15:15:55.289Z","patch_url":"","primary_source":"","published":"2026-02-26T02:45:48.099Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-24004","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24004","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:33:57.282Z","patch_url":"","primary_source":"","published":"2026-02-26T02:43:14.600Z"},{"affected":"< 4.80.1","affected_versions_present":true,"cve_id":"CVE-2026-26186","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26186","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:52:24.634Z","patch_url":"","primary_source":"","published":"2026-02-26T00:05:02.016Z"},{"affected":">= 4.78.0, < 4.78.3; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; >= 4.75.0, < 4.75.2; < 4.53.3","affected_versions_present":true,"cve_id":"CVE-2026-23518","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23518","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T16:49:50.477Z","patch_url":"https://github.com/fleetdm/fleet/commit/e225ef57912c8f4ac8977e24b5ebe1d9fd875257","primary_source":"","published":"2026-01-21T21:50:47.998Z"},{"affected":">= 4.78.0, < 4.78.3; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; >= 4.75.0, < 4.75.2; < 4.53.3","affected_versions_present":true,"cve_id":"CVE-2026-23517","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23517","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T16:49:56.246Z","patch_url":"https://github.com/fleetdm/fleet/commit/5c030e32a3a9bc512355b5e1bf19636e4e6d0317","primary_source":"","published":"2026-01-21T21:45:34.561Z"},{"affected":">= 4.78.0, < 4.78.2; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; < 4.53.3","affected_versions_present":true,"cve_id":"CVE-2026-22808","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22808","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T16:50:28.717Z","patch_url":"","primary_source":"","published":"2026-01-21T21:18:26.283Z"},{"affected":">= 4.64.0, < 4.64.2; >= 4.63.0, < 4.63.2; >= 4.62.0, < 4.62.4; < 4.58.1","affected_versions_present":true,"cve_id":"CVE-2025-27509","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27509","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-06T19:29:47.248Z","patch_url":"","primary_source":"","published":"2025-03-06T19:00:36.098Z"},{"affected":"< 4.13","affected_versions_present":true,"cve_id":"CVE-2022-24841","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24841","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:34:08.274Z","patch_url":"https://github.com/fleetdm/fleet/commit/da171d3b8d149c30b8307723cbe6b6e8847cb30c","primary_source":"","published":"2022-04-18T21:20:10.000Z"},{"affected":"< 4.9.1","affected_versions_present":true,"cve_id":"CVE-2022-23600","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-23600","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T19:08:15.914Z","patch_url":"https://github.com/fleetdm/fleet/commit/35d5a7b285f15ddd47486fa656e8b1acf3d48374","primary_source":"","published":"2022-02-04T22:32:07.000Z"},{"affected":"fleet: < 3.7.0","affected_versions_present":true,"cve_id":"CVE-2021-21296","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-21296","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T18:09:15.667Z","patch_url":"https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40","primary_source":"","published":"2021-02-10T20:00:19.000Z"},{"affected":"< 3.5.1","affected_versions_present":true,"cve_id":"CVE-2020-26276","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-26276","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T15:56:04.500Z","patch_url":"https://github.com/fleetdm/fleet/commit/57812a532e5f749c8e18c6f6a652eca65c083607","primary_source":"","published":"2020-12-17T19:40:14.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"fleetdm"}}