https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3412.htmlhttps://patchthecve.com/cve/CVE-2025-3412.htmlWed, 17 Jun 2026 09:19:54 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2_training_platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side requeshttps://patchthecve.com/cve/CVE-2025-3411.htmlhttps://patchthecve.com/cve/CVE-2025-3411.htmlWed, 17 Jun 2026 09:19:54 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some unknown processing of the file 3_api_platform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the argument url leads to server-sidehttps://patchthecve.com/cve/CVE-2025-3410.htmlhttps://patchthecve.com/cve/CVE-2025-3410.htmlWed, 17 Jun 2026 09:19:54 +0000MEDIUM 6.3: A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file training_platform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted upl