https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-32952.htmlhttps://patchthecve.com/cve/CVE-2025-32952.htmlWed, 17 Jun 2026 09:12:51 +0000MEDIUM 6.5: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, phttps://patchthecve.com/cve/CVE-2025-32951.htmlhttps://patchthecve.com/cve/CVE-2025-32951.htmlWed, 17 Jun 2026 09:12:51 +0000MEDIUM 6.4: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends withttps://patchthecve.com/cve/CVE-2025-32950.htmlhttps://patchthecve.com/cve/CVE-2025-32950.htmlWed, 17 Jun 2026 09:12:51 +0000MEDIUM 6.5: Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has