https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2769.htmlhttps://patchthecve.com/cve/CVE-2007-2769.htmlTue, 16 Jun 2026 22:40:16 +0000HIGH 7.5: BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.https://patchthecve.com/cve/CVE-2007-2767.htmlhttps://patchthecve.com/cve/CVE-2007-2767.htmlTue, 16 Jun 2026 22:40:16 +0000HIGH 7.8: Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtain sensitive information via unknown vectors.https://patchthecve.com/cve/CVE-2007-2355.htmlhttps://patchthecve.com/cve/CVE-2007-2355.htmlTue, 16 Jun 2026 22:39:25 +0000HIGH 10.0: The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.