{"api_version":"v1","generated_at":"2026-10-08T20:15:00+00:00","product":{"cve_count":17,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-hedgedoc-hedgedoc-29e1f7568378","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"hedgedoc","next_cursor":null,"observations":[{"affected":"< 1.11.0","affected_versions_present":true,"cve_id":"CVE-2026-58489","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58489","fixed":"1.11.0.","last_modified":"2026-07-14T12:59:49.853Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-8v9p-5j95-826j","primary_source":"","published":"2026-07-13T22:34:51.730Z"},{"affected":"< 1.11.0","affected_versions_present":true,"cve_id":"CVE-2026-58486","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58486","fixed":"1.11.0.","last_modified":"2026-07-14T12:48:39.469Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-qj78-mjch-wwrv","primary_source":"","published":"2026-07-13T22:12:37.837Z"},{"affected":"< 1.11.0","affected_versions_present":true,"cve_id":"CVE-2026-58487","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58487","fixed":"1.11.0.","last_modified":"2026-07-15T14:28:06.634Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-6c2w-8w96-3pcv","primary_source":"","published":"2026-07-13T21:59:27.436Z"},{"affected":"< 1.11.0","affected_versions_present":true,"cve_id":"CVE-2026-58488","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58488","fixed":"1.11.0.","last_modified":"2026-07-14T12:47:03.169Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-2f9f-w8xq-276v","primary_source":"","published":"2026-07-13T21:43:14.830Z"},{"affected":"< 1.10.6","affected_versions_present":true,"cve_id":"CVE-2026-25642","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25642","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-06T20:20:58.376Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w","primary_source":"","published":"2026-02-06T19:23:59.991Z"},{"affected":"< 1.10.4","affected_versions_present":true,"cve_id":"CVE-2025-66629","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66629","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-12-08T20:48:32.268Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-6wm6-3vpq-6qvv","primary_source":"","published":"2025-12-05T22:47:44.994Z"},{"affected":"< 1.10.3","affected_versions_present":true,"cve_id":"CVE-2025-32391","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32391","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-10T13:34:59.611Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/0636b5c20b7097afccfa6641830352ad068ef964","primary_source":"","published":"2025-04-10T13:11:48.634Z"},{"affected":"< 1.10.0","affected_versions_present":true,"cve_id":"CVE-2024-45308","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45308","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-03T14:06:53.073Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/380587b7fd65bc1eb71eef51a3aab324f9877650","primary_source":"","published":"2024-09-02T16:40:31.855Z"},{"affected":"< 1.9.9","affected_versions_present":true,"cve_id":"CVE-2023-38487","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-38487","fixed":"1.9.9.","last_modified":"2024-10-03T18:17:39.633Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-7494-7hcf-vxpg","primary_source":"","published":"2023-08-04T15:40:16.370Z"},{"affected":">=1.9.1, < 1.9.3","affected_versions_present":true,"cve_id":"CVE-2022-24837","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24837","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:40:49.053Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-q6vv-2q26-j7rx","primary_source":"","published":"2022-04-11T20:20:26.000Z"},{"affected":"< 1.9.0","affected_versions_present":true,"cve_id":"CVE-2021-39175","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-39175","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:58:18.195Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-j748-779h-9697","primary_source":"","published":"2021-08-30T20:40:13.000Z"},{"affected":"< 1.8.2","affected_versions_present":true,"cve_id":"CVE-2021-29503","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29503","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:05.313Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-gjg7-4j2h-94fq","primary_source":"","published":"2021-05-19T19:55:10.000Z"},{"affected":"< 1.8.0","affected_versions_present":true,"cve_id":"CVE-2021-29474","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29474","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:05.268Z","patch_url":"https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-p528-555r-pf87","primary_source":"","published":"2021-04-26T21:37:29.000Z"},{"affected":"< 1.5.0","affected_versions_present":true,"cve_id":"CVE-2021-29475","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29475","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:11:05.355Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65","primary_source":"","published":"2021-04-26T18:58:07.000Z"},{"affected":"< 1.7.2","affected_versions_present":true,"cve_id":"CVE-2021-21259","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-21259","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T18:09:14.988Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/35b0d39a12aa35f27fba8c1f50b1886706e7efef","primary_source":"","published":"2021-01-22T17:10:19.000Z"},{"affected":"< 1.7.1","affected_versions_present":true,"cve_id":"CVE-2020-26287","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-26287","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T15:56:03.991Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/58276ebbf4504a682454a3686dcaff88bc1069d4","primary_source":"","published":"2020-12-28T23:30:17.000Z"},{"affected":"< 1.7.1","affected_versions_present":true,"cve_id":"CVE-2020-26286","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-26286","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T15:56:04.326Z","patch_url":"https://github.com/hedgedoc/hedgedoc/commit/e9306991cdb5ff2752c1eeba3fedba42aec3c2d8","primary_source":"","published":"2020-12-28T23:25:13.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"hedgedoc"}}