https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-28251.htmlhttps://patchthecve.com/cve/CVE-2024-28251.htmlWed, 17 Jun 2026 07:21:16 +0000MEDIUM 5.6: Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Querybook's datadocs functionality works by using a Websocket Server. The client talks to this WSS whenever updating/deleting/reading any cells as well as for watching the live status of query ehttps://patchthecve.com/cve/CVE-2024-27103.htmlhttps://patchthecve.com/cve/CVE-2024-27103.htmlWed, 17 Jun 2026 07:19:10 +0000MEDIUM 6.1: Querybook is a Big Data Querying UI. When a user searches for their queries, datadocs, tables and lists, the search result is marked and highlighted, and this feature uses dangerouslySetInnerHTML which means that if the highlighted result has an XSS payload it will trigger. While the input to dangerhttps://patchthecve.com/cve/CVE-2024-26148.htmlhttps://patchthecve.com/cve/CVE-2024-26148.htmlWed, 17 Jun 2026 07:17:12 +0000MEDIUM 6.1: Querybook is a user interface for querying big data. Prior to version 3.31.1, there is a vulnerability in Querybook's rich text editor that enables users to input arbitrary URLs without undergoing necessary validation. This particular security flaw allows the use of `javascript:` protocol which can