{"api_version":"v1","generated_at":"2026-10-09T10:00:00+00:00","product":{"cve_count":36,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-kimai-kimai-ab1446d5b1f2","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Kimai","next_cursor":null,"observations":[{"affected":"kimai: < 2.59.0","affected_versions_present":true,"cve_id":"CVE-2026-52827","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52827","fixed":"2.59.0.","last_modified":"2026-09-16T16:08:20.250Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-v8hx-4vx8-wc96","primary_source":"","published":"2026-09-15T10:45:03.605Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-52822","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52822","fixed":"2.58.0.","last_modified":"2026-09-15T13:52:17.628Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-c6w6-57jj-62vh","primary_source":"","published":"2026-09-15T10:44:08.637Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-52828","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52828","fixed":"2.58.0.","last_modified":"2026-09-15T12:29:14.797Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-rw46-qg69-vg6h","primary_source":"","published":"2026-09-15T10:43:09.990Z"},{"affected":"kimai: < 2.57.0","affected_versions_present":true,"cve_id":"CVE-2026-52826","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52826","fixed":"2.57.0.","last_modified":"2026-09-15T12:41:20.164Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-2xgg-2x8h-8xw4","primary_source":"","published":"2026-09-15T10:42:13.451Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-52823","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52823","fixed":"2.58.0.","last_modified":"2026-09-15T13:52:24.796Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-r8vr-m544-qh4h","primary_source":"","published":"2026-09-15T10:41:17.840Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-52824","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52824","fixed":"2.58.0.","last_modified":"2026-09-16T17:33:01.273Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-jr9p-4h4j-6c58","primary_source":"","published":"2026-09-15T10:40:28.739Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-52825","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52825","fixed":"2.58.0.","last_modified":"2026-09-15T12:34:38.943Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-xv4r-4885-gwpg","primary_source":"","published":"2026-09-15T10:39:15.019Z"},{"affected":"kimai: < 2.57.0","affected_versions_present":true,"cve_id":"CVE-2026-52821","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52821","fixed":"2.57.0.","last_modified":"2026-09-17T14:20:56.384Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-3q6q-26vg-v97x","primary_source":"","published":"2026-09-15T10:38:16.963Z"},{"affected":"kimai: < 2.57.0","affected_versions_present":true,"cve_id":"CVE-2026-52820","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52820","fixed":"2.57.0.","last_modified":"2026-09-15T12:42:21.215Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-vrr2-g9gh-c3jc","primary_source":"","published":"2026-09-15T10:37:17.720Z"},{"affected":"kimai: < 2.57.0","affected_versions_present":true,"cve_id":"CVE-2026-52819","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-52819","fixed":"2.57.0.","last_modified":"2026-09-15T15:17:07.990Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-4m8q-55qv-9pwp","primary_source":"","published":"2026-09-15T10:36:02.531Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-49992","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49992","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T16:14:53.650Z","patch_url":"","primary_source":"","published":"2026-09-11T21:29:34.927Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-49865","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49865","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T19:58:41.023Z","patch_url":"","primary_source":"","published":"2026-09-11T21:08:47.179Z"},{"affected":"< 2.65.0","affected_versions_present":true,"cve_id":"CVE-2026-84808","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84808","fixed":"2.65.0","last_modified":"2026-09-02T13:51:07.056Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-c6j4-35fc-x3hw","primary_source":"","published":"2026-09-02T11:11:20.412Z"},{"affected":"< 2.65.0","affected_versions_present":true,"cve_id":"CVE-2026-84807","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84807","fixed":"2.65.0","last_modified":"2026-09-02T12:38:36.545Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-hvq2-5gh2-rgvv","primary_source":"","published":"2026-09-02T11:11:19.729Z"},{"affected":"< 2.63.0","affected_versions_present":true,"cve_id":"CVE-2026-84806","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84806","fixed":"2.63.0","last_modified":"2026-09-02T16:00:48.846Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-gmm9-hfxg-7v29","primary_source":"","published":"2026-09-02T11:11:19.049Z"},{"affected":"2.61.0 < 2.63.0","affected_versions_present":true,"cve_id":"CVE-2026-84805","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84805","fixed":"2.63.0","last_modified":"2026-09-02T13:11:21.797Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-5mpc-5cg2-g99r","primary_source":"","published":"2026-09-02T11:11:18.388Z"},{"affected":"< 2.65.0","affected_versions_present":true,"cve_id":"CVE-2026-84804","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84804","fixed":"2.65.0","last_modified":"2026-09-04T02:27:09.396Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-mc86-77vp-82g3","primary_source":"","published":"2026-09-02T11:11:17.676Z"},{"affected":"kimai: < 2.56.0","affected_versions_present":true,"cve_id":"CVE-2026-80202","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80202","fixed":"kimai: 2.56.0","last_modified":"2026-10-08T15:25:23.141Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-9g2q-w3w2-vf7q","primary_source":"","published":"2026-08-25T23:19:07.165Z"},{"affected":"kimai: < 2.53.0","affected_versions_present":true,"cve_id":"CVE-2026-80201","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80201","fixed":"kimai: 