https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-26260.htmlhttps://patchthecve.com/cve/CVE-2025-26260.htmlWed, 17 Jun 2026 09:01:32 +0000HIGH 8.8: Plenti <= 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.https://patchthecve.com/cve/CVE-2024-49381.htmlhttps://patchthecve.com/cve/CVE-2024-49381.htmlWed, 17 Jun 2026 07:59:47 +0000HIGH 7.5: Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabilithttps://patchthecve.com/cve/CVE-2024-49380.htmlhttps://patchthecve.com/cve/CVE-2024-49380.htmlWed, 17 Jun 2026 07:59:47 +0000HIGH 7.5: Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the vulne