https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3789.htmlhttps://patchthecve.com/cve/CVE-2026-3789.htmlWed, 17 Jun 2026 10:44:13 +0000MEDIUM 6.3: A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/gitee/SpringAIGiteeRestService.java of the component SpringAIGiteeRestController. Performing a manipulation of the argument apiUrl resultshttps://patchthecve.com/cve/CVE-2026-3788.htmlhttps://patchthecve.com/cve/CVE-2026-3788.htmlWed, 17 Jun 2026 10:44:13 +0000MEDIUM 6.3: A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRestController. Such manipulation of the ahttps://patchthecve.com/cve/CVE-2026-3749.htmlhttps://patchthecve.com/cve/CVE-2026-3749.htmlWed, 17 Jun 2026 10:44:08 +0000MEDIUM 6.3: A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The attahttps://patchthecve.com/cve/CVE-2026-3748.htmlhttps://patchthecve.com/cve/CVE-2026-3748.htmlWed, 17 Jun 2026 10:44:08 +0000MEDIUM 6.3: A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitation