{"api_version":"v1","generated_at":"2026-10-09T12:50:00+00:00","product":{"cve_count":92,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-ivanti-avalanche-f6bfbf5fd249","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/avalanche","name":"Avalanche","next_cursor":"djE6NTA","observations":[{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2025-8297","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-8297","fixed":"6.4.8.8008","last_modified":"2026-02-26T17:49:41.972Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US","primary_source":"","published":"2025-08-12T14:37:23.954Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2025-8296","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-8296","fixed":"6.4.8.8008","last_modified":"2026-02-26T17:49:42.379Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US","primary_source":"","published":"2025-08-12T14:33:47.566Z"},{"affected":"6.4.0 < 6.4.1","affected_versions_present":true,"cve_id":"CVE-2023-38036","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-38036","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T17:50:43.005Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av23-519","primary_source":"","published":"2025-07-12T03:30:40.265Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-13181","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-13181","fixed":"6.4.7","last_modified":"2025-01-16T19:06:15.676Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs","primary_source":"","published":"2025-01-14T16:53:36.325Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-13180","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-13180","fixed":"6.4.7","last_modified":"2025-01-16T19:01:55.047Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs","primary_source":"","published":"2025-01-14T16:52:41.501Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-13179","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-13179","fixed":"6.4.7","last_modified":"2025-01-16T16:53:23.111Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs","primary_source":"","published":"2025-01-14T16:51:57.334Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50331","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50331","fixed":"6.4.6","last_modified":"2024-11-12T18:48:08.968Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:34:00.342Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50321","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50321","fixed":"6.4.6","last_modified":"2024-11-12T18:49:52.819Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:33:32.796Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50320","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50320","fixed":"6.4.6","last_modified":"2024-11-12T18:57:00.316Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:32:52.112Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50319","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50319","fixed":"6.4.6","last_modified":"2024-11-13T15:43:27.844Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:32:20.257Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50318","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50318","fixed":"6.4.6","last_modified":"2024-11-12T15:53:11.671Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:30:35.740Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-50317","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50317","fixed":"6.4.6","last_modified":"2024-11-12T15:54:12.790Z","patch_url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release","primary_source":"","published":"2024-11-12T15:29:58.447Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-47011","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47011","fixed":"6.4.5","last_modified":"2024-10-08T17:39:16.171Z","patch_url":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","primary_source":"","published":"2024-10-08T16:30:25.388Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-47010","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47010","fixed":"6.4.5","last_modified":"2024-10-08T17:39:47.159Z","patch_url":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","primary_source":"","published":"2024-10-08T16:29:57.222Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-47009","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47009","fixed":"6.4.5","last_modified":"2024-10-08T17:40:31.429Z","patch_url":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","primary_source":"","published":"2024-10-08T16:28:53.641Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-47008","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47008","fixed":"6.4.5","last_modified":"2024-10-08T18:45:02.588Z","patch_url":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","primary_source":"","published":"2024-10-08T16:28:14.887Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2024-47007","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47007","fixed":"6.4.5","last_modified":"2024-10-08T18:46:21.255Z","patch_url":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","primary_source":"","published":"2024-10-08T16:27:46.696Z"},{"affected":"6.4.4 < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-38652","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38652","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-14T13:28:51.173Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456","primary_source":"","published":"2024-08-14T02:38:00.686Z"},{"affected":"6.4.4 < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-37373","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37373","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-16T04:01:47.192Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456","primary_source":"","published":"2024-08-14T02:38:00.225Z"},{"affected":"6.4.4 < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-37399","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37399","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-14T13:46:39.793Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456","primary_source":"","published":"2024-08-14T02:38:00.168Z"},{"affected":"6.4.4 < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-38653","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38653","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-14T13:47:52.793Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456","primary_source":"","published":"2024-08-14T02:38:00.149Z"},{"affected":"6.4.4 < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-36136","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-36136","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-14T13:57:53.500Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456","primary_source":"","published":"2024-08-14T02:38:00.141Z"},{"affected":"6.4.3 \u2264 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-29848","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29848","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-19T05:08:34.779Z","patch_url":"","primary_source":"","published":"2024-05-31T17:38:31.376Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23527","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23527","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-24T19:55:29.993Z","patch_url":"https://www.ivanti.com/blog/security-update-for-ivanti-avalanche","primary_source":"","published":"2024-04-24T23:12:51.975Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23526","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23526","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.188Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:31.066Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-22061","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-22061","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T22:35:34.718Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:30.635Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23529","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23529","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:24.967Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:13.141Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23528","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23528","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.298Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:13.138Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-25000","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25000","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:17.251Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:12.506Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-27977","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27977","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:41:55.951Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.971Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24992","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24992","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-07T00:40:56.985Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.959Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23532","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23532","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.255Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.922Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23535","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23535","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:20.561Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.917Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24998","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24998","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:36:21.396Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.897Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24995","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24995","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:19.399Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.896Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24993","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24993","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:36:21.233Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.886Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24997","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24997","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:19.590Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.872Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24991","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24991","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:36:20.586Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.872Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-27978","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27978","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:41:56.001Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.863Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24994","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24994","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:36:21.246Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.856Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-24996","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24996","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-24T21:08:25.157Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.852Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23534","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23534","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:20.417Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.834Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23533","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23533","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.130Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.827Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23531","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23531","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.127Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.825Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-23530","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23530","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:24.718Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.824Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-27976","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27976","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:22.212Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.814Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-29204","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29204","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:23.406Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.799Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-27975","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27975","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:22.068Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.777Z"},{"affected":"6.4.3 < 6.4.3","affected_versions_present":true,"cve_id":"CVE-2024-27984","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27984","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:41:55.988Z","patch_url":"","primary_source":"","published":"2024-04-19T01:10:11.772Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2023-46220","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46220","fixed":"6.4.1 \u2264 6.4.1","last_modified":"2024-08-02T20:37:40.128Z","patch_url":"https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt","primary_source":"","published":"2023-12-19T15:43:26.358Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Ivanti"}}