https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-69602.htmlhttps://patchthecve.com/cve/CVE-2025-69602.htmlWed, 17 Jun 2026 10:00:45 +0000CRITICAL 9.1: A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who can https://patchthecve.com/cve/CVE-2025-69601.htmlhttps://patchthecve.com/cve/CVE-2025-69601.htmlWed, 17 Jun 2026 10:00:45 +0000MEDIUM 6.5: A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode. Uploaded ZIP archives are automatically extracted without validating or sanitizing file paths. An attacker can include traversal sequences (e.g., ../) in ZIP entries to write fileshttps://patchthecve.com/cve/CVE-2025-66939.htmlhttps://patchthecve.com/cve/CVE-2025-66939.htmlWed, 17 Jun 2026 09:57:20 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file