https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-4108.htmlhttps://patchthecve.com/cve/CVE-2013-4108.htmlTue, 16 Jun 2026 23:56:38 +0000CRITICAL 9.8: Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.https://patchthecve.com/cve/CVE-2013-4106.htmlhttps://patchthecve.com/cve/CVE-2013-4106.htmlTue, 16 Jun 2026 23:56:38 +0000MEDIUM 6.1: A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.https://patchthecve.com/cve/CVE-2013-4109.htmlhttps://patchthecve.com/cve/CVE-2013-4109.htmlTue, 16 Jun 2026 23:56:38 +0000MEDIUM 6.1: An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.https://patchthecve.com/cve/CVE-2013-4110.htmlhttps://patchthecve.com/cve/CVE-2013-4110.htmlTue, 16 Jun 2026 23:56:38 +0000MEDIUM 5.3: Cryptocat has an Unspecified Chat Participant User List Disclosurehttps://patchthecve.com/cve/CVE-2013-4107.htmlhttps://patchthecve.com/cve/CVE-2013-4107.htmlTue, 16 Jun 2026 23:56:38 +0000MEDIUM 6.1: Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scriptinghttps://patchthecve.com/cve/CVE-2013-4105.htmlhttps://patchthecve.com/cve/CVE-2013-4105.htmlTue, 16 Jun 2026 23:56:38 +0000HIGH 7.5: Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosurehttps://patchthecve.com/cve/CVE-2013-2260.htmlhttps://patchthecve.com/cve/CVE-2013-2260.htmlTue, 16 Jun 2026 23:53:02 +0000CRITICAL 9.8: Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weaknesshttps://patchthecve.com/cve/CVE-2013-2259.htmlhttps://patchthecve.com/cve/CVE-2013-2259.htmlTue, 16 Jun 2026 23:53:02 +0000CRITICAL 9.8: Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overviewhttps://patchthecve.com/cve/CVE-2013-2258.htmlhttps://patchthecve.com/cve/CVE-2013-2258.htmlTue, 16 Jun 2026 23:53:02 +0000MEDIUM 5.3: Cryptocat before 2.0.22 has Nickname User Impersonationhttps://patchthecve.com/cve/CVE-2013-2257.htmlhttps://patchthecve.com/cve/CVE-2013-2257.htmlTue, 16 Jun 2026 23:53:02 +0000HIGH 7.5: Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weaknesshttps://patchthecve.com/cve/CVE-2013-4104.htmlhttps://patchthecve.com/cve/CVE-2013-4104.htmlTue, 16 Jun 2026 23:56:37 +0000HIGH 7.5: Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocolhttps://patchthecve.com/cve/CVE-2013-2262.htmlhttps://patchthecve.com/cve/CVE-2013-2262.htmlTue, 16 Jun 2026 23:53:02 +0000HIGH 7.5: Cryptocat strophe.js before 2.0.22 has information disclosurehttps://patchthecve.com/cve/CVE-2013-2261.htmlhttps://patchthecve.com/cve/CVE-2013-2261.htmlTue, 16 Jun 2026 23:53:02 +0000HIGH 7.5: Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosurehttps://patchthecve.com/cve/CVE-2013-4103.htmlhttps://patchthecve.com/cve/CVE-2013-4103.htmlTue, 16 Jun 2026 23:56:37 +0000CRITICAL 9.8: Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user inputhttps://patchthecve.com/cve/CVE-2013-4102.htmlhttps://patchthecve.com/cve/CVE-2013-4102.htmlTue, 16 Jun 2026 23:56:37 +0000CRITICAL 9.1: Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weaknesshttps://patchthecve.com/cve/CVE-2013-4101.htmlhttps://patchthecve.com/cve/CVE-2013-4101.htmlTue, 16 Jun 2026 23:56:37 +0000MEDIUM 5.3: Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weaknesshttps://patchthecve.com/cve/CVE-2013-4100.htmlhttps://patchthecve.com/cve/CVE-2013-4100.htmlTue, 16 Jun 2026 23:56:37 +0000HIGH 7.5: Cryptocat before 2.0.22 has Remote Denial of Service via username