https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58441.htmlhttps://patchthecve.com/cve/CVE-2025-58441.htmlWed, 07 Oct 2026 09:10:00 +0000MEDIUM 6.5: Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of thttps://patchthecve.com/cve/CVE-2025-59954.htmlhttps://patchthecve.com/cve/CVE-2025-59954.htmlWed, 17 Jun 2026 09:46:55 +0000CRITICAL 9.8: Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.https://patchthecve.com/cve/CVE-2025-55007.htmlhttps://patchthecve.com/cve/CVE-2025-55007.htmlWed, 17 Jun 2026 09:41:06 +0000LOW 3.5: Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vu