https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-31066.htmlhttps://patchthecve.com/cve/CVE-2022-31066.htmlWed, 17 Jun 2026 04:44:43 +0000MEDIUM 5.9: EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to behttps://patchthecve.com/cve/CVE-2021-41278.htmlhttps://patchthecve.com/cve/CVE-2021-41278.htmlWed, 17 Jun 2026 04:08:13 +0000MEDIUM 5.7: Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows https://patchthecve.com/cve/CVE-2021-32753.htmlhttps://patchthecve.com/cve/CVE-2021-32753.htmlWed, 17 Jun 2026 03:53:33 +0000HIGH 8.3: EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is create