PatchTheCVE: my-netdatahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-18839: An issue was discovered in Netdata 1.10.0https://patchthecve.com/cve/CVE-2018-18839.htmlhttps://patchthecve.com/cve/CVE-2018-18839.htmlWed, 17 Jun 2026 01:48:00 +0000MEDIUM 5.3: An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.CVE-2018-18838: An issue was discovered in Netdata 1.10.0https://patchthecve.com/cve/CVE-2018-18838.htmlhttps://patchthecve.com/cve/CVE-2018-18838.htmlWed, 17 Jun 2026 01:48:00 +0000HIGH 7.5: An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.CVE-2018-18837: An issue was discovered in Netdata 1.10.0https://patchthecve.com/cve/CVE-2018-18837.htmlhttps://patchthecve.com/cve/CVE-2018-18837.htmlWed, 17 Jun 2026 01:47:59 +0000MEDIUM 6.1: An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.CVE-2018-18836: An issue was discovered in Netdata 1.10.0https://patchthecve.com/cve/CVE-2018-18836.htmlhttps://patchthecve.com/cve/CVE-2018-18836.htmlWed, 17 Jun 2026 01:47:59 +0000MEDIUM 6.5: An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.