blossom vulnerabilities and fixes

Recent CVEs affecting blossom, with upgrade or downgrade steps. 2 tracked.

blossom has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-17. Highest priority: CVE-2026-2623 (score 40/100).

• CVE-2026-2623 MEDIUM 6.3 UPGRADE A flaw has been found in Blossom up to 1.17.1
• CVE-2026-2622 LOW 3.5 UPGRADE A vulnerability was detected in Blossom up to 1.17.1

FAQ

How do I fix blossom vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is blossom being exploited right now?

None of the tracked blossom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which blossom CVE should I patch first?

CVE-2026-2623 currently ranks highest (40/100): A flaw has been found in Blossom up to 1.17.1.

← Back to latest CVEs