https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-30223.htmlhttps://patchthecve.com/cve/CVE-2025-30223.htmlWed, 17 Jun 2026 09:08:23 +0000CRITICAL 9.3: Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting (XSS) vulnerability exists in Beego's RenderForm() function due to improper HTML escaping of user-controlled data. This vulnerability allows attackers to inject malicious JavaScript code thahttps://patchthecve.com/cve/CVE-2024-55885.htmlhttps://patchthecve.com/cve/CVE-2024-55885.htmlWed, 17 Jun 2026 08:11:24 +0000HIGH 7.5: beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.https://patchthecve.com/cve/CVE-2024-40465.htmlhttps://patchthecve.com/cve/CVE-2024-40465.htmlWed, 17 Jun 2026 07:45:55 +0000HIGH 8.8: An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go filehttps://patchthecve.com/cve/CVE-2024-40464.htmlhttps://patchthecve.com/cve/CVE-2024-40464.htmlWed, 17 Jun 2026 07:45:55 +0000HIGH 8.8: An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file