https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5412.htmlhttps://patchthecve.com/cve/CVE-2025-5412.htmlWed, 17 Jun 2026 09:47:52 +0000LOW 3.5: A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file src/mist/api/views.py of the component Authentication Endpoint. The manipulation of the argument return_to leads to cross site scripting. It is possible to launchttps://patchthecve.com/cve/CVE-2025-5411.htmlhttps://patchthecve.com/cve/CVE-2025-5411.htmlWed, 17 Jun 2026 09:47:52 +0000LOW 3.5: A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file src/mist/api/tag/views.py. The manipulation of the argument tag leads to cross site scripting. The attack may be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2025-5410.htmlhttps://patchthecve.com/cve/CVE-2025-5410.htmlWed, 17 Jun 2026 09:47:52 +0000MEDIUM 4.3: A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_response of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery. The attack can be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-5409.htmlhttps://patchthecve.com/cve/CVE-2025-5409.htmlWed, 17 Jun 2026 09:47:52 +0000HIGH 7.3: A vulnerability was found in Mist Community Edition up to 4.7.1. It has been classified as critical. This affects the function create_token of the file src/mist/api/auth/views.py of the component API Token Handler. The manipulation leads to improper access controls. It is possible to initiate the at