https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-6758.htmlhttps://patchthecve.com/cve/CVE-2007-6758.htmlTue, 16 Jun 2026 22:48:42 +0000HIGH 7.5: Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.https://patchthecve.com/cve/CVE-2013-4691.htmlhttps://patchthecve.com/cve/CVE-2013-4691.htmlTue, 16 Jun 2026 23:57:43 +0000MEDIUM 6.1: Sencha Labs Connect has XSS with connect.methodOverride()https://patchthecve.com/cve/CVE-2013-7371.htmlhttps://patchthecve.com/cve/CVE-2013-7371.htmlWed, 17 Jun 2026 00:01:50 +0000MEDIUM 6.1: node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)https://patchthecve.com/cve/CVE-2013-7370.htmlhttps://patchthecve.com/cve/CVE-2013-7370.htmlWed, 17 Jun 2026 00:01:50 +0000MEDIUM 6.1: node-connect before 2.8.1 has XSS in the Sencha Labs Connect middlewarehttps://patchthecve.com/cve/CVE-2018-8046.htmlhttps://patchthecve.com/cve/CVE-2018-8046.htmlWed, 17 Jun 2026 02:04:10 +0000MEDIUM 6.1: The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columhttps://patchthecve.com/cve/CVE-2018-3717.htmlhttps://patchthecve.com/cve/CVE-2018-3717.htmlWed, 17 Jun 2026 01:57:42 +0000MEDIUM 5.4: connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.