{"api_version":"v1","generated_at":"2026-10-09T12:25:00+00:00","product":{"cve_count":20,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-frappe-lms-998939b93690","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/lms","name":"LMS","next_cursor":null,"observations":[{"affected":"lms: < 2.52.1","affected_versions_present":true,"cve_id":"CVE-2026-54343","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54343","fixed":"2.52.1.","last_modified":"2026-09-18T20:14:49.268Z","patch_url":"https://github.com/frappe/lms/security/advisories/GHSA-3mq2-3c8v-m92j","primary_source":"","published":"2026-09-17T21:35:53.629Z"},{"affected":"<= 2.51.0","affected_versions_present":true,"cve_id":"CVE-2026-39385","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39385","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T19:07:17.376Z","patch_url":"","primary_source":"","published":"2026-07-20T16:55:08.593Z"},{"affected":"< 2.53.0","affected_versions_present":true,"cve_id":"CVE-2026-46546","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46546","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-10T16:55:34.263Z","patch_url":"","primary_source":"","published":"2026-06-09T23:54:06.037Z"},{"affected":"< 2.50.1","affected_versions_present":true,"cve_id":"CVE-2026-39405","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39405","fixed":"2.50.1.","last_modified":"2026-05-21T14:07:35.821Z","patch_url":"https://github.com/frappe/lms/security/advisories/GHSA-mxh7-g3r7-g96h","primary_source":"","published":"2026-05-20T19:34:17.498Z"},{"affected":"< 2.46.0","affected_versions_present":true,"cve_id":"CVE-2026-39415","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39415","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T13:52:12.103Z","patch_url":"","primary_source":"","published":"2026-04-08T20:07:45.729Z"},{"affected":">= 2.27.0, < 2.48.0","affected_versions_present":true,"cve_id":"CVE-2026-34606","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34606","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-03T13:02:34.097Z","patch_url":"https://github.com/frappe/lms/pull/2185","primary_source":"","published":"2026-04-02T17:50:01.153Z"},{"affected":"<= 2.44.0","affected_versions_present":true,"cve_id":"CVE-2026-26977","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26977","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-20T15:35:48.470Z","patch_url":"","primary_source":"","published":"2026-02-20T00:56:42.680Z"},{"affected":"< 2.44.0","affected_versions_present":true,"cve_id":"CVE-2026-26031","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26031","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-12T15:40:20.046Z","patch_url":"","primary_source":"","published":"2026-02-11T21:32:15.323Z"},{"affected":"<= 2.44.0","affected_versions_present":true,"cve_id":"CVE-2026-23497","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23497","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-14T21:15:21.105Z","patch_url":"https://github.com/frappe/lms/commit/e7ccf0a711d0e0ab5e6b28b7a1e4e0510b6b9543","primary_source":"","published":"2026-01-14T18:25:52.052Z"},{"affected":"lms: < 2.42.0","affected_versions_present":true,"cve_id":"CVE-2025-67734","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-67734","fixed":"2.42.0.","last_modified":"2025-12-12T20:01:48.581Z","patch_url":"https://github.com/frappe/lms/commit/ca849da81558066d7614b9b6234004ff59c90632","primary_source":"","published":"2025-12-12T19:48:58.721Z"},{"affected":"lms: < 2.42.0","affected_versions_present":true,"cve_id":"CVE-2025-67730","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-67730","fixed":"2.42.0.","last_modified":"2025-12-18T15:38:16.475Z","patch_url":"https://github.com/frappe/lms/commit/0877e32e1bfe64831b875707241de1c449cda45c","primary_source":"","published":"2025-12-12T07:23:54.147Z"},{"affected":"lms: < 2.41.0","affected_versions_present":true,"cve_id":"CVE-2025-66581","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66581","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-05T20:09:52.736Z","patch_url":"","primary_source":"","published":"2025-12-05T18:26:20.622Z"},{"affected":">= 2.0.0, < 2.41.0","affected_versions_present":true,"cve_id":"CVE-2025-64707","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64707","fixed":"2.41.0","last_modified":"2025-11-13T14:35:20.671Z","patch_url":"https://github.com/frappe/lms/security/advisories/GHSA-w2gf-rchw-x6vm","primary_source":"","published":"2025-11-12T22:27:54.937Z"},{"affected":">= 2.0.0, < 2.41.0","affected_versions_present":true,"cve_id":"CVE-2025-64705","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64705","fixed":"2.41.0","last_modified":"2025-11-13T14:35:25.946Z","patch_url":"https://github.com/frappe/lms/security/advisories/GHSA-qrvv-6g7r-g3v8","primary_source":"","published":"2025-11-12T22:25:49.724Z"},{"affected":"lms: <= 2.39.1","affected_versions_present":true,"cve_id":"CVE-2025-62779","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62779","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-28T15:17:15.768Z","patch_url":"https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3","primary_source":"","published":"2025-10-27T21:19:03.978Z"},{"affected":"lms: <= 2.39.1","affected_versions_present":true,"cve_id":"CVE-2025-62778","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62778","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-28T13:38:07.740Z","patch_url":"https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750","primary_source":"","published":"2025-10-27T21:16:06.220Z"},{"affected":"lms: < 2.38.0","affected_versions_present":true,"cve_id":"CVE-2025-62158","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62158","fixed":"2.38.0","last_modified":"2025-10-10T20:44:13.136Z","patch_url":"https://github.com/frappe/lms/commit/78640561f558a6c7396f8be48874f79a54f03420","primary_source":"","published":"2025-10-10T20:05:38.107Z"},{"affected":"2.35.0","affected_versions_present":true,"cve_id":"CVE-2025-11283","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11283","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-06T20:07:29.456Z","patch_url":"","primary_source":"","published":"2025-10-05T05:02:06.329Z"},{"affected":"2.34.*; 2.35.0","affected_versions_present":true,"cve_id":"CVE-2025-11282","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11282","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-25T12:31:04.841Z","patch_url":"","primary_source":"","published":"2025-10-05T04:32:06.034Z"},{"affected":"2.35.0","affected_versions_present":true,"cve_id":"CVE-2025-11281","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11281","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-07T19:12:19.266Z","patch_url":"","primary_source":"","published":"2025-10-05T04:02:05.630Z"},{"affected":"2.35.0","affected_versions_present":true,"cve_id":"CVE-2025-11280","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-11280","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-07T19:36:55.895Z","patch_url":"","primary_source":"","published":"2025-10-05T03:32:06.307Z"},{"affected":"<= 2.34.1","affected_versions_present":true,"cve_id":"CVE-2025-59415","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59415","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-18T13:58:43.346Z","patch_url":"https://github.com/frappe/lms/commit/ed162e254690772365d4d1365f176b59bc4db72d","primary_source":"","published":"2025-09-17T21:07:58.471Z"},{"affected":"<= 2.33.0","affected_versions_present":true,"cve_id":"CVE-2025-55006","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55006","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-08-11T14:49:39.107Z","patch_url":"","primary_source":"","published":"2025-08-09T02:01:57.136Z"},{"affected":"<= 1.0","affected_versions_present":true,"cve_id":"CVE-2023-42807","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42807","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-24T14:50:49.075Z","patch_url":"","primary_source":"","published":"2023-09-21T16:37:49.041Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Frappe"}}