https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-27483.htmlhttps://patchthecve.com/cve/CVE-2026-27483.htmlWed, 17 Jun 2026 10:27:13 +0000HIGH 8.8: MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the "Uplhttps://patchthecve.com/cve/CVE-2026-2531.htmlhttps://patchthecve.com/cve/CVE-2026-2531.htmlWed, 17 Jun 2026 10:31:15 +0000MEDIUM 6.3: A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exphttps://patchthecve.com/cve/CVE-2025-68472.htmlhttps://patchthecve.com/cve/CVE-2025-68472.htmlWed, 17 Jun 2026 09:59:07 +0000HIGH 8.1: MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PUT hhttps://patchthecve.com/cve/CVE-2024-24759.htmlhttps://patchthecve.com/cve/CVE-2024-24759.htmlWed, 17 Jun 2026 07:14:48 +0000CRITICAL 9.3: MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website with DNS Rebinding. The vulnerability can also lead to denial of service. Version 23.12.4.2 contains