https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-22898.htmlhttps://patchthecve.com/cve/CVE-2023-22898.htmlWed, 17 Jun 2026 05:36:23 +0000MEDIUM 6.5: workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).https://patchthecve.com/cve/CVE-2018-13144.htmlhttps://patchthecve.com/cve/CVE-2018-13144.htmlWed, 17 Jun 2026 01:38:55 +0000HIGH 7.5: The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.https://patchthecve.com/cve/CVE-2017-3194.htmlhttps://patchthecve.com/cve/CVE-2017-3194.htmlWed, 17 Jun 2026 01:17:42 +0000HIGH 8.1: Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.