{"api_version":"v1","generated_at":"2026-10-08T09:05:00+00:00","product":{"cve_count":44,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-mastodon-mastodon-d76aa43af024","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mastodon","name":"mastodon","next_cursor":null,"observations":[{"affected":"mastodon: < 4.4.19, >= 4.5.0, < 4.5.12","affected_versions_present":true,"cve_id":"CVE-2026-59825","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59825","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T15:51:15.337Z","patch_url":"","primary_source":"","published":"2026-08-18T15:07:14.555Z"},{"affected":"< 4.4.21; >= 4.5.0-beta.1, < 4.5.14; >= 4.6.0-beta.1, < 4.6.4","affected_versions_present":true,"cve_id":"CVE-2026-72916","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72916","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-13T15:13:23.011Z","patch_url":"","primary_source":"","published":"2026-08-10T21:19:02.908Z"},{"affected":">= 4.6.0-beta.1, < 4.6.4","affected_versions_present":true,"cve_id":"CVE-2026-72915","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72915","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T17:09:10.053Z","patch_url":"","primary_source":"","published":"2026-08-10T21:16:19.820Z"},{"affected":"< 4.4.21; >= 4.5.0-beta.1, < 4.5.14; >= 4.6.0-beta.1, < 4.6.4","affected_versions_present":true,"cve_id":"CVE-2026-72914","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72914","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T13:24:54.383Z","patch_url":"","primary_source":"","published":"2026-08-10T21:13:20.856Z"},{"affected":">= 4.5.0-beta.1, < 4.5.11; >= 4.4.0-beta.1, < 4.4.18; < 4.3.24","affected_versions_present":true,"cve_id":"CVE-2026-50129","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50129","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:25:42.411Z","patch_url":"","primary_source":"","published":"2026-06-24T19:50:51.968Z"},{"affected":">= 4.5.0-beta.1, < 4.5.11; >= 4.3.0, < 4.4.18","affected_versions_present":true,"cve_id":"CVE-2026-50128","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50128","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T15:40:03.219Z","patch_url":"","primary_source":"","published":"2026-06-24T19:48:52.942Z"},{"affected":">= 4.5.0-beta.1, < 4.5.10; >= 4.4.0-beta.1, < 4.4.17; < 4.3.23","affected_versions_present":true,"cve_id":"CVE-2026-48028","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48028","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:26:34.764Z","patch_url":"","primary_source":"","published":"2026-06-24T19:43:01.469Z"},{"affected":">= 4.5.0-beta.1, < 4.5.10","affected_versions_present":true,"cve_id":"CVE-2026-47389","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47389","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T15:40:38.972Z","patch_url":"","primary_source":"","published":"2026-06-24T19:41:21.150Z"},{"affected":">= 4.5.0-beta.1, < 4.5.10","affected_versions_present":true,"cve_id":"CVE-2026-46349","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46349","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:16:49.851Z","patch_url":"","primary_source":"","published":"2026-06-24T19:40:35.022Z"},{"affected":">= 4.5.0-beta.1, < 4.5.10","affected_versions_present":true,"cve_id":"CVE-2026-46348","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46348","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T17:11:24.737Z","patch_url":"","primary_source":"","published":"2026-06-24T19:39:46.332Z"},{"affected":">= nightly.2026-03-10, < 4.6.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2026-47777","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47777","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-15T18:51:29.498Z","patch_url":"","primary_source":"","published":"2026-06-15T16:54:44.612Z"},{"affected":"< 4.3.22; >= 4.4.0-beta.1, < 4.4.16; >= 4.5.0-beta.1, < 4.5.9","affected_versions_present":true,"cve_id":"CVE-2026-41259","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41259","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-23T19:24:15.567Z","patch_url":"","primary_source":"","published":"2026-04-23T18:55:20.854Z"},{"affected":">= 4.5.0, < 4.5.8; >= 4.4.0, < 4.4.15","affected_versions_present":true,"cve_id":"CVE-2026-33869","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33869","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-27T20:29:18.521Z","patch_url":"","primary_source":"","published":"2026-03-27T19:52:21.166Z"},{"affected":">= 4.5.0, < 4.5.8; >= 4.4.0, < 4.4.15; < 4.3.21","affected_versions_present":true,"cve_id":"CVE-2026-33868","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33868","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T18:54:24.919Z","patch_url":"","primary_source":"","published":"2026-03-27T19:50:07.687Z"},{"affected":">= 4.4.0, < 4.4.14; >= 4.5.0, < 4.5.7","affected_versions_present":true,"cve_id":"CVE-2026-27477","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27477","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T19:29:12.052Z","patch_url":"https://github.com/mastodon/mastodon/security/advisories/GHSA-46w6-g98f-wxqm","primary_source":"","published":"2026-02-24T19:00:20.590Z"},{"affected":">= 4.4.0, < 4.4.14; >= 4.5.0, < 4.5.7","affected_versions_present":true,"cve_id":"CVE-2026-27468","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27468","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-27T20:50:52.856Z","patch_url":"https://github.com/mastodon/mastodon/security/advisories/GHSA-qgmm-vr4c-ggjg","primary_source":"","published":"2026-02-24T17:12:40.349Z"},{"affected":"< 4.3.19; < 4.4.13; < 4.5.6","affected_versions_present":true,"cve_id":"CVE-2026-25540","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25540","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-05T18:30:11.981Z","patch_url":"","primary_source":"","published":"2026-02-04T21:42:09.460Z"},{"affected":"< 4.3.18; >= 4.4.0, < 4.4.12; >= 4.5.0, < 4.5.5","affected_versions_present":true,"cve_id":"CVE-2026-23964","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23964","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T17:02:23.614Z","patch_url":"","primary_source":"","published":"2026-01-22T01:55:29.904Z"},{"affected":"< 4.3.18; >= 4.4.0, < 4.4.12; >= 4.5.0, < 4.5.5","affected_versions_present":true,"cve_id":"CVE-2026-23963","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23963","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T17:32:13.067Z","patch_url":"","primary_source":"","published":"2026-01-22T01:53:49.887Z"},{"affected":"< 4.3.18; >= 4.4.0, < 4.4.12; >= 4.5.0, < 4.5.5","affected_versions_present":true,"cve_id":"CVE-2026-23962","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23962","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T21:35:41.343Z","patch_url":"","primary_source":"","published":"2026-01-22T01:51:37.430Z"},{"affected":"< 4.3.18; >= 4.4.0, < 4.4.12; >= 4.5.0, < 4.5.5","affected_versions_present":true,"cve_id":"CVE-2026-23961","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23961","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T21:38:52.885Z","patch_url":"","primary_source":"","published":"2026-01-22T01:47:36.828Z"},{"affected":"< 4.3.17; >= 4.4.0-beta.1, < 4.4.11; >= 4.5.0-beta.1, < 4.5.4","affected_versions_present":true,"cve_id":"CVE-2026-22246","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22246","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T15:54:24.770Z","patch_url":"https://github.com/mastodon/mastodon/commit/68e30985ca7afdb89af1b2e9dc962e1993dc8076","primary_source":"","published":"2026-01-08T15:27:21.490Z"},{"affected":"< 4.2.29; >= 4.3.0-beta.1, < 4.3.17; >= 4.4.0-beta.1, < 4.4.11; >= 4.5.0-beta.1, < 4.5.4","affected_versions_present":true,"cve_id":"CVE-2026-22245","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22245","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T15:54:30.680Z","patch_url":"https://github.com/mastodon/mastodon/commit/0f4e8a6240b5af1f2c3f34d2793d8610c6ef2aca","primary_source":"","published":"2026-01-08T15:23:13.639Z"},{"affected":"< 4.2.28; >= 4.3.0-beta.1, < 4.3.15; >= 4.4.0-beta.1, < 4.4.10; >= 4.5.0-beta.1, < 4.5.3","affected_versions_present":true,"cve_id":"CVE-2025-67500","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-67500","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T15:18:54.860Z","patch_url":"https://github.com/mastodon/mastodon/pull/37077/commits/9957d3218cb33fea6a44bb285e2ba4795a059e4f","primary_source":"","published":"2025-12-09T23:44:04.501Z"},{"affected":">= 4.4.0-beta.1, < 4.4.8; = 4.5.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2025-62605","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62605","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-21T18:00:16.343Z","patch_url":"https://github.com/mastodon/mastodon/commit/2dc4552229b55e2e4adaef675e68ed7ae123d78e","primary_source":"","published":"2025-10-21T16:46:37.879Z"},{"affected":">= 4.4.0-beta.1, < 4.4.6; >= 4.3.0-beta.1, < 4.3.14; < 4.2.27","affected_versions_present":true,"cve_id":"CVE-2025-62176","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62176","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-14T13:53:19.170Z","patch_url":"https://github.com/mastodon/mastodon/commit/7e98fa9b476fdaed235519f1d527eb956004ba0c","primary_source":"","published":"2025-10-13T21:04:53.206Z"},{"affected":">= 4.4.0-beta.1, < 4.4.6; >= 4.3.0-beta.1, < 4.3.14; < 4.2.27","affected_versions_present":true,"cve_id":"CVE-2025-62175","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62175","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-14T13:58:02.806Z","patch_url":"https://github.com/mastodon/mastodon/commit/2971ac9863b91372e68ac152caf6f4dbff511d17","primary_source":"","published":"2025-10-13T20:59:31.260Z"},{"affected":">= 4.4.0-beta.1, < 4.4.6; >= 4.3.0-beta.1, < 4.3.14; < 4.2.27","affected_versions_present":true,"cve_id":"CVE-2025-62174","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62174","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-14T14:00:54.691Z","patch_url":"https://github.com/mastodon/mastodon/commit/1631fb80e8029d2c5425a03a2297b93f7e225217","primary_source":"","published":"2025-10-13T20:54:36.040Z"},{"affected":">= 3.1.5, < 4.2.24; >= 4.3.0, < 4.3.11; >= 4.4.0, < 4.4.3","affected_versions_present":true,"cve_id":"CVE-2025-54879","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54879","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-06T20:32:56.740Z","patch_url":"https://github.com/mastodon/mastodon/commit/e2592419d93fb41be03c2f3ff6a122fecb0e0952","primary_source":"","published":"2025-08-05T23:39:59.130Z"},{"affected":"< 4.1.23; >= 4.2.0, < 4.2.16; >= 4.3.0, < 4.3.4","affected_versions_present":true,"cve_id":"CVE-2025-27399","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27399","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-27T17:59:31.801Z","patch_url":"https://github.com/mastodon/mastodon/commit/6b519cfefa93a923b19d0f20c292c7185f8fd5f5","primary_source":"","published":"2025-02-27T17:15:05.208Z"},{"affected":">= 4.2.0, < 4.2.16; >= 4.3.0, < 4.3.4","affected_versions_present":true,"cve_id":"CVE-2025-27157","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27157","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-27T18:10:00.154Z","patch_url":"https://github.com/mastodon/mastodon/commit/06f879ce9bea195344ac9f71e6799eea500628ec","primary_source":"","published":"2025-02-27T17:12:39.043Z"},{"affected":">= 2.6.0, < 4.1.18; >= 4.2.0, < 4.2.10","affected_versions_present":true,"cve_id":"CVE-2024-37903","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37903","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:04:23.423Z","patch_url":"https://github.com/mastodon/mastodon/commit/a1c7aae28aecf06659c5b18cfa131b37cd1512a3","primary_source":"","published":"2024-07-05T17:24:49.213Z"},{"affected":"< 3.5.19; >= 4.0.0, < 4.0.15; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.7","affected_versions_present":true,"cve_id":"CVE-2024-25623","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25623","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:44:09.828Z","patch_url":"https://github.com/mastodon/mastodon/commit/9fee5e852669e26f970e278021302e1a203fc022","primary_source":"","published":"2024-02-19T15:28:15.296Z"},{"affected":">= 4.2.6, < 4.2.6; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.14; < 3.5.18","affected_versions_present":true,"cve_id":"CVE-2024-25619","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25619","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:44:09.688Z","patch_url":"https://github.com/mastodon/mastodon/commit/68eaa804c9bafdc5f798e114e9ba00161425dd71","primary_source":"","published":"2024-02-14T20:50:10.809Z"},{"affected":">= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.14; < 