{"api_version":"v1","generated_at":"2026-10-09T18:45:00+00:00","product":{"cve_count":17,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-sulu-sulu-780e25434710","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/sulu","name":"sulu","next_cursor":null,"observations":[{"affected":"sulu: < 2.6.25, >= 3.0.0, < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-92692","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92692","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-23T19:34:45.146Z","patch_url":"","primary_source":"","published":"2026-09-23T18:19:26.741Z"},{"affected":"< 2.6.25; >= 3.0.0-alpha1, < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-82396","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82396","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-01T14:29:00.823Z","patch_url":"","primary_source":"","published":"2026-08-31T21:23:16.852Z"},{"affected":"< 2.6.25; >= 3.0.0-alpha1, < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-82395","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82395","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-01T13:22:32.921Z","patch_url":"","primary_source":"","published":"2026-08-31T21:20:58.926Z"},{"affected":"< 2.6.25; >= 3.0.0-alpha1, < 3.0.8","affected_versions_present":true,"cve_id":"CVE-2026-82394","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82394","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-02T17:38:08.912Z","patch_url":"","primary_source":"","published":"2026-08-31T21:17:49.768Z"},{"affected":"< 2.6.23; >= 3.0.0-alpha1, < 3.0.6","affected_versions_present":true,"cve_id":"CVE-2026-45701","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45701","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-01T19:07:13.574Z","patch_url":"","primary_source":"","published":"2026-06-01T16:09:21.477Z"},{"affected":">= 1.0.0, < 2.6.22; >= 3.0.0, < 3.0.5","affected_versions_present":true,"cve_id":"CVE-2026-34372","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34372","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-31T20:29:14.584Z","patch_url":"","primary_source":"","published":"2026-03-31T20:19:32.601Z"},{"affected":">= 2.5.21, < 2.5.25; >= 2.6.5, < 2.6.9; >= 3.0.0-alpha1, < 3.0.0-alpha3","affected_versions_present":true,"cve_id":"CVE-2025-47778","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-47778","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-05-14T18:13:14.564Z","patch_url":"","primary_source":"","published":"2025-05-14T15:29:08.187Z"},{"affected":">= 2.6.4, < 2.6.5; >= 2.5.20, < 2.5.21","affected_versions_present":true,"cve_id":"CVE-2024-47617","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47617","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-08T13:33:43.219Z","patch_url":"https://github.com/sulu/sulu/commit/eeacd14b6cf55f710084788140d40ebb00314b29","primary_source":"","published":"2024-10-03T14:24:44.300Z"},{"affected":">= 2.0.0-RC1, < 2.5.21; >= 2.6.0-RC1, < 2.6.5","affected_versions_present":true,"cve_id":"CVE-2024-47618","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47618","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-18T14:42:45.592Z","patch_url":"https://github.com/sulu/sulu/commit/ca72f75eebe41ea7726624d8aea7da6c425f1eb9","primary_source":"","published":"2024-10-03T14:18:02.129Z"},{"affected":">= 2.2.0, < 2.4.17; >= 2.5.0-alpha1, < 2.5.13","affected_versions_present":true,"cve_id":"CVE-2024-27915","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27915","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-16T15:54:40.497Z","patch_url":"https://github.com/sulu/sulu/commit/ec9c3f99e15336dc4f6877f512300f231c17c6da","primary_source":"","published":"2024-03-06T19:33:11.798Z"},{"affected":">= 2.0.0, < 2.4.16; >= 2.5.0, < 2.5.12","affected_versions_present":true,"cve_id":"CVE-2024-24807","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24807","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:28:12.885Z","patch_url":"","primary_source":"","published":"2024-02-05T20:09:36.891Z"},{"affected":">= 2.5.0, < 2.5.10","affected_versions_present":true,"cve_id":"CVE-2023-39343","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-39343","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-03T18:21:46.144Z","patch_url":"https://github.com/sulu/sulu/commit/5f6c98ba030b2005793e2dc647cc938937ea889b","primary_source":"","published":"2023-08-04T00:06:29.997Z"},{"affected":"< 1.6.44; >= 2.0.0, < 2.2.18; >= 2.3.0, < 2.3.8","affected_versions_present":true,"cve_id":"CVE-2021-43836","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43836","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T04:10:16.325Z","patch_url":"https://github.com/sulu/sulu/commit/9c948f9ce350c68b53af8c3910e2cefc7f722b54","primary_source":"","published":"2021-12-15T20:10:10.000Z"},{"affected":">= 2.0.0, < 2.2.18; >= 2.3.0, < 2.3.8","affected_versions_present":true,"cve_id":"CVE-2021-43835","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43835","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T04:10:15.699Z","patch_url":"https://github.com/sulu/sulu/commit/30bf8b5a4f83b6f2171a696011757d095edaa28a","primary_source":"","published":"2021-12-15T20:00:16.000Z"},{"affected":"< 1.6.43","affected_versions_present":true,"cve_id":"CVE-2021-41169","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-41169","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T02:59:31.756Z","patch_url":"https://github.com/sulu/sulu/commit/20007ac70a3af3c9e53a6acb0ef8794b65642445","primary_source":"","published":"2021-10-21T20:25:10.000Z"},{"affected":"< 1.6.41","affected_versions_present":true,"cve_id":"CVE-2021-32737","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32737","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-03T23:33:55.802Z","patch_url":"","primary_source":"","published":"2021-07-02T17:55:09.000Z"},{"affected":"< 1.6.35; >= 2.0.0, < 2.0.10; = 2.1.0","affected_versions_present":true,"cve_id":"CVE-2020-15132","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-15132","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T13:08:22.435Z","patch_url":"","primary_source":"","published":"2020-08-05T20:30:13.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"sulu"}}