PatchTheCVE: flamingo projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-35245: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.https://patchthecve.com/cve/CVE-2020-35245.htmlhttps://patchthecve.com/cve/CVE-2020-35245.htmlWed, 17 Jun 2026 03:13:35 +0000CRITICAL 9.8: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.CVE-2020-35244: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.https://patchthecve.com/cve/CVE-2020-35244.htmlhttps://patchthecve.com/cve/CVE-2020-35244.htmlWed, 17 Jun 2026 03:13:35 +0000CRITICAL 9.8: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.CVE-2020-35243: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoIhttps://patchthecve.com/cve/CVE-2020-35243.htmlhttps://patchthecve.com/cve/CVE-2020-35243.htmlWed, 17 Jun 2026 03:13:35 +0000CRITICAL 9.8: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.CVE-2020-35242: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamIhttps://patchthecve.com/cve/CVE-2020-35242.htmlhttps://patchthecve.com/cve/CVE-2020-35242.htmlWed, 17 Jun 2026 03:13:35 +0000CRITICAL 9.8: Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.