{"api_version":"v1","generated_at":"2026-10-08T16:10:00+00:00","product":{"cve_count":26,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-jumpserver-jumpserver-f6ae486b3688","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/jumpserver","name":"jumpserver","next_cursor":null,"observations":[{"affected":"< 4.10.17","affected_versions_present":true,"cve_id":"CVE-2026-44846","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44846","fixed":"4.10.17.","last_modified":"2026-08-18T13:13:42.335Z","patch_url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-j836-99w5-523r","primary_source":"","published":"2026-08-17T21:04:18.891Z"},{"affected":"< 4.10.17","affected_versions_present":true,"cve_id":"CVE-2026-44845","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44845","fixed":"4.10.17.","last_modified":"2026-08-18T18:37:24.255Z","patch_url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-22h6-pcgh-9v7q","primary_source":"","published":"2026-08-17T21:03:08.891Z"},{"affected":">= 4.8.0, < 4.10.17","affected_versions_present":true,"cve_id":"CVE-2026-54336","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54336","fixed":"4.10.17.","last_modified":"2026-08-18T13:09:21.804Z","patch_url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-x6rg-36j6-76vr","primary_source":"","published":"2026-08-17T21:01:48.667Z"},{"affected":"< 3.10.22; >= 4.0.0, < 4.10.16","affected_versions_present":true,"cve_id":"CVE-2026-31864","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31864","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-13T19:44:51.850Z","patch_url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-qx8h-rx2j-j5wc","primary_source":"","published":"2026-03-13T19:22:05.168Z"},{"affected":"< 4.10.16-lts","affected_versions_present":true,"cve_id":"CVE-2026-31798","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31798","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-13T19:38:35.576Z","patch_url":"","primary_source":"","published":"2026-03-13T19:15:26.081Z"},{"affected":"< 3.10.19; >= 4.0.0, < 4.10.5","affected_versions_present":true,"cve_id":"CVE-2025-58044","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58044","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-12-01T20:33:33.039Z","patch_url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-h762-mj7p-jwjq","primary_source":"","published":"2025-12-01T20:17:44.222Z"},{"affected":"< 3.10.21-lts; >= 4.0.0, < 4.10.12-lts","affected_versions_present":true,"cve_id":"CVE-2025-62795","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62795","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-31T18:37:42.071Z","patch_url":"","primary_source":"","published":"2025-10-30T16:56:09.321Z"},{"affected":">= 4.0.0, < 4.10.11-lts; < 3.10.20-lts","affected_versions_present":true,"cve_id":"CVE-2025-62712","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62712","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-31T17:42:40.815Z","patch_url":"https://github.com/jumpserver/jumpserver/commit/453ad331eec9d9667a38de735d6612608e558491","primary_source":"","published":"2025-10-30T16:08:32.669Z"},{"affected":"< 3.10.18; >= 4.0.0, < 4.8.0","affected_versions_present":true,"cve_id":"CVE-2025-27095","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27095","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-31T18:53:50.455Z","patch_url":"","primary_source":"","published":"2025-03-31T15:08:20.942Z"},{"affected":">= 3.0.0, < 3.10.12","affected_versions_present":true,"cve_id":"CVE-2024-40628","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-40628","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:58:34.928Z","patch_url":"","primary_source":"","published":"2024-07-18T17:05:21.662Z"},{"affected":">= 3.0.0, < 3.10.12","affected_versions_present":true,"cve_id":"CVE-2024-40629","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-40629","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:59:14.014Z","patch_url":"","primary_source":"","published":"2024-07-18T17:04:10.251Z"},{"affected":">= 3.0.0, <= 3.10.6","affected_versions_present":true,"cve_id":"CVE-2024-29202","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29202","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:57:03.512Z","patch_url":"","primary_source":"","published":"2024-03-29T14:57:43.606Z"},{"affected":">= 3.0.0, <= 3.10.6","affected_versions_present":true,"cve_id":"CVE-2024-29201","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29201","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:38:50.208Z","patch_url":"","primary_source":"","published":"2024-03-29T14:57:40.323Z"},{"affected":">= 