{"api_version":"v1","generated_at":"2026-10-08T09:05:00+00:00","product":{"cve_count":7,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-xwiki-xwiki-rendering-4d9853ee78a9","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"xwiki-rendering","next_cursor":null,"observations":[{"affected":"xwiki-rendering: < 14.10.2","affected_versions_present":true,"cve_id":"CVE-2025-53837","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53837","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-21T20:51:05.756Z","patch_url":"","primary_source":"","published":"2026-09-18T15:07:40.181Z"},{"affected":"xwiki-rendering: < 16.10.10, >= 17.0.0-rc-1, < 17.4.3, >= 17.5.0-rc-1, < 17.6.0-rc-1","affected_versions_present":true,"cve_id":"CVE-2025-66474","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-66474","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-12-11T15:39:27.299Z","patch_url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-9xc6-c2rm-f27p","primary_source":"","published":"2025-12-10T21:59:58.727Z"},{"affected":">= 4.2-milestone-1, < 13.10.11; >= 14.0, < 14.4.7; >= 14.5, < 14.10","affected_versions_present":true,"cve_id":"CVE-2025-53836","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53836","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-15T19:49:20.208Z","patch_url":"https://github.com/xwiki/xwiki-rendering/commit/c73fa3ccd4ac59057e48e5d4325f659e78e8f86d","primary_source":"","published":"2025-07-14T23:08:34.071Z"},{"affected":">= 5.4.5, < 14.10","affected_versions_present":true,"cve_id":"CVE-2025-53835","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53835","fixed":"14.10","last_modified":"2025-07-15T19:49:26.336Z","patch_url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-w3wh-g4m9-783p","primary_source":"","published":"2025-07-14T23:00:35.577Z"},{"affected":"< 14.10.6; >= 15.0-rc-1, < 15.1-rc-1","affected_versions_present":true,"cve_id":"CVE-2023-37912","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-37912","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-12T20:47:45.452Z","patch_url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-35j5-m29r-xfq5","primary_source":"","published":"2023-10-25T17:33:54.756Z"},{"affected":">= 14.6-rc-1, < 14.10.4","affected_versions_present":true,"cve_id":"CVE-2023-37908","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-37908","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-17T13:38:24.028Z","patch_url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-663w-2xp3-5739","primary_source":"","published":"2023-10-25T16:53:25.679Z"},{"affected":"< 14.6-rc-1; <= 3.0-milestone-2","affected_versions_present":true,"cve_id":"CVE-2023-32070","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-32070","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-27T17:14:05.694Z","patch_url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-6gf5-c898-7rxp","primary_source":"","published":"2023-05-10T17:18:06.949Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"xwiki"}}