https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45956.htmlhttps://patchthecve.com/cve/CVE-2022-45956.htmlWed, 17 Jun 2026 05:11:04 +0000MEDIUM 5.3: Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism.https://patchthecve.com/cve/CVE-2022-44117.htmlhttps://patchthecve.com/cve/CVE-2022-44117.htmlWed, 17 Jun 2026 05:07:47 +0000CRITICAL 9.8: Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with any support for SQL.https://patchthecve.com/cve/CVE-2021-33558.htmlhttps://patchthecve.com/cve/CVE-2021-33558.htmlWed, 17 Jun 2026 03:54:47 +0000HIGH 7.5: Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not part o