{"api_version":"v1","generated_at":"2026-10-09T01:30:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-knadh-listmonk-420a2381b684","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/listmonk","name":"listmonk","next_cursor":null,"observations":[{"affected":"< 6.2.0","affected_versions_present":true,"cve_id":"CVE-2026-62361","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62361","fixed":"6.2.0.","last_modified":"2026-07-16T15:12:24.544Z","patch_url":"https://github.com/knadh/listmonk/security/advisories/GHSA-xgjr-7j9q-2h4r","primary_source":"","published":"2026-07-15T20:56:45.832Z"},{"affected":">= 4.1.0, < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-34828","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34828","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-03T17:33:57.751Z","patch_url":"https://github.com/knadh/listmonk/commit/db82035d619348949512dafdaf60c86037cafc9e","primary_source":"","published":"2026-04-02T17:32:24.756Z"},{"affected":">= 4.1.0, < 6.1.0","affected_versions_present":true,"cve_id":"CVE-2026-34584","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34584","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-02T19:09:02.060Z","patch_url":"https://github.com/knadh/listmonk/security/advisories/GHSA-85j8-5c6w-gcpv","primary_source":"","published":"2026-04-02T17:31:37.615Z"},{"affected":"< 6.0.0","affected_versions_present":true,"cve_id":"CVE-2026-21483","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-21483","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-02T21:18:57.834Z","patch_url":"","primary_source":"","published":"2026-01-02T20:57:29.332Z"},{"affected":"listmonk: <= 1.1.0","affected_versions_present":true,"cve_id":"CVE-2025-58430","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58430","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-10T13:55:42.949Z","patch_url":"","primary_source":"","published":"2025-09-09T19:37:45.468Z"},{"affected":">= 4.0.0, < 5.0.2","affected_versions_present":true,"cve_id":"CVE-2025-49136","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-49136","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T13:25:02.262Z","patch_url":"https://github.com/knadh/listmonk/commit/d27d2c32cf3af2d0b24e29ea5a686ba149b49b3e","primary_source":"","published":"2025-06-09T16:21:48.266Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"knadh"}}