https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-37309.htmlhttps://patchthecve.com/cve/CVE-2024-37309.htmlWed, 17 Jun 2026 07:38:06 +0000MEDIUM 5.3: CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parametershttps://patchthecve.com/cve/CVE-2024-24565.htmlhttps://patchthecve.com/cve/CVE-2024-24565.htmlWed, 17 Jun 2026 07:14:37 +0000MEDIUM 5.7: CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FRhttps://patchthecve.com/cve/CVE-2023-51982.htmlhttps://patchthecve.com/cve/CVE-2023-51982.htmlWed, 17 Jun 2026 06:41:55 +0000CRITICAL 9.8: CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI