https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2334.htmlhttps://patchthecve.com/cve/CVE-2025-2334.htmlWed, 17 Jun 2026 09:06:46 +0000MEDIUM 5.4: A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access conhttps://patchthecve.com/cve/CVE-2025-2323.htmlhttps://patchthecve.com/cve/CVE-2025-2323.htmlWed, 17 Jun 2026 09:06:45 +0000MEDIUM 4.3: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforhttps://patchthecve.com/cve/CVE-2025-2322.htmlhttps://patchthecve.com/cve/CVE-2025-2322.htmlWed, 17 Jun 2026 09:06:45 +0000HIGH 7.3: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is posshttps://patchthecve.com/cve/CVE-2025-2321.htmlhttps://patchthecve.com/cve/CVE-2025-2321.htmlWed, 17 Jun 2026 09:06:45 +0000MEDIUM 6.3: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be launhttps://patchthecve.com/cve/CVE-2025-2320.htmlhttps://patchthecve.com/cve/CVE-2025-2320.htmlWed, 17 Jun 2026 09:06:44 +0000HIGH 7.3: A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be launch