https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-31450.htmlhttps://patchthecve.com/cve/CVE-2024-31450.htmlWed, 17 Jun 2026 07:28:26 +0000LOW 2.7: Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an administrator API at the URL /api/admin. The emoji/delete endpoint of said API allows administrators to delete custom emojis, which are saved on disk. The paramhttps://patchthecve.com/cve/CVE-2024-29026.htmlhttps://patchthecve.com/cve/CVE-2024-29026.htmlWed, 17 Jun 2026 07:22:16 +0000HIGH 8.2: Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f2https://patchthecve.com/cve/CVE-2023-3188.htmlhttps://patchthecve.com/cve/CVE-2023-3188.htmlWed, 17 Jun 2026 06:13:32 +0000MEDIUM 6.5: Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.