Approved changes feed: RSS · Atom

cpe:2.3:a:bevy:bevy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBevy (13718d78-dffb-5736-83ae-c9c9788df94b)
ProductBevy (01ad06e7-0bf9-5338-8ca7-28c79effa9e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cargo/bevy purl2cpe 2026-06-01 10:17:10.949789
pkg:github/bevyengine/bevy purl2cpe 2026-06-01 10:17:10.949790
pkg:sourceforge/bevy.mirror purl2cpe 2026-06-01 10:17:10.949792

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54598 vulnerable 2026-06-08 07:33:12.897718 Details available
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI.
Published: 2025-08-27T00:00:00.000Z
Updated: 2025-08-27T18:51:20.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.