https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6583.htmlhttps://patchthecve.com/cve/CVE-2024-6583.htmlWed, 17 Jun 2026 08:18:17 +0000MEDIUM 4.3: A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.https://patchthecve.com/cve/CVE-2024-6229.htmlhttps://patchthecve.com/cve/CVE-2024-6229.htmlWed, 17 Jun 2026 08:17:34 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are stored on the server and executed whenever anyhttps://patchthecve.com/cve/CVE-2024-5885.htmlhttps://patchthecve.com/cve/CVE-2024-5885.htmlWed, 17 Jun 2026 08:16:50 +0000HIGH 8.6: stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain accesshttps://patchthecve.com/cve/CVE-2024-4851.htmlhttps://patchthecve.com/cve/CVE-2024-4851.htmlWed, 17 Jun 2026 08:03:02 +0000HIGH 7.7: A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs,