https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65098.htmlhttps://patchthecve.com/cve/CVE-2025-65098.htmlWed, 17 Jun 2026 09:55:26 +0000HIGH 7.4: Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, https://patchthecve.com/cve/CVE-2025-64709.htmlhttps://patchthecve.com/cve/CVE-2025-64709.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.6: Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP Request component) functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance https://patchthecve.com/cve/CVE-2025-64706.htmlhttps://patchthecve.com/cve/CVE-2025-64706.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 5.0: Typebot is an open-source chatbot builder. In version 3.9.0 up to but excluding version 3.13.0, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API token management endpoint. An authenticated attacker can delete any user's API token and retrieve its value by simply knowing the