{"api_version":"v1","generated_at":"2026-10-08T16:50:00+00:00","product":{"cve_count":8,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-quic-go-quic-go-ccca7d29a96b","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"quic-go","next_cursor":null,"observations":[{"affected":"< 0.59.1","affected_versions_present":true,"cve_id":"CVE-2026-40898","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40898","fixed":"For details on how to apply this update, refer to Ansible Automation Platform documentation.","last_modified":"2026-06-04T18:40:44.304Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-40898","primary_source":"","published":"2026-06-04T17:43:36.803Z"},{"affected":"< 0.57.0","affected_versions_present":true,"cve_id":"CVE-2025-64702","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64702","fixed":"0.57.0.","last_modified":"2025-12-12T20:45:30.439Z","patch_url":"https://github.com/quic-go/quic-go/commit/5b2d2129f8315da41e01eff0a847ab38a34e83a8","primary_source":"","published":"2025-12-11T20:58:10.517Z"},{"affected":"< 0.49.1; >= 0.5.0, < 0.54.1","affected_versions_present":true,"cve_id":"CVE-2025-59530","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59530","fixed":"Red Hat Ansible Automation Platform","last_modified":"2025-10-10T16:31:47.457Z","patch_url":"https://access.redhat.com/security/cve/CVE-2025-59530","primary_source":"","published":"2025-10-10T16:09:55.227Z"},{"affected":"= 0.50.0","affected_versions_present":true,"cve_id":"CVE-2025-29785","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-29785","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-02T12:01:18.236Z","patch_url":"","primary_source":"","published":"2025-06-02T10:44:18.817Z"},{"affected":"< 0.48.2","affected_versions_present":true,"cve_id":"CVE-2024-53259","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-53259","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-02T19:28:08.531Z","patch_url":"","primary_source":"","published":"2024-12-02T16:12:40.605Z"},{"affected":"< 0.42.0","affected_versions_present":true,"cve_id":"CVE-2024-22189","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-22189","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-23T19:29:41.592Z","patch_url":"","primary_source":"","published":"2024-04-04T14:25:43.663Z"},{"affected":"= 0.40.0; >= 0.39.0, < 0.39.4; >= 0.38.0, < 0.38.2; < 0.37.7","affected_versions_present":true,"cve_id":"CVE-2023-49295","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-49295","fixed":"Red Hat Ansible Automation Platform","last_modified":"2025-06-17T20:59:15.978Z","patch_url":"https://access.redhat.com/security/cve/CVE-2023-49295","primary_source":"","published":"2024-01-10T21:40:58.881Z"},{"affected":">= 0.37.0, < 0.37.3","affected_versions_present":true,"cve_id":"CVE-2023-46239","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46239","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-05T17:37:20.453Z","patch_url":"https://github.com/quic-go/quic-go/security/advisories/GHSA-3q6m-v84f-6p9h","primary_source":"","published":"2023-10-31T15:02:03.413Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"quic-go"}}