{"api_version":"v1","generated_at":"2026-10-09T11:15:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-pymedusa-medusa-a5b95e7188f9","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/medusa","name":"Medusa","next_cursor":null,"observations":[{"affected":"< 1.0.19","affected_versions_present":true,"cve_id":"CVE-2023-50259","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50259","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-27T15:45:03.076Z","patch_url":"https://github.com/pymedusa/Medusa/blob/3d656652ab277e47689483912ed7fc443e7023e8/medusa/notifiers/slack.py#L103","primary_source":"","published":"2023-12-22T17:00:00.976Z"},{"affected":"< 1.0.19","affected_versions_present":true,"cve_id":"CVE-2023-50258","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50258","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T16:18:19.076Z","patch_url":"","primary_source":"","published":"2023-12-22T16:55:58.406Z"},{"affected":"< 1.0.12","affected_versions_present":true,"cve_id":"CVE-2023-28627","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28627","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-19T15:20:21.946Z","patch_url":"https://github.com/pymedusa/Medusa/commit/66d4be8f0872bd5ddcdc5c5a58cb014d22834a45","primary_source":"","published":"2023-03-27T20:13:02.302Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"pymedusa"}}