https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-29048.htmlhttps://patchthecve.com/cve/CVE-2026-29048.htmlWed, 17 Jun 2026 10:29:30 +0000MEDIUM 6.1: HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of version 1.18.0. Due to inconsistent output encoding at several points within the software, malicious scripts could be injected and executed in the conhttps://patchthecve.com/cve/CVE-2025-64442.htmlhttps://patchthecve.com/cve/CVE-2025-64442.htmlWed, 17 Jun 2026 09:54:23 +0000MEDIUM 6.1: HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4.https://patchthecve.com/cve/CVE-2024-52043.htmlhttps://patchthecve.com/cve/CVE-2024-52043.htmlWed, 17 Jun 2026 08:06:51 +0000MEDIUM 5.3: Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.