https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-33589.htmlhttps://patchthecve.com/cve/CVE-2026-33589.htmlWed, 17 Jun 2026 10:37:45 +0000MEDIUM 6.5: Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path traversal.https://patchthecve.com/cve/CVE-2026-33588.htmlhttps://patchthecve.com/cve/CVE-2026-33588.htmlWed, 17 Jun 2026 10:37:45 +0000HIGH 8.1: Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.https://patchthecve.com/cve/CVE-2026-33587.htmlhttps://patchthecve.com/cve/CVE-2026-33587.htmlWed, 17 Jun 2026 10:37:44 +0000CRITICAL 10.0: Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.https://patchthecve.com/cve/CVE-2026-28201.htmlhttps://patchthecve.com/cve/CVE-2026-28201.htmlWed, 17 Jun 2026 10:28:19 +0000HIGH 7.8: An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary database entries via specially crafted malicious URL. Depending on the deployment, data exfiltration is a