{"api_version":"v1","generated_at":"2026-10-08T00:45:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-pomerium-pomerium-e8fa5fb04abd","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/pomerium","name":"pomerium","next_cursor":null,"observations":[{"affected":"pomerium: < 0.32.8","affected_versions_present":true,"cve_id":"CVE-2026-50285","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50285","fixed":"0.32.8.","last_modified":"2026-09-17T20:19:48.967Z","patch_url":"https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77","primary_source":"","published":"2026-09-17T19:49:20.917Z"},{"affected":"< 0.27.1","affected_versions_present":true,"cve_id":"CVE-2024-47616","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47616","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-03T15:43:26.879Z","patch_url":"","primary_source":"","published":"2024-10-02T21:10:24.146Z"},{"affected":"< 0.26.1","affected_versions_present":true,"cve_id":"CVE-2024-39315","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-39315","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T04:19:20.747Z","patch_url":"https://github.com/pomerium/pomerium/commit/4c7c4320afb2ced70ba19b46de1ac4383f3daa48","primary_source":"","published":"2024-07-02T20:02:06.120Z"},{"affected":">= 0.22.0, < 0.22.2; >= 0.21.0, < 0.21.4; >= 0.20.0, < 0.20.1; >= 0.19.0, < 0.19.2; >= 0.18.0, < 0.18.1; < 0.17.4","affected_versions_present":true,"cve_id":"CVE-2023-33189","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33189","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-10T19:02:02.336Z","patch_url":"https://github.com/pomerium/pomerium/commit/d315e683357a9b587ba9ef399a8813bcc52fdebb","primary_source":"","published":"2023-05-30T05:39:45.132Z"},{"affected":">= v0.16.0, < v0.17.1","affected_versions_present":true,"cve_id":"CVE-2022-24797","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24797","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:42:56.245Z","patch_url":"https://github.com/pomerium/pomerium/pull/3212","primary_source":"","published":"2022-03-31T22:40:12.000Z"},{"affected":">= 0.14.0, < 0.15.6","affected_versions_present":true,"cve_id":"CVE-2021-41230","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41230","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T03:08:31.639Z","patch_url":"https://github.com/pomerium/pomerium/pull/2724","primary_source":"","published":"2021-11-05T22:40:12.000Z"},{"affected":">= 0.11.0, < 0.14.8; >= 0.15.0, < 0.15.1","affected_versions_present":true,"cve_id":"CVE-2021-39206","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-39206","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T01:58:18.262Z","patch_url":"","primary_source":"","published":"2021-09-09T22:10:15.000Z"},{"affected":"< 0.14.8; >= 0.15.0, < 0.15.1","affected_versions_present":true,"cve_id":"CVE-2021-39204","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-39204","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T01:58:18.254Z","patch_url":"","primary_source":"","published":"2021-09-09T22:10:09.000Z"},{"affected":">= 0.15.0, < 0.15.1","affected_versions_present":true,"cve_id":"CVE-2021-39162","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-39162","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T01:58:18.235Z","patch_url":"","primary_source":"","published":"2021-09-09T22:05:11.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"pomerium"}}