https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-29401.htmlhttps://patchthecve.com/cve/CVE-2023-29401.htmlWed, 17 Jun 2026 05:49:58 +0000MEDIUM 4.3: The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of "setup.bat&quothttps://patchthecve.com/cve/CVE-2023-26125.htmlhttps://patchthecve.com/cve/CVE-2023-26125.htmlWed, 17 Jun 2026 05:42:43 +0000MEDIUM 5.6: Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. **Note:** Although this issue does not pose a significant thttps://patchthecve.com/cve/CVE-2020-36567.htmlhttps://patchthecve.com/cve/CVE-2020-36567.htmlWed, 17 Jun 2026 03:15:45 +0000HIGH 7.5: Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.