{"api_version":"v1","generated_at":"2026-10-08T22:45:00+00:00","product":{"cve_count":20,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-rocketchat-rocket-chat-8f5a0e0254a1","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/rocket.chat","name":"Rocket.Chat","next_cursor":null,"observations":[{"affected":"< 7.10.15; 8.0.0 < 8.1.8; 8.2.0 < 8.2.8; 8.3.0 < 8.3.8; 8.4.0 < 8.4.6; 8.5.0 < 8.5.3; 8.6.0 < 8.6.2; 8.7.0 < 8.7.2","affected_versions_present":true,"cve_id":"CVE-2026-75575","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75575","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-29T11:47:47.758Z","patch_url":"","primary_source":"","published":"2026-08-25T01:30:29.898Z"},{"affected":"< 7.10.14; >= 8.0.0, < 8.0.8; >= 8.1.0, < 8.1.7; >= 8.2.0, < 8.2.7; >= 8.3.0, < 8.3.7; >= 8.4.0, < 8.4.5; >= 8.5.0, < 8.5.2; >= 8.6.0, < 8.6.1","affected_versions_present":true,"cve_id":"CVE-2026-72919","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72919","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T14:26:15.712Z","patch_url":"","primary_source":"","published":"2026-08-10T21:44:59.115Z"},{"affected":"< 7.10.14; >= 8.0.0, < 8.0.8; >= 8.1.0, < 8.1.7; >= 8.2.0, < 8.2.7; >= 8.3.0, < 8.3.7; >= 8.4.0, < 8.4.5; >= 8.5.0, < 8.5.2; >= 8.6.0, < 8.6.1","affected_versions_present":true,"cve_id":"CVE-2026-72918","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72918","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T16:04:45.242Z","patch_url":"","primary_source":"","published":"2026-08-10T21:42:36.707Z"},{"affected":">= 8.5.0-rc.0, < 8.5.1; >= 8.4.0-rc.0, < 8.4.4; >= 8.3.0-rc.0, < 8.3.6; >= 8.2.0-rc.0, < 8.2.6; >= 8.1.0-rc.0, < 8.1.6; >= 7.11.0-rc.0, < 8.0.7; < 7.10.13","affected_versions_present":true,"cve_id":"CVE-2026-55762","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55762","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T12:34:32.535Z","patch_url":"","primary_source":"","published":"2026-06-24T21:08:01.271Z"},{"affected":">= 8.5.0-rc.0, < 8.5.1; >= 8.4.0-rc.0, < 8.4.4; >= 8.3.0-rc.0, < 8.3.6; >= 8.2.0-rc.0, < 8.2.6; >= 8.1.0-rc.0, < 8.1.6; >= 7.11.0-rc.0, < 8.0.7; < 7.10.13","affected_versions_present":true,"cve_id":"CVE-2026-55759","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55759","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T03:55:28.570Z","patch_url":"","primary_source":"","published":"2026-06-24T21:07:29.331Z"},{"affected":">= 8.5.0-rc.0, < 8.5.1; >= 8.4.0-rc.0, < 8.4.4; >= 8.3.0-rc.0, < 8.3.6; >= 8.2.0-rc.0, < 8.2.6; >= 8.1.0-rc.0, < 8.1.6; >= 7.11.0-rc.0, < 8.0.7; < 7.10.13","affected_versions_present":true,"cve_id":"CVE-2026-55666","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55666","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-29T15:34:36.146Z","patch_url":"","primary_source":"","published":"2026-06-24T21:06:55.637Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.2; >= 8.3.0-rc.0, < 8.3.4; >= 8.2.0-rc.0, < 8.2.4; >= 8.1.0-rc.0, < 8.1.5; >= 8.0.0-rc.0, < 8.0.6; >= 7.11.0-rc.0, < 7.13.8; < 7.10.12","affected_versions_present":true,"cve_id":"CVE-2026-49278","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49278","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T03:55:30.759Z","patch_url":"","primary_source":"","published":"2026-06-24T21:05:33.587Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.2; >= 8.3.0-rc.0, < 8.3.4; >= 8.2.0-rc.0, < 8.2.4; >= 8.1.0-rc.0, < 8.1.5; >= 8.0.0-rc.0, < 8.0.6; >= 7.11.0-rc.0, < 7.13.8; < 7.10.12","affected_versions_present":true,"cve_id":"CVE-2026-49277","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49277","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T18:43:44.484Z","patch_url":"","primary_source":"","published":"2026-06-24T21:04:09.602Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.2; >= 8.3.0-rc.0, < 8.3.4; >= 8.2.0-rc.0, < 8.2.4; >= 8.1.0-rc.0, < 8.1.5; >= 8.0.0-rc.0, < 8.0.6; >= 7.11.0-rc.0, < 7.13.8; < 7.10.12","affected_versions_present":true,"cve_id":"CVE-2026-45757","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45757","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T15:32:31.225Z","patch_url":"","primary_source":"","published":"2026-06-24T21:01:56.286Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.1; >= 8.3.0-rc.0, < 8.3.3; >= 8.2.0-rc.0, < 8.2.3; >= 