https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-58016.htmlhttps://patchthecve.com/cve/CVE-2026-58016.htmlThu, 29 Oct 2026 14:16:54 +0000HIGH 7.5: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue https://patchthecve.com/cve/CVE-2024-12088.htmlhttps://patchthecve.com/cve/CVE-2024-12088.htmlWed, 21 Oct 2026 21:17:28 +0000MEDIUM 6.5: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the https://patchthecve.com/cve/CVE-2024-23688.htmlhttps://patchthecve.com/cve/CVE-2024-23688.htmlTue, 14 Jul 2026 23:17:17 +0000MEDIUM 5.3: Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.https://patchthecve.com/cve/CVE-2022-23464.htmlhttps://patchthecve.com/cve/CVE-2022-23464.htmlWed, 17 Jun 2026 04:30:10 +0000MEDIUM 4.3: Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There https://patchthecve.com/cve/CVE-2022-23463.htmlhttps://patchthecve.com/cve/CVE-2022-23463.htmlWed, 17 Jun 2026 04:30:10 +0000CRITICAL 9.4: Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact with Java classes such as java.lang.Runthttps://patchthecve.com/cve/CVE-2020-1712.htmlhttps://patchthecve.com/cve/CVE-2020-1712.htmlWed, 14 Oct 2026 09:17:18 +0000HIGH 7.8: A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sen