3.5.18","affected_versions_present":true,"cve_id":"CVE-2024-25618","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25618","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-12T15:16:42.597Z","patch_url":"https://github.com/mastodon/mastodon/commit/b31af34c9716338e4a32a62cc812d1ca59e88d15","primary_source":"","published":"2024-02-14T20:45:50.621Z"},{"affected":"< 3.5.17; >= 4.0.0, < 4.0.13; >= 4.1.0, < 4.1.13; >= 4.2.0, < 4.2.5","affected_versions_present":true,"cve_id":"CVE-2024-23832","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23832","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:39:53.949Z","patch_url":"https://github.com/mastodon/mastodon/commit/1726085db5cd73dd30953da858f9887bcc90b958","primary_source":"","published":"2024-02-01T16:18:03.528Z"},{"affected":">= 4.0.0, < 4.0.10; >= 4.1.0, < 4.1.8; >= 4.2.0-beta1, < 4.2.0-rc2","affected_versions_present":true,"cve_id":"CVE-2023-42452","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42452","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-24T18:11:03.787Z","patch_url":"https://github.com/mastodon/mastodon/commit/ff32475f5f4a84ebf9619e7eef5bf8b4c075d0e2","primary_source":"","published":"2023-09-19T15:58:44.559Z"},{"affected":"< 3.5.14; >= 4.0.0, < 4.0.10; >= 4.1.0, < 4.1.8; >= 4.2.0-beta1, < 4.2.0-rc2","affected_versions_present":true,"cve_id":"CVE-2023-42451","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42451","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-24T20:36:19.326Z","patch_url":"https://github.com/mastodon/mastodon/commit/eeab3560fc0516070b3fb97e089b15ecab1938c8","primary_source":"","published":"2023-09-19T15:56:46.962Z"},{"affected":">= 4.2.0-beta1, < 4.2.0-rc2","affected_versions_present":true,"cve_id":"CVE-2023-42450","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-42450","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-18T14:28:57.529Z","patch_url":"https://github.com/mastodon/mastodon/commit/94893cf24fc95b32cc7a756262acbe008c20a9d2","primary_source":"","published":"2023-09-19T15:53:39.685Z"},{"affected":">= 2.6.0, < 3.5.9; >= 4.0.0, < 4.0.5; >= 4.1.0, < 4.1.3","affected_versions_present":true,"cve_id":"CVE-2023-36462","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36462","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-24T14:25:32.031Z","patch_url":"https://github.com/mastodon/mastodon/commit/610731b03dfcadd887078cb0399f4e514aa1931c","primary_source":"","published":"2023-07-06T19:16:37.617Z"},{"affected":"< 3.5.9; >= 4.0.0, < 4.0.5; >= 4.1.0, < 4.1.3","affected_versions_present":true,"cve_id":"CVE-2023-36461","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36461","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:18.466Z","patch_url":"https://github.com/mastodon/mastodon/commit/c5929798bf7e56cc2c79b15bed0c4692ded3dcb6","primary_source":"","published":"2023-07-06T18:57:59.160Z"},{"affected":">= 3.5.0, < 3.5.9; >= 4.0.0, < 4.0.5; >= 4.1.0, < 4.1.3","affected_versions_present":true,"cve_id":"CVE-2023-36460","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36460","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:17.936Z","patch_url":"https://github.com/mastodon/mastodon/commit/dc8f1fbd976ae544720a4e07120d9a91b2722440","primary_source":"","published":"2023-07-06T18:39:09.825Z"},{"affected":">= 1.3, < 3.5.9; >= 4.0.0, < 4.0.5; >= 4.1.0, < 4.1.3","affected_versions_present":true,"cve_id":"CVE-2023-36459","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36459","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:17.330Z","patch_url":"https://github.com/mastodon/mastodon/commit/6d8e0fae3e96f3cf4febe03fa7fcf5b95ff761b2","primary_source":"","published":"2023-07-06T18:29:07.669Z"},{"affected":">= 2.5.0, < 3.5.8; >= 4.0.0, < 4.0.4; >= 4.1.0, < 4.1.2","affected_versions_present":true,"cve_id":"CVE-2023-28853","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28853","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:48:56.318Z","patch_url":"https://github.com/mastodon/mastodon/pull/24379","primary_source":"","published":"2023-04-04T21:14:53.350Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"mastodon"}}