https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-45731.htmlhttps://patchthecve.com/cve/CVE-2025-45731.htmlWed, 17 Jun 2026 09:25:39 +0000MEDIUM 6.5: A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.https://patchthecve.com/cve/CVE-2024-52598.htmlhttps://patchthecve.com/cve/CVE-2024-52598.htmlWed, 17 Jun 2026 08:07:31 +0000HIGH 7.5: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Two interconnected vulnerabilities exist in version 5.4.1 a SSRF and URI validation bypass issue. The endpoint at POST /api/v1/twofaccounts/preview allows setting a remote URI to retrieve the imhttps://patchthecve.com/cve/CVE-2024-52597.htmlhttps://patchthecve.com/cve/CVE-2024-52597.htmlWed, 17 Jun 2026 08:07:31 +0000MEDIUM 6.1: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Versions prior to 5.4.1 are vulnerable to stored cross-site scripting due to improper headers in direct access to uploaded SVGs. The application allows uploading images in several places. One of