{"api_version":"v1","generated_at":"2026-10-08T14:05:00+00:00","product":{"cve_count":10,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-hkuds-lightrag-8fea3a6a4a80","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/lightrag","name":"LightRAG","next_cursor":null,"observations":[{"affected":"LightRAG: < 1.5.5","affected_versions_present":true,"cve_id":"CVE-2026-86062","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86062","fixed":"1.5.5.","last_modified":"2026-09-22T18:17:00.212Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-xpjq-3w4w-w5wr","primary_source":"","published":"2026-09-22T16:21:43.846Z"},{"affected":"LightRAG: < 1.5.5","affected_versions_present":true,"cve_id":"CVE-2026-85740","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85740","fixed":"1.5.5.","last_modified":"2026-09-28T19:33:46.769Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-vv3m-f8x4-7377","primary_source":"","published":"2026-09-22T16:20:11.620Z"},{"affected":"LightRAG: < 1.5.5","affected_versions_present":true,"cve_id":"CVE-2026-85734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85734","fixed":"1.5.5.","last_modified":"2026-09-22T17:43:42.025Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-frch-4w6v-q5xx","primary_source":"","published":"2026-09-22T16:18:14.144Z"},{"affected":"LightRAG: < 1.5.5","affected_versions_present":true,"cve_id":"CVE-2026-85725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85725","fixed":"1.5.5.","last_modified":"2026-09-25T23:43:12.253Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-c759-cx9p-mrwq","primary_source":"","published":"2026-09-22T16:16:36.326Z"},{"affected":"LightRAG: < 1.5.5","affected_versions_present":true,"cve_id":"CVE-2026-85709","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85709","fixed":"1.5.5.","last_modified":"2026-09-22T18:12:17.281Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-hrmj-7rvj-4hg8","primary_source":"","published":"2026-09-22T16:13:53.046Z"},{"affected":"< 1.5.5rc1","affected_versions_present":true,"cve_id":"CVE-2026-61808","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61808","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T12:25:42.443Z","patch_url":"","primary_source":"","published":"2026-08-07T20:09:49.052Z"},{"affected":"< 1.5.4","affected_versions_present":true,"cve_id":"CVE-2026-61740","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61740","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T15:30:39.185Z","patch_url":"","primary_source":"","published":"2026-07-15T14:14:41.064Z"},{"affected":"< 1.5.4","affected_versions_present":true,"cve_id":"CVE-2026-61736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61736","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T14:59:40.255Z","patch_url":"","primary_source":"","published":"2026-07-15T14:12:45.960Z"},{"affected":"< 1.4.14","affected_versions_present":true,"cve_id":"CVE-2026-39413","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39413","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T15:28:31.845Z","patch_url":"https://github.com/HKUDS/LightRAG/security/advisories/GHSA-8ffj-4hx4-9pgf","primary_source":"","published":"2026-04-08T19:41:23.909Z"},{"affected":"1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; 1.3.6; 1.3.7","affected_versions_present":true,"cve_id":"CVE-2025-6773","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-6773","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-27T19:21:27.100Z","patch_url":"","primary_source":"","published":"2025-06-27T19:00:17.695Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"HKUDS"}}