<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: archisteamfarm project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-23627: ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts sim</title><link>https://patchthecve.com/cve/CVE-2022-23627.html</link><guid>https://patchthecve.com/cve/CVE-2022-23627.html</guid><pubDate>Wed, 17 Jun 2026 04:30:30 +0000</pubDate><description>MEDIUM 5.0: ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code, introduced in version V5.2.2.2, the program didn&#x27;t adequately verify effective access of the user sending proxy (i.e. `[Bots]`) commands. In particular</description></item><item><title>CVE-2021-32795: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultane</title><link>https://patchthecve.com/cve/CVE-2021-32795.html</link><guid>https://patchthecve.com/cve/CVE-2021-32795.html</guid><pubDate>Wed, 17 Jun 2026 03:53:38 +0000</pubDate><description>MEDIUM 6.5: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service (aka DoS) vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat</description></item><item><title>CVE-2021-32794: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultane</title><link>https://patchthecve.com/cve/CVE-2021-32794.html</link><guid>https://patchthecve.com/cve/CVE-2021-32794.html</guid><pubDate>Wed, 17 Jun 2026 03:53:38 +0000</pubDate><description>MEDIUM 6.8: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code `POST /Api/ASF` ASF API endpoint responsible for updating global ASF config incorrectly removed `IPCPassword` from the resulting config when the caller did no</description></item></channel></rss>