https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66906.htmlhttps://patchthecve.com/cve/CVE-2025-66906.htmlMon, 05 Oct 2026 18:10:00 +0000MEDIUM 6.1: Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.https://patchthecve.com/cve/CVE-2025-66911.htmlhttps://patchthecve.com/cve/CVE-2025-66911.htmlTue, 13 Oct 2026 11:10:00 +0000MEDIUM 6.5: Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest() method in UserServiceController.java allows any authenticated user to query the online status, device information, andhttps://patchthecve.com/cve/CVE-2025-66910.htmlhttps://patchthecve.com/cve/CVE-2025-66910.htmlTue, 13 Oct 2026 11:10:00 +0000MEDIUM 6.0: Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login, rawhttps://patchthecve.com/cve/CVE-2025-66909.htmlhttps://patchthecve.com/cve/CVE-2025-66909.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decomprhttps://patchthecve.com/cve/CVE-2025-66908.htmlhttps://patchthecve.com/cve/CVE-2025-66908.htmlTue, 13 Oct 2026 11:10:00 +0000MEDIUM 5.3: Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java uses the @FormData(contentType = MediaTypeConst