bandit

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

Official registry publication history is available at bandit, but registry activity is not a publisher support boundary.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVE	Published	Affected versions	Fixed version information	Publisher evidence
CVE-2026-75484	20 Aug 2026	1.4.0 < 1.12.5; fff06efe3be962b484bd4d3eb339372fda5a231f < d38cf046c9a3cae4d0f88001c2ceb4143f86366b	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-74836	20 Aug 2026	0.3.4 < 1.12.5; 6feadb31189d18b7dcda6c663112cd3bbaf63a46 < f6914aad14bb1365dd6f306aa592cfb0819bed3e	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-65623	24 Jul 2026	1.11.0 < 1.12.1; 21612c7c7b1ce43eccd36d3af3a2299d23513667 < 418ef7e906192a230ddba112f7a669c87b6b0e3a	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-39806	13 May 2026	1.6.1 < 1.11.1; e73e379ab59840e8561b5730878f16e29ab06217 < ae3520dfdbfab115c638f8c7f6f6b805db34e1ab	HPE Aruba Networking recommends upgrading the software to the following version: - HPE Aruba Networking Private 5G Core 1.26.1.1 and above NOTE: HPE Aruba Networking does not evaluate or patch HPE Aruba Networking Private 5G Core Software versions that have reached their End of Support (EoS) milestone. For more information about HPE Aruba Networking Telco Product Lifecycle and versioning policy, please visit: https://www.hpe.com/psnow/doc/4aa5-5978enw?jumpid=in_pdfviewer-psnow	Update reference ↗
CVE-2026-39803	13 May 2026	1.4.0 < 1.11.1; 903e209a521bc216b9f9065c01ae9a0cac2d5a10 < ae3520dfdbfab115c638f8c7f6f6b805db34e1ab	HPE Aruba Networking recommends upgrading the software to the following version: - HPE Aruba Networking Private 5G Core 1.26.1.1 and above NOTE: HPE Aruba Networking does not evaluate or patch HPE Aruba Networking Private 5G Core Software versions that have reached their End of Support (EoS) milestone. For more information about HPE Aruba Networking Telco Product Lifecycle and versioning policy, please visit: https://www.hpe.com/psnow/doc/4aa5-5978enw?jumpid=in_pdfviewer-psnow	Update reference ↗
CVE-2026-39805	1 May 2026	0.1.0 < 1.11.0; 7bc8d97cd22697c299baa8012b7f419a7606a80c < f2ca636eb6df385219957e8934e9fc6efa1630d1	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-39804	1 May 2026	0.5.9 < 1.11.0; da4027cff7d2b80319e76fe7a32f84beceec490a < 8156921a51e684a951221da7bc30a70a022f722e	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-39807	1 May 2026	1.0.0 < 1.11.0; ff2f829326cd5dcf7335939aef9775269d881e28 < 45feea20dea8af7ffd7245271107b695c040e667	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-42786	1 May 2026	0.5.0 < 1.11.0; 8909391f486d42138c5308410bc5ea49a65f4d46 < 21612c7c7b1ce43eccd36d3af3a2299d23513667	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2026-42788	1 May 2026	0.3.6 < 1.11.0; f00dd69a5b2a4863be585907acd853c4ffd41399 < 1e8e55966da9129016b73d32f0e1df4630e3b463	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.