https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-29182.htmlhttps://patchthecve.com/cve/CVE-2024-29182.htmlWed, 17 Jun 2026 07:22:34 +0000MEDIUM 6.1: Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could be https://patchthecve.com/cve/CVE-2023-49788.htmlhttps://patchthecve.com/cve/CVE-2023-49788.htmlWed, 17 Jun 2026 06:36:28 +0000HIGH 7.2: Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server (richdocumentscode) is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attackhttps://patchthecve.com/cve/CVE-2023-49782.htmlhttps://patchthecve.com/cve/CVE-2023-49782.htmlWed, 17 Jun 2026 06:36:27 +0000HIGH 7.1: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collabora Online - Built-in CODE Server` app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601.https://patchthecve.com/cve/CVE-2023-48314.htmlhttps://patchthecve.com/cve/CVE-2023-48314.htmlWed, 17 Jun 2026 06:33:59 +0000HIGH 7.1: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online Built-in CODE Server app can be vulnerable to attack via proxy.php. This vulnerability has been fixed in Collabora Online - Built-in CODE Server (richdocumentscode) relea