{"api_version":"v1","generated_at":"2026-10-08T12:40:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-gerrit-gerrit-31af093ec8e2","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/gerrit","name":"Gerrit","next_cursor":null,"observations":[{"affected":"Gerrit: 2.1.6 < 3.12.10, 3.13.0 < 3.13.9, 3.14.0 < 3.14.3","affected_versions_present":true,"cve_id":"CVE-2026-87722","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87722","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T16:44:34.903Z","patch_url":"","primary_source":"","published":"2026-09-24T22:03:48.146Z"},{"affected":"Gerrit: 2.0.19 < 3.12.10, 3.13.0 < 3.13.9, 3.14.0 < 3.14.3","affected_versions_present":true,"cve_id":"CVE-2026-87721","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87721","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T16:49:24.185Z","patch_url":"","primary_source":"","published":"2026-09-24T22:02:07.175Z"},{"affected":"Gerrit: 2.16.0 < 3.12.10, 3.13.0 < 3.13.9, 3.14.0 < 3.14.3","affected_versions_present":true,"cve_id":"CVE-2026-87720","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87720","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T16:55:03.232Z","patch_url":"","primary_source":"","published":"2026-09-24T21:59:06.994Z"},{"affected":"2.12; 0","affected_versions_present":true,"cve_id":"CVE-2026-2725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2725","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-06T23:17:51.278Z","patch_url":"https://issues.gerritcodereview.com/issues/486131256","primary_source":"","published":"2026-05-13T05:32:49.235Z"},{"affected":"stable < 2.14.22","affected_versions_present":true,"cve_id":"CVE-2020-8920","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-8920","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T10:12:10.990Z","patch_url":"https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33","primary_source":"","published":"2020-12-10T10:15:23.000Z"},{"affected":"stable < 2.15.21","affected_versions_present":true,"cve_id":"CVE-2020-8919","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-8919","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T10:12:10.971Z","patch_url":"https://gerrit.googlesource.com/gerrit/+/0532fb876cb86bc091a91f78e6f28fff9e39ca65","primary_source":"","published":"2020-12-10T10:15:22.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Gerrit"}}