https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-31847.htmlhttps://patchthecve.com/cve/CVE-2023-31847.htmlWed, 17 Jun 2026 05:57:34 +0000MEDIUM 6.5: In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.https://patchthecve.com/cve/CVE-2023-31848.htmlhttps://patchthecve.com/cve/CVE-2023-31848.htmlWed, 17 Jun 2026 05:57:34 +0000HIGH 8.8: davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).https://patchthecve.com/cve/CVE-2023-24206.htmlhttps://patchthecve.com/cve/CVE-2023-24206.htmlWed, 17 Jun 2026 05:38:53 +0000CRITICAL 9.8: Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.