8.1.0-rc.0, < 8.1.4; >= 8.0.0-rc.0, < 8.0.5; >= 7.11.0-rc.0, < 7.13.7; < 7.10.11","affected_versions_present":true,"cve_id":"CVE-2026-46423","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46423","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T03:55:31.819Z","patch_url":"","primary_source":"","published":"2026-06-24T20:58:57.909Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.1; >= 8.3.0-rc.0, < 8.3.3; >= 8.2.0-rc.0, < 8.2.3; >= 8.1.0-rc.0, < 8.1.4; >= 8.0.0-rc.0, < 8.0.5; >= 7.11.0-rc.0, < 7.13.7; < 7.10.11","affected_versions_present":true,"cve_id":"CVE-2026-45689","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45689","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T03:55:35.060Z","patch_url":"","primary_source":"","published":"2026-06-24T20:57:32.281Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.1; >= 8.3.0-rc.0, < 8.3.3; >= 8.2.0-rc.0, < 8.2.3; >= 8.1.0-rc.0, < 8.1.4; >= 8.0.0-rc.0, < 8.0.5; >= 7.11.0-rc.0, < 7.13.7; < 7.10.11","affected_versions_present":true,"cve_id":"CVE-2026-45688","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45688","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T03:55:37.227Z","patch_url":"","primary_source":"","published":"2026-06-24T20:56:44.843Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.1; >= 8.3.0-rc.0, < 8.3.3; >= 8.2.0-rc.0, < 8.2.3; >= 8.1.0-rc.0, < 8.1.4; >= 8.0.0-rc.0, < 8.0.5; >= 7.11.0-rc.0, < 7.13.7; < 7.10.11","affected_versions_present":true,"cve_id":"CVE-2026-45687","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45687","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T18:43:50.524Z","patch_url":"","primary_source":"","published":"2026-06-24T20:55:25.918Z"},{"affected":">= 8.5.0-rc.0, < 8.5.0; >= 8.4.0-rc.0, < 8.4.1; >= 8.3.0-rc.0, < 8.3.3; >= 8.2.0-rc.0, < 8.2.3; >= 8.1.0-rc.0, < 8.1.4; >= 8.0.0-rc.0, < 8.0.5; >= 7.11.0-rc.0, < 7.13.7; < 7.10.11","affected_versions_present":true,"cve_id":"CVE-2026-45677","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45677","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:41:12.096Z","patch_url":"","primary_source":"","published":"2026-06-24T20:54:13.059Z"},{"affected":"< 8.5.0","affected_versions_present":true,"cve_id":"CVE-2026-47733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47733","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T14:46:51.318Z","patch_url":"","primary_source":"","published":"2026-06-24T20:51:29.245Z"},{"affected":"< 7.10.8; < 7.11.5; < 7.12.5; < 7.13.4; < 8.0.2; < 8.1.1; < 8.2.0","affected_versions_present":true,"cve_id":"CVE-2026-30833","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30833","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-09T14:56:03.564Z","patch_url":"","primary_source":"","published":"2026-03-06T17:40:36.939Z"},{"affected":"< 7.10.8; < 7.11.5; < 7.12.5; < 7.13.4; < 8.0.2; < 8.1.1; < 8.2.0","affected_versions_present":true,"cve_id":"CVE-2026-30831","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30831","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-11T03:56:34.815Z","patch_url":"https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-7qr6-q62g-hm63","primary_source":"","published":"2026-03-06T17:40:27.824Z"},{"affected":"< 7.8.6; < 7.9.8; < 7.10.7; < 7.11.4; < 7.12.4; < 7.13.3; < 8.0.0","affected_versions_present":true,"cve_id":"CVE-2026-28514","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28514","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-11T03:56:35.920Z","patch_url":"https://github.com/RocketChat/Rocket.Chat/pull/37143","primary_source":"","published":"2026-03-06T17:35:01.841Z"},{"affected":"< 6.12.0","affected_versions_present":true,"cve_id":"CVE-2026-23477","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23477","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-14T21:14:08.081Z","patch_url":"","primary_source":"","published":"2026-01-14T18:16:05.178Z"},{"affected":"< 3.11.3","affected_versions_present":true,"cve_id":"CVE-2021-32832","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32832","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T23:33:55.938Z","patch_url":"https://docs.rocket.chat/guides/security/security-updates","primary_source":"","published":"2021-08-30T20:55:13.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"RocketChat"}}