{"api_version":"v1","generated_at":"2026-10-08T17:30:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-immich-app-immich-d9da07035123","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/immich","name":"Immich","next_cursor":null,"observations":[{"affected":"immich: < 3.2.4","affected_versions_present":true,"cve_id":"CVE-2026-105764","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-105764","fixed":"3.2.4.","last_modified":"2026-10-06T17:59:18.642Z","patch_url":"https://github.com/immich-app/immich/security/advisories/GHSA-q89f-h332-8q2h","primary_source":"","published":"2026-10-05T23:07:38.844Z"},{"affected":"Immich: 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5","affected_versions_present":true,"cve_id":"CVE-2026-103532","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103532","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-01T18:58:33.513Z","patch_url":"","primary_source":"","published":"2026-10-01T01:15:17.384Z"},{"affected":"immich: \u2264 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-82272","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82272","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:20:03.572Z","patch_url":"","primary_source":"","published":"2026-08-28T16:18:54.845Z"},{"affected":"immich: < 3.0.3","affected_versions_present":true,"cve_id":"CVE-2026-59258","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59258","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T18:57:27.040Z","patch_url":"","primary_source":"","published":"2026-07-15T17:03:57.291Z"},{"affected":">= main@4ffa26c9, < main@4eb1003","affected_versions_present":true,"cve_id":"CVE-2026-53662","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-53662","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T18:32:43.755Z","patch_url":"","primary_source":"","published":"2026-06-23T17:36:30.727Z"},{"affected":"< 2.7.3","affected_versions_present":true,"cve_id":"CVE-2026-40096","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40096","fixed":"2.7.3.","last_modified":"2026-04-15T16:19:07.744Z","patch_url":"https://github.com/immich-app/immich/security/advisories/GHSA-24fq-72x8-v7hm","primary_source":"","published":"2026-04-14T23:54:17.662Z"},{"affected":"< 2.7.0","affected_versions_present":true,"cve_id":"CVE-2026-35455","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35455","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-13T15:36:26.045Z","patch_url":"","primary_source":"","published":"2026-04-08T18:31:27.418Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-25118","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25118","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-04T03:19:19.166Z","patch_url":"https://github.com/immich-app/immich/pull/26868","primary_source":"","published":"2026-04-03T15:51:07.171Z"},{"affected":"< 2.5.0","affected_versions_present":true,"cve_id":"CVE-2026-23896","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23896","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-29T21:25:38.711Z","patch_url":"","primary_source":"","published":"2026-01-29T17:12:43.543Z"},{"affected":"< 1.132.0","affected_versions_present":true,"cve_id":"CVE-2025-43856","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-43856","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-07-11T18:13:00.477Z","patch_url":"","primary_source":"","published":"2025-07-11T17:10:52.423Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"immich-app"}}