https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-29224.htmlhttps://patchthecve.com/cve/CVE-2024-29224.htmlWed, 17 Jun 2026 07:22:39 +0000CRITICAL 9.8: An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2024-28892.htmlhttps://patchthecve.com/cve/CVE-2024-28892.htmlWed, 17 Jun 2026 07:21:58 +0000CRITICAL 9.8: An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2024-21855.htmlhttps://patchthecve.com/cve/CVE-2024-21855.htmlWed, 17 Jun 2026 07:10:17 +0000CRITICAL 9.8: A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.