https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-31683.htmlhttps://patchthecve.com/cve/CVE-2022-31683.htmlWed, 17 Jun 2026 04:46:03 +0000MEDIUM 5.4: Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team_name=team2 to bypass team scope check to gain access to certain resources belong to any other team.https://patchthecve.com/cve/CVE-2021-22112.htmlhttps://patchthecve.com/cve/CVE-2021-22112.htmlWed, 17 Jun 2026 03:36:38 +0000HIGH 8.8: Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). Howevehttps://patchthecve.com/cve/CVE-2020-5419.htmlhttps://patchthecve.com/cve/CVE-2020-5419.htmlWed, 17 Jun 2026 03:21:27 +0000MEDIUM 6.7: RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planthttps://patchthecve.com/cve/CVE-2020-5415.htmlhttps://patchthecve.com/cve/CVE-2020-5415.htmlWed, 17 Jun 2026 03:21:27 +0000CRITICAL 10.0: Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerabilithttps://patchthecve.com/cve/CVE-2020-5408.htmlhttps://patchthecve.com/cve/CVE-2020-5408.htmlWed, 17 Jun 2026 03:21:26 +0000MEDIUM 6.5: Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has behttps://patchthecve.com/cve/CVE-2020-5409.htmlhttps://patchthecve.com/cve/CVE-2020-5409.htmlWed, 17 Jun 2026 03:21:26 +0000MEDIUM 6.1: Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (Thihttps://patchthecve.com/cve/CVE-2020-5407.htmlhttps://patchthecve.com/cve/CVE-2020-5407.htmlWed, 17 Jun 2026 03:21:26 +0000HIGH 8.8: Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation. When using the spring-security-saml2-service-provider component, a malicious user can carefully modify an otherwise valid SAML response and append an arbhttps://patchthecve.com/cve/CVE-2020-5399.htmlhttps://patchthecve.com/cve/CVE-2020-5399.htmlWed, 17 Jun 2026 03:21:25 +0000HIGH 7.4: Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL database may eavesdrop on database connections and thereby gain unauthorized access to CredHub and othe