3.0.0, <= 3.10.5","affected_versions_present":true,"cve_id":"CVE-2024-29020","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29020","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T01:03:51.654Z","patch_url":"","primary_source":"","published":"2024-03-29T14:46:00.417Z"},{"affected":">= 3.0.0, <= 3.10.5","affected_versions_present":true,"cve_id":"CVE-2024-29024","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29024","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T01:03:51.546Z","patch_url":"","primary_source":"","published":"2024-03-29T14:45:56.377Z"},{"affected":"< 3.10.0","affected_versions_present":true,"cve_id":"CVE-2024-24763","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24763","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:28:11.975Z","patch_url":"","primary_source":"","published":"2024-02-20T17:35:08.825Z"},{"affected":"< 3.8.0","affected_versions_present":true,"cve_id":"CVE-2023-46138","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46138","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-05T20:17:16.984Z","patch_url":"https://github.com/jumpserver/jumpserver/commit/15a5dda9e0cdbe2ac618a6b2a09df8928f485c88","primary_source":"","published":"2023-10-30T23:53:15.101Z"},{"affected":"< 3.8.0","affected_versions_present":true,"cve_id":"CVE-2023-46123","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46123","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:30:48.886Z","patch_url":"","primary_source":"","published":"2023-10-25T00:13:00.565Z"},{"affected":">= 3.6.0, < 3.6.5; < 3.5.6","affected_versions_present":true,"cve_id":"CVE-2023-42818","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42818","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:28:32.560Z","patch_url":"","primary_source":"","published":"2023-09-27T20:28:30.507Z"},{"affected":">= 2.0.0, < 2.28.20; >= 3.0.0, < 3.7.1","affected_versions_present":true,"cve_id":"CVE-2023-43651","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43651","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:35:30.016Z","patch_url":"","primary_source":"","published":"2023-09-27T20:24:08.733Z"},{"affected":">= 2.0.0, < 2.28.20; >= 3.0.0, < 3.7.1","affected_versions_present":true,"cve_id":"CVE-2023-43650","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43650","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:24:24.277Z","patch_url":"","primary_source":"","published":"2023-09-27T18:33:46.034Z"},{"affected":">= 2.0.0, < 2.28.20; >= 3.0.0, < 3.7.1","affected_versions_present":true,"cve_id":"CVE-2023-43652","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43652","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-25T19:27:03.036Z","patch_url":"","primary_source":"","published":"2023-09-27T18:31:41.320Z"},{"affected":">= 3.0.0, < 3.6.5","affected_versions_present":true,"cve_id":"CVE-2023-42819","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42819","fixed":"3.6.5.","last_modified":"2024-09-23T20:26:00.445Z","patch_url":"https://github.com/jumpserver/jumpserver/commit/d0321a74f1713d031560341c8fd0a1859e6510d8","primary_source":"","published":"2023-09-26T20:40:41.578Z"},{"affected":">= 2.24, < 2.28.19; >= 3.0.0, < 3.6.5","affected_versions_present":true,"cve_id":"CVE-2023-42820","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42820","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-23T20:26:58.683Z","patch_url":"https://github.com/jumpserver/jumpserver/commit/42337f0d00b2a8d45ef063eb5b7deeef81597da5","primary_source":"","published":"2023-09-26T20:35:22.853Z"},{"affected":">= 3.0.0, < 3.5.5; >= 3.6.0, < 3.6.4","affected_versions_present":true,"cve_id":"CVE-2023-42442","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42442","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-25T17:27:54.293Z","patch_url":"https://github.com/jumpserver/jumpserver/commit/0a58bba59cd275bab8e0ae58bf4b359fbc5eb74a","primary_source":"","published":"2023-09-15T20:29:12.166Z"},{"affected":"< 2.28.8","affected_versions_present":true,"cve_id":"CVE-2023-28110","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28110","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-25T14:55:29.601Z","patch_url":"https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8","primary_source":"","published":"2023-03-16T16:18:49.977Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"jumpserver"}}