PatchTheCVE: quokkahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-18705: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the componehttps://patchthecve.com/cve/CVE-2020-18705.htmlhttps://patchthecve.com/cve/CVE-2020-18705.htmlWed, 17 Jun 2026 02:59:25 +0000CRITICAL 9.8: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.CVE-2020-18703: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the componehttps://patchthecve.com/cve/CVE-2020-18703.htmlhttps://patchthecve.com/cve/CVE-2020-18703.htmlWed, 17 Jun 2026 02:59:25 +0000CRITICAL 9.8: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.CVE-2020-18702: Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Usernamhttps://patchthecve.com/cve/CVE-2020-18702.htmlhttps://patchthecve.com/cve/CVE-2020-18702.htmlWed, 17 Jun 2026 02:59:25 +0000MEDIUM 6.1: Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.