https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-0095.htmlhttps://patchthecve.com/cve/CVE-2002-0095.htmlTue, 16 Jun 2026 21:56:45 +0000HIGH 7.5: The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.https://patchthecve.com/cve/CVE-2002-0094.htmlhttps://patchthecve.com/cve/CVE-2002-0094.htmlTue, 16 Jun 2026 21:56:45 +0000HIGH 7.5: config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.https://patchthecve.com/cve/CVE-2001-0973.htmlhttps://patchthecve.com/cve/CVE-2001-0973.htmlTue, 16 Jun 2026 21:55:20 +0000MEDIUM 6.4: BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.