{"api_version":"v1","generated_at":"2026-10-08T09:45:00+00:00","product":{"cve_count":12,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-lemmynet-lemmy-0e7ae2ab2dfc","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/lemmy","name":"lemmy","next_cursor":null,"observations":[{"affected":"< 0.19.19; >= 1.0.0-alpha.5, < 1.0.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2026-54738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54738","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-21T21:48:26.962Z","patch_url":"","primary_source":"","published":"2026-08-19T20:27:45.162Z"},{"affected":"< 0.19.19-beta.1","affected_versions_present":true,"cve_id":"CVE-2026-54743","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54743","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-21T18:17:01.041Z","patch_url":"","primary_source":"","published":"2026-08-19T20:18:43.124Z"},{"affected":"< 0.19.19; >= 1.0.0-alpha.0, < 1.0.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2026-54739","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54739","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-21T21:48:33.495Z","patch_url":"","primary_source":"","published":"2026-08-19T20:16:01.050Z"},{"affected":"< 0.19.19; >= 1.0.0-alpha.0, < 1.0.0-alpha.18","affected_versions_present":true,"cve_id":"CVE-2026-54740","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54740","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T19:57:12.849Z","patch_url":"","primary_source":"","published":"2026-08-19T20:14:29.391Z"},{"affected":"< 0.19.19; >= 1.0.0-alpha.0, < 1.0.0-alpha.18","affected_versions_present":true,"cve_id":"CVE-2026-54741","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54741","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T13:21:16.938Z","patch_url":"","primary_source":"","published":"2026-08-19T20:13:05.201Z"},{"affected":"< 0.19.19; >= 1.0.0-alpha.0, < 1.0.0-alpha.20","affected_versions_present":true,"cve_id":"CVE-2026-54742","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54742","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T20:01:19.950Z","patch_url":"","primary_source":"","published":"2026-08-19T20:10:56.632Z"},{"affected":"< 0.19.18","affected_versions_present":true,"cve_id":"CVE-2026-42180","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42180","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T17:18:23.284Z","patch_url":"","primary_source":"","published":"2026-05-08T19:29:04.132Z"},{"affected":"< 0.19.18","affected_versions_present":true,"cve_id":"CVE-2026-42181","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42181","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-11T16:01:01.124Z","patch_url":"","primary_source":"","published":"2026-05-08T19:26:07.763Z"},{"affected":"< 0.7.0-beta.9","affected_versions_present":true,"cve_id":"CVE-2026-33693","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33693","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T11:51:10.425Z","patch_url":"","primary_source":"","published":"2026-03-27T00:03:35.946Z"},{"affected":"< 0.19.16","affected_versions_present":true,"cve_id":"CVE-2026-29178","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29178","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-06T18:33:08.993Z","patch_url":"","primary_source":"","published":"2026-03-06T17:56:09.378Z"},{"affected":"<= 0.19.8","affected_versions_present":true,"cve_id":"CVE-2025-25194","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-25194","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-11T15:19:46.586Z","patch_url":"","primary_source":"","published":"2025-02-10T22:14:32.302Z"},{"affected":">= 0.17.0, < 0.19.1","affected_versions_present":true,"cve_id":"CVE-2024-23649","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23649","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-30T14:16:25.819Z","patch_url":"https://github.com/LemmyNet/lemmy/commit/bc32b408b523b9b64aa57b8e47748f96cce0dae5","primary_source":"","published":"2024-01-24T18:09:30.401Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"LemmyNet"}}