https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13265.htmlhttps://patchthecve.com/cve/CVE-2025-13265.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack rehttps://patchthecve.com/cve/CVE-2025-13262.htmlhttps://patchthecve.com/cve/CVE-2025-13262.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to pathttps://patchthecve.com/cve/CVE-2025-13261.htmlhttps://patchthecve.com/cve/CVE-2025-13261.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 5.3: A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote exploita