PatchTheCVEgrand tour vulnerabilities and fixes
Recent CVEs affecting grand tour, with upgrade or downgrade steps. 1 tracked.
Also searched as: grandtour.
grand tour has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-23. Highest priority: CVE-2025-39485 (score 52/100).
- CVE-2025-39485 CRITICAL 9.8 UPGRADE Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.Thi
FAQ
How do I fix grand tour vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is grand tour being exploited right now?
None of the tracked grand tour CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which grand tour CVE should I patch first?
CVE-2025-39485 currently ranks highest (52/100): Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.Thi.