{"api_version":"v1","generated_at":"2026-10-05T09:40:00+00:00","product":{"cve_count":43,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-statamic-cms-d431704ddaab","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/statamic","name":"cms","next_cursor":null,"observations":[{"affected":"< 5.74.3; >= 6.0.0, < 6.24.2","affected_versions_present":true,"cve_id":"CVE-2026-71435","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71435","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-08T02:31:25.913Z","patch_url":"","primary_source":"","published":"2026-08-06T19:37:54.834Z"},{"affected":"< 5.74.3; >= 6.0.0, < 6.24.2","affected_versions_present":true,"cve_id":"CVE-2026-71434","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71434","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:09:29.808Z","patch_url":"","primary_source":"","published":"2026-08-06T19:34:48.880Z"},{"affected":"< 5.74.1; >= 6.0.0, < 6.24.0","affected_versions_present":true,"cve_id":"CVE-2026-64662","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-64662","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T16:06:25.327Z","patch_url":"","primary_source":"","published":"2026-08-06T19:30:35.445Z"},{"affected":"< 5.74.1; >= 6.0.0, < 6.24.0","affected_versions_present":true,"cve_id":"CVE-2026-64663","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-64663","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:38:59.964Z","patch_url":"","primary_source":"","published":"2026-08-06T19:28:06.165Z"},{"affected":"< 5.74.1; >= 6.0.0, < 6.24.0","affected_versions_present":true,"cve_id":"CVE-2026-64665","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-64665","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:09:33.394Z","patch_url":"","primary_source":"","published":"2026-08-06T19:25:01.756Z"},{"affected":">= 6.0.0, < 6.24.0; < 5.74.1","affected_versions_present":true,"cve_id":"CVE-2026-64664","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-64664","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T15:37:51.817Z","patch_url":"","primary_source":"","published":"2026-08-06T19:22:29.620Z"},{"affected":"\u2264 6.23.0","affected_versions_present":true,"cve_id":"CVE-2026-71293","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71293","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T11:47:28.203Z","patch_url":"","primary_source":"","published":"2026-08-05T12:38:44.666Z"},{"affected":"< 5.73.24; >= 6.0.0, < 6.20.1","affected_versions_present":true,"cve_id":"CVE-2026-54243","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54243","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T13:34:48.019Z","patch_url":"","primary_source":"","published":"2026-07-17T20:24:53.576Z"},{"affected":"< 5.73.24; >= 6.0.0, < 6.20.1","affected_versions_present":true,"cve_id":"CVE-2026-54242","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54242","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T15:31:25.686Z","patch_url":"","primary_source":"","published":"2026-07-17T20:23:42.129Z"},{"affected":"< 5.74.0; >= 6.0.0, < 6.20.3","affected_versions_present":true,"cve_id":"CVE-2026-54244","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54244","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T19:11:22.297Z","patch_url":"","primary_source":"","published":"2026-07-17T20:22:35.728Z"},{"affected":"< 5.73.23; >= 6.0.0, < 6.20.0","affected_versions_present":true,"cve_id":"CVE-2026-49288","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49288","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T17:51:34.960Z","patch_url":"","primary_source":"","published":"2026-06-19T18:11:53.331Z"},{"affected":"< 5.73.23; >= 6.0.0, < 6.20.0","affected_versions_present":true,"cve_id":"CVE-2026-49287","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49287","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T14:22:02.202Z","patch_url":"","primary_source":"","published":"2026-06-19T17:36:23.536Z"},{"affected":"< 5.73.22; >= 6.0.0-alpha.1, < 6.18.1","affected_versions_present":true,"cve_id":"CVE-2026-45660","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45660","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-29T19:36:42.883Z","patch_url":"","primary_source":"","published":"2026-05-29T16:43:34.231Z"},{"affected":"< 5.73.21; >= 6.0.0, < 6.15.0","affected_versions_present":true,"cve_id":"CVE-2026-44306","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44306","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T18:20:39.730Z","patch_url":"","primary_source":"","published":"2026-05-12T21:30:36.390Z"},{"affected":"< 5.73.20; >= 6.0.0-alpha.1, < 6.13.0","affected_versions_present":true,"cve_id":"CVE-2026-41175","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41175","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-23T13:56:09.912Z","patch_url":"","primary_source":"","published":"2026-04-22T21:25:49.585Z"},{"affected":"< 