aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler
PyPI aiosend · Upgrade to 3.0.7 or later · < 3.0.7 · CVE-2026-70646 · GHSA-7m8f-hgjq-8gc9 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI aiosend · Upgrade to 3.0.7 or later · < 3.0.7 · CVE-2026-70646 · GHSA-7m8f-hgjq-8gc9 · amended
Go github.com/gtsteffaniak/filebrowser/backend · Upgrade to 0.0.0-20260518193514-28e9b81e438e (pre-release) or later · < 0.0.0-20260518193514-28e9b81e438e · CVE-2026-48777 · GHSA-qqqm-5547-774x
Packagist yeswiki/yeswiki · Upgrade to 4.6.4 or later · < 4.6.4 · CVE-2026-46670 · GHSA-jwvv-qr7q-cv8j
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.