https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58441.htmlhttps://patchthecve.com/cve/CVE-2025-58441.htmlWed, 07 Oct 2026 09:10:00 +0000MEDIUM 6.5: Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of thttps://patchthecve.com/cve/CVE-2025-59954.htmlhttps://patchthecve.com/cve/CVE-2025-59954.htmlWed, 17 Jun 2026 09:46:55 +0000CRITICAL 9.8: Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.https://patchthecve.com/cve/CVE-2025-55007.htmlhttps://patchthecve.com/cve/CVE-2025-55007.htmlWed, 17 Jun 2026 09:41:06 +0000LOW 3.5: Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vuhttps://patchthecve.com/cve/CVE-2024-54795.htmlhttps://patchthecve.com/cve/CVE-2024-54795.htmlWed, 17 Jun 2026 08:10:42 +0000MEDIUM 5.4: SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function.https://patchthecve.com/cve/CVE-2024-54794.htmlhttps://patchthecve.com/cve/CVE-2024-54794.htmlWed, 17 Jun 2026 08:10:41 +0000CRITICAL 9.1: The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.https://patchthecve.com/cve/CVE-2024-54792.htmlhttps://patchthecve.com/cve/CVE-2024-54792.htmlWed, 17 Jun 2026 08:10:41 +0000MEDIUM 6.1: A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users.