{"api_version":"v1","generated_at":"2026-10-08T09:05:00+00:00","product":{"cve_count":25,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-mybb-mybb-17822ab085a2","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mybb","name":"MyBB","next_cursor":null,"observations":[{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45118","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45118","fixed":"1.8.40.","last_modified":"2026-08-18T17:52:25.117Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-wf92-5q5h-qr53","primary_source":"","published":"2026-08-18T15:55:27.280Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45117","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45117","fixed":"1.8.40.","last_modified":"2026-08-18T18:58:22.820Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-gpc4-77rp-3xqr","primary_source":"","published":"2026-08-18T15:53:29.914Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45129","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45129","fixed":"1.8.40.","last_modified":"2026-08-18T18:57:46.576Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-75vg-6wgp-mcc9","primary_source":"","published":"2026-08-18T15:53:03.385Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45124","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45124","fixed":"1.8.40.","last_modified":"2026-08-19T14:45:32.486Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-gfxj-g7w6-6w4v","primary_source":"","published":"2026-08-18T15:52:31.738Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45120","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45120","fixed":"1.8.40.","last_modified":"2026-08-18T17:46:20.052Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-c2hm-g9w6-pv6x","primary_source":"","published":"2026-08-18T15:52:03.093Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-47245","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47245","fixed":"1.8.40.","last_modified":"2026-08-18T17:37:22.369Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-w8gm-j57p-jqpc","primary_source":"","published":"2026-08-18T15:51:33.857Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45734","fixed":"1.8.40.","last_modified":"2026-08-19T14:43:38.996Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-jrrr-f3jw-mjmc","primary_source":"","published":"2026-08-18T15:51:07.257Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45125","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45125","fixed":"1.8.40.","last_modified":"2026-08-18T17:46:25.763Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-f626-53q9-pqm9","primary_source":"","published":"2026-08-18T15:50:38.936Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45122","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45122","fixed":"1.8.40.","last_modified":"2026-08-18T17:54:36.990Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-839m-gpw8-59j4","primary_source":"","published":"2026-08-18T15:50:02.080Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45119","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45119","fixed":"1.8.40.","last_modified":"2026-08-19T14:41:09.985Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-p48q-4vgf-q7x8","primary_source":"","published":"2026-08-18T15:49:14.763Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45126","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45126","fixed":"1.8.40.","last_modified":"2026-08-18T18:02:06.736Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-m42q-vgx3-fqcc","primary_source":"","published":"2026-08-18T15:47:09.205Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45116","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45116","fixed":"1.8.40.","last_modified":"2026-08-18T17:55:31.261Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-4p6g-p3qh-559v","primary_source":"","published":"2026-08-18T15:46:34.212Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45115","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45115","fixed":"1.8.40.","last_modified":"2026-08-18T17:55:22.351Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-p766-qqxv-rfc2","primary_source":"","published":"2026-08-18T15:46:00.862Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45121","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45121","fixed":"1.8.40.","last_modified":"2026-08-18T18:50:21.265Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-r25v-7pcm-q34p","primary_source":"","published":"2026-08-18T15:45:29.958Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-46482","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46482","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T17:46:31.511Z","patch_url":"","primary_source":"","published":"2026-08-18T15:44:59.644Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45123","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45123","fixed":"1.8.40.","last_modified":"2026-08-18T18:55:56.614Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-56wr-64wx-5g7j","primary_source":"","published":"2026-08-18T15:44:26.555Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45128","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45128","fixed":"1.8.40.","last_modified":"2026-08-18T17:55:54.781Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-m6hr-25cj-p58q","primary_source":"","published":"2026-08-18T15:43:41.889Z"},{"affected":"< 1.8.40","affected_versions_present":true,"cve_id":"CVE-2026-45127","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45127","fixed":"1.8.40.","last_modified":"2026-08-19T14:39:44.656Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-xx78-g79m-qvgq","primary_source":"","published":"2026-08-18T15:38:41.434Z"},{"affected":"MyBB 1.8.32","affected_versions_present":true,"cve_id":"CVE-2023-53979","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-53979","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-05T12:03:23.604Z","patch_url":"","primary_source":"","published":"2025-12-22T21:35:35.951Z"},{"affected":"< 1.8.39","affected_versions_present":true,"cve_id":"CVE-2025-48941","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48941","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-02T16:07:10.790Z","patch_url":"https://github.com/mybb/mybb/commit/b8cc332a27e145c33effaccec90e23c103ae5193","primary_source":"","published":"2025-06-02T15:58:49.498Z"},{"affected":"< 1.8.39","affected_versions_present":true,"cve_id":"CVE-2025-48940","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48940","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-02T16:06:00.967Z","patch_url":"https://github.com/mybb/mybb/commit/6e6cfbd524d9101b51e1278ecf520479b64b0f00","primary_source":"","published":"2025-06-02T15:52:36.740Z"},{"affected":"< 1.8.38","affected_versions_present":true,"cve_id":"CVE-2024-23335","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23335","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T22:59:32.211Z","patch_url":"https://github.com/mybb/mybb/commit/450259e501b94c9d483efb167cb2bf875605e111.patch","primary_source":"","published":"2024-05-01T06:27:42.162Z"},{"affected":"< 1.8.38","affected_versions_present":true,"cve_id":"CVE-2024-23336","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23336","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T22:59:32.176Z","patch_url":"https://github.com/mybb/mybb/commit/d6a96019025de9149014e06b1df252e6122e5630","primary_source":"","published":"2024-05-01T06:27:37.987Z"},{"affected":"< 1.8.37","affected_versions_present":true,"cve_id":"CVE-2023-46251","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46251","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-04T19:32:41.984Z","patch_url":"https://github.com/mybb/mybb/commit/6dcaf0b4db6254f1833fe8dae295d9ddc2219276","primary_source":"","published":"2023-11-06T17:41:30.378Z"},{"affected":"< 1.8.31","affected_versions_present":true,"cve_id":"CVE-2022-39265","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39265","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T17:19:51.525Z","patch_url":"https://github.com/mybb/mybb/commit/0cd318136a10b029bb5c8a8f6dddf39d87519797","primary_source":"","published":"2022-10-06T00:00:00.000Z"},{"affected":">= 1.2.0, < 1.8.30","affected_versions_present":true,"cve_id":"CVE-2022-24734","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24734","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T18:19:20.055Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-876v-gwgh-w57f","primary_source":"","published":"2022-03-09T21:25:08.000Z"},{"affected":"< 1.8.24","affected_versions_present":true,"cve_id":"CVE-2020-15139","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-15139","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T13:08:22.286Z","patch_url":"https://github.com/mybb/mybb/security/advisories/GHSA-37h7-vfv6-f8rj","primary_source":"","published":"2020-08-10T21:35:13.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Mybb"}}