{"api_version":"v1","generated_at":"2026-10-08T22:45:00+00:00","product":{"cve_count":27,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-kanboard-kanboard-6dffc6d0998e","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/kanboard","name":"Kanboard","next_cursor":null,"observations":[{"affected":"Kanboard: \u2264 1.2.52","affected_versions_present":true,"cve_id":"CVE-2026-57862","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-57862","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:17:54.637Z","patch_url":"","primary_source":"","published":"2026-07-30T15:26:23.187Z"},{"affected":"< 1.2.52","affected_versions_present":true,"cve_id":"CVE-2026-58660","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58660","fixed":"564cc30e1e360959572e01e158734d9475c05903","last_modified":"2026-07-15T17:54:24.732Z","patch_url":"https://github.com/kanboard/kanboard/issues/5852","primary_source":"","published":"2026-07-15T17:03:17.834Z"},{"affected":"\u2264 1.2.52","affected_versions_present":true,"cve_id":"CVE-2026-56774","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56774","fixed":"928c68aa2b7c00092dd71084d329b912e229f3d1","last_modified":"2026-07-14T21:34:23.469Z","patch_url":"https://github.com/kanboard/kanboard/issues/5829","primary_source":"","published":"2026-06-25T18:10:22.017Z"},{"affected":"< 1.2.51","affected_versions_present":true,"cve_id":"CVE-2026-33058","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33058","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-18T18:21:18.142Z","patch_url":"","primary_source":"","published":"2026-03-18T02:17:03.625Z"},{"affected":"< 1.2.51","affected_versions_present":true,"cve_id":"CVE-2026-29056","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29056","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-18T14:01:17.860Z","patch_url":"https://github.com/kanboard/kanboard/security/advisories/GHSA-2jvj-q44v-6p3x","primary_source":"","published":"2026-03-18T01:56:19.315Z"},{"affected":"< 1.2.50","affected_versions_present":true,"cve_id":"CVE-2026-25531","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25531","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-13T15:32:51.222Z","patch_url":"https://github.com/kanboard/kanboard/commit/df7b7a21ee071f36466d8b38e40d0b0b8b8d394d","primary_source":"","published":"2026-02-13T15:04:24.316Z"},{"affected":"< 1.2.50","affected_versions_present":true,"cve_id":"CVE-2026-25924","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25924","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-12T21:18:27.186Z","patch_url":"https://github.com/kanboard/kanboard/commit/b9ada89b1a64034612fc4262b88c42458c0d6ee4","primary_source":"","published":"2026-02-11T20:43:19.575Z"},{"affected":"< 1.2.50","affected_versions_present":true,"cve_id":"CVE-2026-25530","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25530","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-10T17:06:13.410Z","patch_url":"https://github.com/kanboard/kanboard/commit/c3d8d20e05322b09e036fed7afb57194d624a414","primary_source":"","published":"2026-02-10T16:47:58.617Z"},{"affected":"< 1.2.50","affected_versions_present":true,"cve_id":"CVE-2026-24885","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24885","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-10T17:27:35.020Z","patch_url":"https://github.com/kanboard/kanboard/commit/2c56d92783d4a3094812c2f7cba50f80a372f95e","primary_source":"","published":"2026-02-10T16:40:01.579Z"},{"affected":"< 1.2.49","affected_versions_present":true,"cve_id":"CVE-2026-21881","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21881","fixed":"1.2.49.","last_modified":"2026-01-08T17:13:05.216Z","patch_url":"https://github.com/kanboard/kanboard/commit/7af6143e2ad25b5c15549cca8af4341c7ac4e2fc","primary_source":"","published":"2026-01-08T01:08:01.853Z"},{"affected":"< 1.2.49","affected_versions_present":true,"cve_id":"CVE-2026-21880","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21880","fixed":"1.2.49.","last_modified":"2026-01-08T18:29:16.406Z","patch_url":"https://github.com/kanboard/kanboard/commit/dd374079f7c2d1dab74c1680960e684ff8668586","primary_source":"","published":"2026-01-08T00:59:20.338Z"},{"affected":"< 1.2.49","affected_versions_present":true,"cve_id":"CVE-2026-21879","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21879","fixed":"1.2.49.","last_modified":"2026-01-08T18:34:42.665Z","patch_url":"https://github.com/kanboard/kanboard/commit/93bcae03301a6d34185a8dba977417e6b3de519f","primary_source":"","published":"2026-01-08T00:51:50.954Z"},{"affected":"< 1.2.47","affected_versions_present":true,"cve_id":"CVE-2025-55010","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55010","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-12T16:24:36.343Z","patch_url":"https://github.com/kanboard/kanboard/commit/7148ac092e5db6b33e0fc35e04bca328d96c1f6f","primary_source":"","published":"2025-08-12T15:57:13.343Z"},{"affected":"< 1.2.47","affected_versions_present":true,"cve_id":"CVE-2025-55011","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55011","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-12T19:31:01.757Z","patch_url":"https://github.com/kanboard/kanboard/commit/523a6135e944b6884c091a3fd7605af8ef133681","primary_source":"","published":"2025-08-12T15:57:08.108Z"},{"affected":"< 