Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance
PyPI flask-security-too · Upgrade to 5.8.1 or later · >= 5.8.0, < 5.8.1 · CVE-2026-46715 · GHSA-97r5-pg8x-p63p · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–25 of 37 matching · newest first
PyPI flask-security-too · Upgrade to 5.8.1 or later · >= 5.8.0, < 5.8.1 · CVE-2026-46715 · GHSA-97r5-pg8x-p63p · amended
PyPI aiosend · Upgrade to 3.0.7 or later · < 3.0.7 · CVE-2026-70646 · GHSA-7m8f-hgjq-8gc9 · amended
npm qs · Upgrade to 6.15.2 or later · >= 6.11.1, <= 6.15.1 · CVE-2026-8723 · GHSA-q8mj-m7cp-5q26 · amended
Go github.com/gtsteffaniak/filebrowser/backend · Upgrade to 0.0.0-20260518193514-28e9b81e438e (pre-release) or later · < 0.0.0-20260518193514-28e9b81e438e · CVE-2026-48777 · GHSA-qqqm-5547-774x
Packagist yeswiki/yeswiki · Upgrade to 4.6.4 or later · < 4.6.4 · CVE-2026-46670 · GHSA-jwvv-qr7q-cv8j
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-47166 · GHSA-6gxq-f64p-5w6f
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-47165 · GHSA-2rgj-gx5x-f62w
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-46693 · GHSA-4g75-9r48-jf92
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-46692 · GHSA-p93h-f2jc-477j
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8337 · GHSA-8c7c-h7px-267g
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8427 · GHSA-67hj-8239-cmf5
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8410 · GHSA-v7c7-658v-hh7v
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8409 · GHSA-56c9-xq5g-xrf9
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8416 · GHSA-qj94-6rx6-27fr
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8412 · GHSA-rv3q-xmfw-mcjv
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8432 · GHSA-97jw-gr4m-c5v8
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8411 · GHSA-752x-23hp-jmv6
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8245 · GHSA-f73j-pm2c-rxvr
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8433 · GHSA-6fxm-r8p3-mx5c
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8434 · GHSA-6qjh-p324-694f
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8413 · GHSA-mpq2-mv8p-9wm6
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8415 · GHSA-xj25-753j-wgp9
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8435 · GHSA-44q4-354f-c826
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8414 · GHSA-98qf-jvwj-2r5f
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7890 · GHSA-gjwq-9v8p-47w7
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.