{"api_version":"v1","generated_at":"2026-10-08T04:50:00+00:00","product":{"cve_count":9,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-xwiki-xwiki-commons-e0d6f043cc52","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"xwiki-commons","next_cursor":null,"observations":[{"affected":">= 4.2-milestone-2, < 16.10.17; >= 17.0.0-rc-1, < 17.4.9; >= 17.5.0, < 17.10.3; >= 18.0.0-rc-1, < 18.1.0-rc-1","affected_versions_present":true,"cve_id":"CVE-2026-23734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23734","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-26T16:37:39.621Z","patch_url":"","primary_source":"","published":"2026-05-20T18:39:32.313Z"},{"affected":">= 3.0.1, < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.9-rc-1","affected_versions_present":true,"cve_id":"CVE-2024-31996","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-31996","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T01:59:50.900Z","patch_url":"https://github.com/xwiki/xwiki-commons/commit/b0805160ec7b01ee12417e79cb384e60ae4817aa","primary_source":"","published":"2024-04-10T20:46:19.929Z"},{"affected":">= 14.6-rc-1, < 14.10.6; >= 15.0-rc-1, < 15.2-rc-1","affected_versions_present":true,"cve_id":"CVE-2023-36471","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36471","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-26T19:25:17.668Z","patch_url":"https://github.com/xwiki/xwiki-commons/commit/99484d48e899a68a1b6e33d457825b776c6fe8c3","primary_source":"","published":"2023-06-29T19:44:27.211Z"},{"affected":">= 14.6-rc-1, < 14.10.4","affected_versions_present":true,"cve_id":"CVE-2023-31126","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-31126","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-28T17:31:15.462Z","patch_url":"https://github.com/xwiki/xwiki-commons/commit/0b8e9c45b7e7457043938f35265b2aa5adc76a68","primary_source":"","published":"2023-05-09T12:53:59.691Z"},{"affected":">= 4.2-milestone-1, < 14.10","affected_versions_present":true,"cve_id":"CVE-2023-29528","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-29528","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-04T21:35:41.897Z","patch_url":"https://github.com/xwiki/xwiki-commons/commit/8ff1a9d7e5d7b45b690134a537d53dc05cae04ab","primary_source":"","published":"2023-04-20T17:08:50.083Z"},{"affected":">= 4.2-milestone-1, < 14.6-rc-1","affected_versions_present":true,"cve_id":"CVE-2023-29201","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-29201","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-06T19:58:35.107Z","patch_url":"https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m3jr-cvhj-f35j","primary_source":"","published":"2023-04-15T14:24:59.250Z"},{"affected":">= 3.1-milestone-1, < 13.10.9; >= 14.0-rc-1, < 14.4.4; >= 14.5, < 14.7-rc-1","affected_versions_present":true,"cve_id":"CVE-2023-26055","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-26055","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-05T20:39:15.118Z","patch_url":"https://jira.xwiki.org/browse/XCOMMONS-2498","primary_source":"","published":"2023-03-02T18:48:16.053Z"},{"affected":">= 2.3, < 12.6.7; 12.7-rc-1, < 12.10.3","affected_versions_present":true,"cve_id":"CVE-2022-24897","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24897","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T18:02:07.004Z","patch_url":"https://github.com/xwiki/xwiki-commons/pull/127","primary_source":"","published":"2022-05-02T21:49:17.000Z"},{"affected":">= 2.7, < 12.10.10; >= 13.0, < 13.4.4; >= 13.5-rc-1, <= 13.7","affected_versions_present":true,"cve_id":"CVE-2022-24898","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24898","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-22T18:02:24.536Z","patch_url":"https://github.com/xwiki/xwiki-commons/commit/947e8921ebd95462d5a7928f397dd1b64f77c7d5","primary_source":"","published":"2022-04-28T19:35:10.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"xwiki"}}