{"api_version":"v1","generated_at":"2026-10-09T13:00:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-the-qemu-project-qemu-3105b8d338ac","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/qemu","name":"qemu","next_cursor":null,"observations":[{"affected":">= 4.0.0, < 5.0.0","affected_versions_present":true,"cve_id":"CVE-2020-10702","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-10702","fixed":"5.0.0.","last_modified":"2024-08-04T11:06:11.188Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10702","primary_source":"","published":"2020-06-04T17:31:05.000Z"},{"affected":">= QEMU v5.0","affected_versions_present":true,"cve_id":"CVE-2020-10717","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-10717","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T11:14:14.837Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10717","primary_source":"","published":"2020-05-04T00:00:00.000Z"},{"affected":"through version 2.10 and through to 3.1.0","affected_versions_present":true,"cve_id":"CVE-2019-3812","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-3812","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T19:19:18.499Z","patch_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3812","primary_source":"","published":"2019-02-19T14:00:00.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"The QEMU Project"}}