{"api_version":"v1","generated_at":"2026-10-09T02:35:00+00:00","product":{"cve_count":11,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-h2o-h2o-4b167b535438","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/h2o","name":"h2o","next_cursor":null,"observations":[{"affected":"< 9265bdd","affected_versions_present":true,"cve_id":"CVE-2026-54340","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54340","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-17T18:06:19.274Z","patch_url":"https://github.com/h2o/h2o/commit/9265bdd9a996ed992681055e3996baf3e09d2063","primary_source":"","published":"2026-07-16T23:29:50.799Z"},{"affected":"< 6b5370d","affected_versions_present":true,"cve_id":"CVE-2026-44453","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44453","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-17T14:29:15.447Z","patch_url":"https://github.com/h2o/h2o/commit/6b5370d9d09fcf83aa7620ddf77de1954a192181","primary_source":"","published":"2026-07-16T23:04:41.756Z"},{"affected":"< 8dc37cb","affected_versions_present":true,"cve_id":"CVE-2026-44452","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44452","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-17T14:03:52.757Z","patch_url":"https://github.com/h2o/h2o/commit/8dc37cb1e6171f7f772667618ea440696fed82c3","primary_source":"","published":"2026-07-16T22:54:42.914Z"},{"affected":"< edd7a120bfc4af11ac0cbebce2a43cc1f93f9af1","affected_versions_present":true,"cve_id":"CVE-2026-55213","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55213","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T14:14:45.685Z","patch_url":"","primary_source":"","published":"2026-07-10T20:49:58.764Z"},{"affected":">= 16b13eee8ad7895b4fe3fcbcabee53bd52782562, < 1ed32b23f999acf0c5029f09c8525f93eb1d354c","affected_versions_present":true,"cve_id":"CVE-2024-45403","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45403","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-11T14:40:53.132Z","patch_url":"https://github.com/h2o/h2o/commit/16b13eee8ad7895b4fe3fcbcabee53bd52782562","primary_source":"","published":"2024-10-11T14:28:35.262Z"},{"affected":"< 15ed15a2efb83a77bb4baaa5a119e639c2f6898a","affected_versions_present":true,"cve_id":"CVE-2024-45397","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45397","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-11T14:42:24.963Z","patch_url":"https://github.com/h2o/h2o/commit/15ed15a2efb83a77bb4baaa5a119e639c2f6898a","primary_source":"","published":"2024-10-11T14:24:57.687Z"},{"affected":"< 123f5e2b65dcdba8f7ef659a00d24bd1249141be","affected_versions_present":true,"cve_id":"CVE-2024-25622","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25622","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-11T14:46:36.996Z","patch_url":"https://github.com/h2o/h2o/commit/123f5e2b65dcdba8f7ef659a00d24bd1249141be","primary_source":"","published":"2024-10-11T14:20:31.921Z"},{"affected":"<= 2.3.0-beta2","affected_versions_present":true,"cve_id":"CVE-2023-50247","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50247","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T22:09:49.795Z","patch_url":"https://github.com/h2o/h2o/security/advisories/GHSA-2ch5-p59c-7mv6","primary_source":"","published":"2023-12-12T19:56:20.726Z"},{"affected":"<= 2.3.0-beta2","affected_versions_present":true,"cve_id":"CVE-2023-41337","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-41337","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T19:01:34.582Z","patch_url":"https://github.com/h2o/h2o/security/advisories/GHSA-5v5r-rghf-rm6q","primary_source":"","published":"2023-12-12T19:42:35.210Z"},{"affected":"<= 2.3.0-beta2","affected_versions_present":true,"cve_id":"CVE-2023-30847","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-30847","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-30T19:51:44.963Z","patch_url":"https://github.com/h2o/h2o/security/advisories/GHSA-p5hj-phwj-hrvx","primary_source":"","published":"2023-04-27T14:08:35.112Z"},{"affected":"Commits prior to 8c0eca3","affected_versions_present":true,"cve_id":"CVE-2021-43848","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43848","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T19:08:39.448Z","patch_url":"https://github.com/h2o/h2o/commit/8c0eca3","primary_source":"","published":"2022-02-01T12:13:56.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"h2o"}}