5.73.16; >= 6.0.0-alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33887","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33887","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T18:54:25.297Z","patch_url":"","primary_source":"","published":"2026-03-27T20:41:23.715Z"},{"affected":">= 5.73.12, < 5.73.16; >= 6.0.0.alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33886","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33886","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T18:54:03.269Z","patch_url":"","primary_source":"","published":"2026-03-27T20:40:22.577Z"},{"affected":"< 5.73.16; >= 6.0.0.alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33885","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33885","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T14:00:13.275Z","patch_url":"","primary_source":"","published":"2026-03-27T20:39:17.726Z"},{"affected":"< 5.73.16; >= 6.0.0-alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33884","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33884","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T15:37:30.499Z","patch_url":"","primary_source":"","published":"2026-03-27T20:38:19.737Z"},{"affected":"< 5.73.16; >= 6.0.0-alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33883","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33883","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-30T18:56:50.916Z","patch_url":"","primary_source":"","published":"2026-03-27T20:37:21.190Z"},{"affected":"< 5.73.16; >= 6.0.0-alpha.1, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-33882","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33882","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T18:54:08.799Z","patch_url":"","primary_source":"","published":"2026-03-27T20:36:31.666Z"},{"affected":">= 6.0.0-alpha.1, < 6.7.0; < 5.73.14","affected_versions_present":true,"cve_id":"CVE-2026-33177","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33177","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-23T16:49:26.359Z","patch_url":"","primary_source":"","published":"2026-03-20T21:41:36.485Z"},{"affected":">= 6.0.0-alpha.1, < 6.7.0; < 5.73.14","affected_versions_present":true,"cve_id":"CVE-2026-33172","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33172","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-25T13:46:16.341Z","patch_url":"","primary_source":"","published":"2026-03-20T21:40:46.736Z"},{"affected":">= 6.0.0-alpha.1, < 6.7.0; < 5.73.14","affected_versions_present":true,"cve_id":"CVE-2026-33171","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33171","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-23T21:41:51.358Z","patch_url":"","primary_source":"","published":"2026-03-20T21:39:40.048Z"},{"affected":">= 6.0.0, < 6.6.2","affected_versions_present":true,"cve_id":"CVE-2026-32612","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32612","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-13T16:38:42.464Z","patch_url":"https://github.com/Shirshaw64p/security-advisories/tree/main/CVE-2026-32612","primary_source":"","published":"2026-03-12T21:47:21.697Z"},{"affected":"< 5.73.11; >= 6.0.0, < 6.4.0","affected_versions_present":true,"cve_id":"CVE-2026-28426","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28426","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T19:39:23.113Z","patch_url":"https://github.com/statamic/cms/security/advisories/GHSA-5vrj-wf7v-5wr7","primary_source":"","published":"2026-02-27T22:23:42.660Z"},{"affected":"< 5.73.16; >= 6.0.0, < 6.7.2","affected_versions_present":true,"cve_id":"CVE-2026-28425","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28425","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-25T20:57:16.308Z","patch_url":"https://github.com/statamic/cms/security/advisories/GHSA-cpv7-q2wx-m8rw","primary_source":"","published":"2026-02-27T22:20:39.735Z"},{"affected":"< 5.73.11; >= 6.0.0, < 6.4.0","affected_versions_present":true,"cve_id":"CVE-2026-28424","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28424","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T19:36:06.660Z","patch_url":"https://github.com/statamic/cms/security/advisories/GHSA-w878-f8c6-7r63","primary_source":"","published":"2026-02-27T22:14:01.779Z"},{"affected":"< 5.73.11; >= 6.0.0, < 6.4.0","affected_versions_present":true,"cve_id":"CVE-2026-28423","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28423","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T21:48:43.597Z","patch_url":"https://github.com/statamic/cms/security/advisories/GHSA-cwpp-325q-2cvp","primary_source":"","published":"2026-02-27T22:11:55.802Z"},{"affected":">= 6.0.0, < 