https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-28230.htmlhttps://patchthecve.com/cve/CVE-2026-28230.htmlWed, 17 Jun 2026 10:28:22 +0000MEDIUM 6.3: SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId (a sequential integer starting from 1) without verifying that the requesting charger matches thttps://patchthecve.com/cve/CVE-2024-44843.htmlhttps://patchthecve.com/cve/CVE-2024-44843.htmlWed, 17 Jun 2026 07:53:10 +0000MEDIUM 5.9: An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.https://patchthecve.com/cve/CVE-2024-21550.htmlhttps://patchthecve.com/cve/CVE-2024-21550.htmlWed, 17 Jun 2026 07:09:43 +0000MEDIUM 6.1: SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site Scriptin