https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-15899.htmlhttps://patchthecve.com/cve/CVE-2020-15899.htmlWed, 17 Jun 2026 02:57:22 +0000HIGH 7.5: Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.https://patchthecve.com/cve/CVE-2020-12439.htmlhttps://patchthecve.com/cve/CVE-2020-12439.htmlWed, 17 Jun 2026 02:51:49 +0000MEDIUM 5.3: Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.https://patchthecve.com/cve/CVE-2020-6638.htmlhttps://patchthecve.com/cve/CVE-2020-6638.htmlWed, 17 Jun 2026 03:23:42 +0000HIGH 7.5: Grin through 2.1.1 has Insufficient Validation.https://patchthecve.com/cve/CVE-2019-9195.htmlhttps://patchthecve.com/cve/CVE-2019-9195.htmlWed, 17 Jun 2026 02:43:20 +0000CRITICAL 9.8: util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.