https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-27820.htmlhttps://patchthecve.com/cve/CVE-2025-27820.htmlWed, 17 Jun 2026 09:04:16 +0000HIGH 7.5: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 releasehttps://patchthecve.com/cve/CVE-2024-38286.htmlhttps://patchthecve.com/cve/CVE-2024-38286.htmlWed, 17 Jun 2026 07:39:52 +0000HIGH 8.6: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to bhttps://patchthecve.com/cve/CVE-2024-49761.htmlhttps://patchthecve.com/cve/CVE-2024-49761.htmlWed, 17 Jun 2026 08:00:23 +0000HIGH 7.5: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXMLhttps://patchthecve.com/cve/CVE-2024-8096.htmlhttps://patchthecve.com/cve/CVE-2024-8096.htmlThu, 15 Oct 2026 01:19:23 +0000MEDIUM 6.5: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error than https://patchthecve.com/cve/CVE-2024-6119.htmlhttps://patchthecve.com/cve/CVE-2024-6119.htmlWed, 17 Jun 2026 08:17:19 +0000HIGH 7.5: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of https://patchthecve.com/cve/CVE-2024-39689.htmlhttps://patchthecve.com/cve/CVE-2024-39689.htmlWed, 17 Jun 2026 07:42:28 +0000HIGH 7.5: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates fromhttps://patchthecve.com/cve/CVE-2024-39884.htmlhttps://patchthecve.com/cve/CVE-2024-39884.htmlWed, 17 Jun 2026 07:42:57 +0000MEDIUM 6.2: A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHPhttps://patchthecve.com/cve/CVE-2024-34750.htmlhttps://patchthecve.com/cve/CVE-2024-34750.htmlWed, 17 Jun 2026 07:34:00 +0000HIGH 7.5: Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of anhttps://patchthecve.com/cve/CVE-2024-34397.htmlhttps://patchthecve.com/cve/CVE-2024-34397.htmlWed, 17 Jun 2026 07:33:18 +0000MEDIUM 5.2: An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based cl