https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-28429.htmlhttps://patchthecve.com/cve/CVE-2026-28429.htmlWed, 17 Jun 2026 10:28:36 +0000HIGH 7.5: Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified in the gameName parameter. While the application's primary entry points implement input validation, the ParseGamestate.php component can be accessed directly as a standalone script.https://patchthecve.com/cve/CVE-2026-28428.htmlhttps://patchthecve.com/cve/CVE-2026-28428.htmlWed, 17 Jun 2026 10:28:36 +0000MEDIUM 5.3: Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthenticated attacker to perform authenticated game actions — including sending chat messages and submitting game inputs — by suphttps://patchthecve.com/cve/CVE-2026-27632.htmlhttps://patchthecve.com/cve/CVE-2026-27632.htmlWed, 17 Jun 2026 10:27:25 +0000LOW 2.6: Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, the Talishar application lacks Cross-Site Request Forgery (CSRF) protections on critical state-changing endpoints, specifically within `SubmitChat.php` and other game interaction handlers. By fa