https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-1999023.htmlhttps://patchthecve.com/cve/CVE-2018-1999023.htmlWed, 17 Jun 2026 01:48:17 +0000HIGH 8.8: The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player https://patchthecve.com/cve/CVE-2015-5070.htmlhttps://patchthecve.com/cve/CVE-2015-5070.htmlWed, 17 Jun 2026 00:28:23 +0000LOW 3.1: The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related https://patchthecve.com/cve/CVE-2015-5069.htmlhttps://patchthecve.com/cve/CVE-2015-5069.htmlWed, 17 Jun 2026 00:28:23 +0000MEDIUM 4.3: The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.