https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-29193.htmlhttps://patchthecve.com/cve/CVE-2024-29193.htmlWed, 17 Jun 2026 07:22:36 +0000MEDIUM 6.1: gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The index page (`index.html`) shows the available streams by fetching the API in the client side. Then, it uses `Object.entries` to iterate over the result whose first item (`name`) https://patchthecve.com/cve/CVE-2024-29192.htmlhttps://patchthecve.com/cve/CVE-2024-29192.htmlWed, 17 Jun 2026 07:22:35 +0000HIGH 8.8: gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to Cross-Site Request Forgery. The `/api/config` endpoint allows one to modify the existing configuration with user-supplied values. While the API is only allowing localhost to interact without authentication, an attahttps://patchthecve.com/cve/CVE-2024-29191.htmlhttps://patchthecve.com/cve/CVE-2024-29191.htmlWed, 17 Jun 2026 07:22:35 +0000MEDIUM 6.1: gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), w