https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-13489.htmlhttps://patchthecve.com/cve/CVE-2019-13489.htmlWed, 17 Jun 2026 02:16:50 +0000CRITICAL 9.8: Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.https://patchthecve.com/cve/CVE-2019-13488.htmlhttps://patchthecve.com/cve/CVE-2019-13488.htmlWed, 17 Jun 2026 02:16:50 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used.https://patchthecve.com/cve/CVE-2017-17714.htmlhttps://patchthecve.com/cve/CVE-2017-17714.htmlWed, 17 Jun 2026 01:11:31 +0000MEDIUM 6.1: Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon paramhttps://patchthecve.com/cve/CVE-2017-17713.htmlhttps://patchthecve.com/cve/CVE-2017-17713.htmlWed, 17 Jun 2026 01:11:31 +0000CRITICAL 9.8: Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register