{"api_version":"v1","generated_at":"2026-10-09T07:55:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-gatsbyjs-gatsby-6e11bbb535df","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/gatsby","name":"gatsby","next_cursor":null,"observations":[{"affected":">= 5.0.0, < 5.9.1; < 4.25.7","affected_versions_present":true,"cve_id":"CVE-2023-34238","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-34238","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-06T20:32:10.440Z","patch_url":"https://github.com/gatsbyjs/gatsby/commit/ae5a654eb346b2e7a9d341b809b2f82d34c0f17c","primary_source":"","published":"2023-06-07T23:24:49.724Z"},{"affected":"gatsby: < 4.25.1, >= 5.0.0, < 5.8.1","affected_versions_present":true,"cve_id":"CVE-2023-30548","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-30548","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-05T20:34:27.816Z","patch_url":"https://github.com/gatsbyjs/gatsby/commit/5f442081b227cc0879babb96858f970c4ce94c6b","primary_source":"","published":"2023-04-17T20:43:43.033Z"},{"affected":"gatsby: >= 6.0.0, < 6.3.2, < 5.25.1","affected_versions_present":true,"cve_id":"CVE-2023-22491","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22491","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-11T13:34:01.261Z","patch_url":"","primary_source":"","published":"2023-01-13T18:05:00.273Z"},{"affected":"< 4.0.8; >= 5.0.0, < 5.9.2","affected_versions_present":true,"cve_id":"CVE-2021-32770","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32770","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-03T23:33:56.071Z","patch_url":"","primary_source":"","published":"2021-07-15T18:30:11.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"gatsbyjs"}}