1.2.46","affected_versions_present":true,"cve_id":"CVE-2025-52576","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-52576","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-25T17:55:05.784Z","patch_url":"https://github.com/kanboard/kanboard/commit/3079623640dc39f9c7b0c840d2a79095331051f1","primary_source":"","published":"2025-06-25T16:46:01.954Z"},{"affected":"< 1.2.46","affected_versions_present":true,"cve_id":"CVE-2025-52560","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-52560","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-24T15:02:43.025Z","patch_url":"https://github.com/kanboard/kanboard/commit/bca2bd7ab95e7990e358fd35a7daf51a9c16aa75","primary_source":"","published":"2025-06-24T02:56:26.589Z"},{"affected":">= 1.2.26, < 1.2.45","affected_versions_present":true,"cve_id":"CVE-2025-46825","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-46825","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-13T14:11:07.793Z","patch_url":"https://github.com/kanboard/kanboard/commit/6ebf22eeaae9f8b4abab72e3c18e45a2c4a2a808","primary_source":"","published":"2025-05-12T22:53:42.294Z"},{"affected":"< 1.2.43","affected_versions_present":true,"cve_id":"CVE-2024-55603","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-55603","fixed":"1.2.43","last_modified":"2024-12-20T20:12:10.648Z","patch_url":"https://github.com/kanboard/kanboard/commit/7ce61c34d962ca8b5dce776289ddf4b207be6e78","primary_source":"","published":"2024-12-18T23:52:57.327Z"},{"affected":"< 1.2.41","affected_versions_present":true,"cve_id":"CVE-2024-54001","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-54001","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-05T16:41:45.720Z","patch_url":"","primary_source":"","published":"2024-12-05T15:17:47.891Z"},{"affected":"< 1.2.42","affected_versions_present":true,"cve_id":"CVE-2024-51747","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-51747","fixed":"1.2.42","last_modified":"2024-11-12T01:45:29.297Z","patch_url":"https://github.com/kanboard/kanboard/security/advisories/GHSA-78pf-vg56-5p8v","primary_source":"","published":"2024-11-11T19:22:27.261Z"},{"affected":"< 1.2.42","affected_versions_present":true,"cve_id":"CVE-2024-51748","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-51748","fixed":"1.2.42","last_modified":"2024-11-12T14:44:13.741Z","patch_url":"https://github.com/kanboard/kanboard/security/advisories/GHSA-jvff-x577-j95p","primary_source":"","published":"2024-11-11T19:20:29.400Z"},{"affected":"1.2.37","affected_versions_present":true,"cve_id":"CVE-2024-36399","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-36399","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T03:37:05.195Z","patch_url":"https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7","primary_source":"","published":"2024-06-06T15:15:46.978Z"},{"affected":"< 1.2.31","affected_versions_present":true,"cve_id":"CVE-2023-36813","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36813","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:26.598Z","patch_url":"https://github.com/kanboard/kanboard/commit/25b93343baeaf8ad018dcd87b094e47a5c6a3e0a","primary_source":"","published":"2023-07-05T21:05:53.347Z"},{"affected":"< 1.2.30","affected_versions_present":true,"cve_id":"CVE-2023-33969","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33969","fixed":"1.2.30.","last_modified":"2025-01-08T16:00:50.616Z","patch_url":"https://github.com/kanboard/kanboard/commit/05f1d23d821152cd61536d3b09e522c0f7573e3c","primary_source":"","published":"2023-06-05T19:57:11.800Z"},{"affected":"< 1.2.30","affected_versions_present":true,"cve_id":"CVE-2023-33970","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33970","fixed":"1.2.30.","last_modified":"2025-01-08T16:01:46.073Z","patch_url":"https://github.com/kanboard/kanboard/commit/b501ef44bc28ee9cf603a4fa446ee121d66f652f","primary_source":"","published":"2023-06-05T19:54:38.686Z"},{"affected":"< 1.2.30","affected_versions_present":true,"cve_id":"CVE-2023-33968","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33968","fixed":"1.2.30.","last_modified":"2025-01-08T16:02:26.334Z","patch_url":"https://github.com/kanboard/kanboard/commit/c20be8f5fa26e54005a90c645e80b11481a65053","primary_source":"","published":"2023-06-05T19:49:17.550Z"},{"affected":"< 1.2.30","affected_versions_present":true,"cve_id":"CVE-2023-33956","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33956","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-08T16:03:58.295Z","patch_url":"https://github.com/kanboard/kanboard/commit/437b141fa2267df36976814e704517f30d2424bd","primary_source":"","published":"2023-06-05T19:34:51.508Z"},{"affected":"< 1.2.29","affected_versions_present":true,"cve_id":"CVE-2023-32685","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-32685","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-10T20:35:42.916Z","patch_url":"https://github.com/kanboard/kanboard/commit/26b6eebb78d4306e48b836a58f7c386251aa2bc7","primary_source":"","published":"2023-05-30T04:11:50.569Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Kanboard"}}