https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1799.htmlhttps://patchthecve.com/cve/CVE-2007-1799.htmlTue, 16 Jun 2026 22:38:19 +0000MEDIUM 6.4: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.https://patchthecve.com/cve/CVE-2007-1385.htmlhttps://patchthecve.com/cve/CVE-2007-1385.htmlTue, 16 Jun 2026 22:37:29 +0000HIGH 7.5: chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service (crash) and heap corruption via a negative or large idx value.https://patchthecve.com/cve/CVE-2007-1384.htmlhttps://patchthecve.com/cve/CVE-2007-1384.htmlTue, 16 Jun 2026 22:37:28 +0000MEDIUM 6.4: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename.