<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: seq</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-27912: An issue was discovered in Datalust Seq before 2024.3.13545</title><link>https://patchthecve.com/cve/CVE-2025-27912.html</link><guid>https://patchthecve.com/cve/CVE-2025-27912.html</guid><pubDate>Wed, 17 Jun 2026 09:04:22 +0000</pubDate><description>HIGH 8.8: An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when (1) Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or (2) when username/password or Active Directory authentication is in use and a </description></item><item><title>CVE-2025-27911: An issue was discovered in Datalust Seq before 2024.3.13545</title><link>https://patchthecve.com/cve/CVE-2025-27911.html</link><guid>https://patchthecve.com/cve/CVE-2025-27911.html</guid><pubDate>Wed, 17 Jun 2026 09:04:22 +0000</pubDate><description>MEDIUM 6.5: An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system &quot;Event body limit bytes&quot; setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to dis</description></item><item><title>CVE-2024-58102: An issue was discovered in Datalust Seq before 2024.3.13545</title><link>https://patchthecve.com/cve/CVE-2024-58102.html</link><guid>https://patchthecve.com/cve/CVE-2024-58102.html</guid><pubDate>Wed, 17 Jun 2026 08:14:38 +0000</pubDate><description>MEDIUM 5.7: An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions.</description></item></channel></rss>