2.53.0","last_modified":"2026-10-08T15:25:22.048Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-rh42-6rj2-xwmc","primary_source":"","published":"2026-08-25T23:19:06.486Z"},{"affected":"kimai: < 2.53.0","affected_versions_present":true,"cve_id":"CVE-2026-80200","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80200","fixed":"kimai: 2.53.0","last_modified":"2026-10-08T15:25:20.694Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-3jp4-mhh4-gcgr","primary_source":"","published":"2026-08-25T23:19:05.809Z"},{"affected":"kimai: < 2.54.0","affected_versions_present":true,"cve_id":"CVE-2026-80199","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80199","fixed":"kimai: 2.54.0","last_modified":"2026-10-08T15:25:19.728Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-jrc6-fmhw-fpq2","primary_source":"","published":"2026-08-25T23:19:05.166Z"},{"affected":"kimai: < 2.56.0","affected_versions_present":true,"cve_id":"CVE-2026-80198","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80198","fixed":"kimai: 2.56.0","last_modified":"2026-10-08T15:25:19.148Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-vrqv-52x7-rm4v","primary_source":"","published":"2026-08-25T23:19:04.492Z"},{"affected":"kimai: < 2.57.0","affected_versions_present":true,"cve_id":"CVE-2026-80197","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80197","fixed":"kimai: 2.57.0","last_modified":"2026-10-08T15:25:18.540Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-j5mc-p8qg-39j7","primary_source":"","published":"2026-08-25T23:19:03.788Z"},{"affected":"kimai: < 2.58.0","affected_versions_present":true,"cve_id":"CVE-2026-80196","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80196","fixed":"kimai: 2.58.0","last_modified":"2026-10-08T15:25:17.971Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-m492-gv72-xvxj","primary_source":"","published":"2026-08-25T23:19:03.107Z"},{"affected":"< 2.63.0","affected_versions_present":true,"cve_id":"CVE-2026-80195","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80195","fixed":"2.63.0","last_modified":"2026-08-26T16:10:29.520Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-6rxf-4hh9-pp46","primary_source":"","published":"2026-08-25T23:19:02.395Z"},{"affected":"< 2.64.0","affected_versions_present":true,"cve_id":"CVE-2026-80194","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80194","fixed":"2.64.0","last_modified":"2026-08-26T12:17:35.542Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-pvc4-crg3-gj44","primary_source":"","published":"2026-08-25T23:19:01.718Z"},{"affected":"< 2.62.0","affected_versions_present":true,"cve_id":"CVE-2026-80193","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80193","fixed":"2.62.0","last_modified":"2026-08-28T22:42:25.572Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-2w7f-x78f-89q2","primary_source":"","published":"2026-08-25T23:19:01.048Z"},{"affected":">= 2.32.0, < 2.56.0","affected_versions_present":true,"cve_id":"CVE-2026-44298","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44298","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T14:06:31.033Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-h5fh-7hwr-97mw","primary_source":"","published":"2026-05-08T03:32:06.672Z"},{"affected":"< 2.54.0","affected_versions_present":true,"cve_id":"CVE-2026-41498","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41498","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T21:28:32.582Z","patch_url":"","primary_source":"","published":"2026-05-08T03:30:32.310Z"},{"affected":">= 2.27.0, < 2.54.0","affected_versions_present":true,"cve_id":"CVE-2026-42267","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42267","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-08T12:58:12.770Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-3xc2-h5r3-wv3r","primary_source":"","published":"2026-05-08T03:28:52.226Z"},{"affected":"< 2.53.0","affected_versions_present":true,"cve_id":"CVE-2026-40486","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40486","fixed":"2.53.0.","last_modified":"2026-04-20T14:56:51.165Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-qh43-xrjm-4ggp","primary_source":"","published":"2026-04-17T22:35:53.543Z"},{"affected":">= 1.16.3, < 2.53.0","affected_versions_present":true,"cve_id":"CVE-2026-40479","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40479","fixed":"2.53.0.","last_modified":"2026-04-20T16:16:41.880Z","patch_url":"https://github.com/kimai/kimai/security/advisories/GHSA-g82g-m9vx-vhjg","primary_source":"","published":"2026-04-17T22:31:29.930Z"},{"affected":"< 2.51.0","affected_versions_present":true,"cve_id":"CVE-2026-28685","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28685","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-09T19:46:54.339Z","patch_url":"https://github.com/kimai/kimai/commit/a0601c8cb28fed1cca19051a8272425069ab758f","primary_source":"","published":"2026-03-06T04:49:08.312Z"},{"affected":"< 2.46.0","affected_versions_present":true,"cve_id":"CVE-2026-23626","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23626","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-20T20:07:08.477Z","patch_url":"https://github.com/kimai/kimai/commit/6a86afb5fd79f6c1825060b87c09bd1909c2e86f","primary_source":"","published":"2026-01-18T22:45:35.942Z"},{"affected":"Kimai: 1.30.10","affected_versions_present":true,"cve_id":"CVE-2023-53957","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-53957","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-08T15:21:03.196Z","patch_url":"","primary_source":"","published":"2025-12-19T21:05:52.561Z"},{"affected":"< 2.13.0","affected_versions_present":true,"cve_id":"CVE-2024-29200","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29200","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T01:10:54.793Z","patch_url":"","primary_source":"","published":"2024-03-28T13:28:36.005Z"},{"affected":"< 2.1.0","affected_versions_present":true,"cve_id":"CVE-2023-46245","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46245","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T20:37:40.150Z","patch_url":"","primary_source":"","published":"2023-10-31T15:06:23.359Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Kimai"}}