https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-21415.htmlhttps://patchthecve.com/cve/CVE-2021-21415.htmlWed, 17 Jun 2026 03:35:31 +0000HIGH 7.8: Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a project https://patchthecve.com/cve/CVE-2021-21414.htmlhttps://patchthecve.com/cve/CVE-2021-21414.htmlWed, 17 Jun 2026 03:35:31 +0000HIGH 7.7: Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable mehttps://patchthecve.com/cve/CVE-2020-4038.htmlhttps://patchthecve.com/cve/CVE-2020-4038.htmlWed, 17 Jun 2026 03:19:27 +0000HIGH 7.4: GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. No