https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6855.htmlhttps://patchthecve.com/cve/CVE-2025-6855.htmlWed, 17 Jun 2026 10:02:42 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be https://patchthecve.com/cve/CVE-2025-6854.htmlhttps://patchthecve.com/cve/CVE-2025-6854.htmlWed, 17 Jun 2026 10:02:41 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2025-6853.htmlhttps://patchthecve.com/cve/CVE-2025-6853.htmlWed, 17 Jun 2026 10:02:41 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to i