https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2109.htmlhttps://patchthecve.com/cve/CVE-2026-2109.htmlWed, 17 Jun 2026 10:30:20 +0000MEDIUM 5.4: A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit is publicly ahttps://patchthecve.com/cve/CVE-2026-2108.htmlhttps://patchthecve.com/cve/CVE-2026-2108.htmlWed, 17 Jun 2026 10:30:19 +0000MEDIUM 5.3: A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilhttps://patchthecve.com/cve/CVE-2024-10141.htmlhttps://patchthecve.com/cve/CVE-2024-10141.htmlWed, 17 Jun 2026 06:55:00 +0000LOW 3.7: A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the attack remotely. The