https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-39298.htmlhttps://patchthecve.com/cve/CVE-2022-39298.htmlWed, 17 Jun 2026 04:58:05 +0000HIGH 7.7: MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-front`, and ultimately leads to the execution of arbihttps://patchthecve.com/cve/CVE-2022-39297.htmlhttps://patchthecve.com/cve/CVE-2022-39297.htmlWed, 17 Jun 2026 04:58:05 +0000HIGH 7.7: MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-cms`, and ultimately leads to the execution of arbitrary PHP code on the systhttps://patchthecve.com/cve/CVE-2022-39296.htmlhttps://patchthecve.com/cve/CVE-2022-39296.htmlWed, 17 Jun 2026 04:58:05 +0000HIGH 8.6: MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conducting this attack does not require authen