https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67510.htmlhttps://patchthecve.com/cve/CVE-2025-67510.htmlFri, 25 Sep 2026 23:10:00 +0000CRITICAL 9.4: Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent conthttps://patchthecve.com/cve/CVE-2025-67509.htmlhttps://patchthecve.com/cve/CVE-2025-67509.htmlFri, 25 Sep 2026 23:10:00 +0000HIGH 8.2: Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELhttps://patchthecve.com/cve/CVE-2024-10965.htmlhttps://patchthecve.com/cve/CVE-2024-10965.htmlWed, 17 Jun 2026 06:56:47 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The patch https://patchthecve.com/cve/CVE-2024-10964.htmlhttps://patchthecve.com/cve/CVE-2024-10964.htmlWed, 17 Jun 2026 06:56:47 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is recomme