6.4.0","affected_versions_present":true,"cve_id":"CVE-2026-27939","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27939","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-02T22:03:16.580Z","patch_url":"https://github.com/statamic/cms/commit/8639ef96217eaa682bc42e8a62769cb7c6a85d3a","primary_source":"","published":"2026-02-27T21:34:39.107Z"},{"affected":"< 5.73.10; >= 6.0.0-alpha.1, < 6.3.3","affected_versions_present":true,"cve_id":"CVE-2026-27593","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27593","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-27T20:56:07.561Z","patch_url":"https://github.com/statamic/cms/commit/6fdd03324982848e8754f2edd2265262d361714e","primary_source":"","published":"2026-02-24T21:38:17.354Z"},{"affected":">= 6.0.0-alpha.1, < 6.3.2; < 5.73.9","affected_versions_present":true,"cve_id":"CVE-2026-27196","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27196","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-24T18:59:19.390Z","patch_url":"https://github.com/statamic/cms/commit/11ae40e62edd3da044d37ebf264757a09cc2347b","primary_source":"","published":"2026-02-21T04:30:05.184Z"},{"affected":">= 6.0.0, < 6.2.3","affected_versions_present":true,"cve_id":"CVE-2026-25759","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25759","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-12T21:18:56.237Z","patch_url":"https://github.com/statamic/cms/commit/6ed4f65f3387686d6dbd816e9b4f18a8d9736ff6","primary_source":"","published":"2026-02-11T20:37:37.741Z"},{"affected":"< 5.73.6; >= 6.0.0-alpha.1, < 6.2.5","affected_versions_present":true,"cve_id":"CVE-2026-25633","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25633","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-12T21:19:37.486Z","patch_url":"https://github.com/statamic/cms/commit/5a6f47246edf3a0c453727ffecbfa14333a6bc8a","primary_source":"","published":"2026-02-11T20:33:51.930Z"},{"affected":"cms: < 5.22.1","affected_versions_present":true,"cve_id":"CVE-2025-64112","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64112","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-30T17:58:06.993Z","patch_url":"","primary_source":"","published":"2025-10-30T17:47:01.280Z"},{"affected":"< 5.17.0","affected_versions_present":true,"cve_id":"CVE-2024-52600","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-52600","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-03T17:18:17.282Z","patch_url":"","primary_source":"","published":"2024-11-19T16:30:12.221Z"},{"affected":">= 5.3.0, < 5.6.2","affected_versions_present":true,"cve_id":"CVE-2024-36119","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-36119","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T03:30:12.952Z","patch_url":"","primary_source":"","published":"2024-05-30T20:57:06.445Z"},{"affected":"< 3.4.17; >= 4.0.0, < 4.46.0","affected_versions_present":true,"cve_id":"CVE-2024-24570","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24570","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-17T21:29:22.712Z","patch_url":"","primary_source":"","published":"2024-02-01T16:42:57.717Z"},{"affected":"< 3.4.15 ; >= 4.0.0, < 4.36.0","affected_versions_present":true,"cve_id":"CVE-2023-48701","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-48701","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T21:37:53.540Z","patch_url":"","primary_source":"","published":"2023-11-21T22:34:11.043Z"},{"affected":">= 4.0.0, < 4.34.0; < 3.4.14","affected_versions_present":true,"cve_id":"CVE-2023-48217","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-48217","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-30T14:03:24.570Z","patch_url":"https://github.com/statamic/cms/commit/4c6fe041e2203a8033e5949ce4a5d9d6c0ad2411","primary_source":"","published":"2023-11-14T21:38:37.590Z"},{"affected":"< 3.4.13; >= 4.0.0, < 4.33.0","affected_versions_present":true,"cve_id":"CVE-2023-47129","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-47129","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-03T17:24:55.886Z","patch_url":"https://github.com/statamic/cms/commit/098ef8024d97286ca501273c18ae75b646262d75","primary_source":"","published":"2023-11-10T18:48:03.265Z"},{"affected":"< 4.10.0","affected_versions_present":true,"cve_id":"CVE-2023-36828","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36828","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-24T18:06:44.250Z","patch_url":"https://github.com/statamic/cms/pull/8408","primary_source":"","published":"2023-07-05T21:30:06.196Z"},{"affected":"< 3.2.39; < 3.3.2","affected_versions_present":true,"cve_id":"CVE-2022-24784","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24784","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:43:26.208Z","patch_url":"https://github.com/statamic/cms/issues/5604","primary_source":"","published":"2022-03-25T21:40:11.000Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"statamic"}}