https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70085.htmlhttps://patchthecve.com/cve/CVE-2025-70085.htmlWed, 17 Jun 2026 10:03:07 +0000CRITICAL 9.8: An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames (Source1Filename and the string returned by FileUtil_FileStateStr) into this buffer without any length checking and without using bounded format specifiershttps://patchthecve.com/cve/CVE-2025-70084.htmlhttps://patchthecve.com/cve/CVE-2025-70084.htmlWed, 17 Jun 2026 10:03:07 +0000HIGH 7.5: Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files via crafted value to the FileUtil_GetFileInfo function.https://patchthecve.com/cve/CVE-2025-70083.htmlhttps://patchthecve.com/cve/CVE-2025-70083.htmlWed, 17 Jun 2026 10:03:07 +0000HIGH 7.8: An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The program copies DirName into the local buffer DirWithSep using strcpy. The size of this buffer is OS_MAX_PATH_LEN. If the length of DirName i