Jenkins LDAP Plugin deserializes data from LDAP referrals without validation
Maven org.jenkins-ci.plugins:ldap · Upgrade to 807.809.vd3a (pre-release) or later · <= 807.v7d7de30930cf · CVE-2026-48917 · GHSA-x9v8-p946-5pwc
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
51–67 of 67 matching · newest first
Maven org.jenkins-ci.plugins:ldap · Upgrade to 807.809.vd3a (pre-release) or later · <= 807.v7d7de30930cf · CVE-2026-48917 · GHSA-x9v8-p946-5pwc
Maven org.keycloak:keycloak-server-spi-private +1 · Upgrade all 2 to 26.6.3 or later · < 26.6.3 · CVE-2026-9704 · GHSA-rr5q-3xwr-f323
PyPI libusb · Upgrade to 1.0.30 or later · < 1.0.30 · CVE-2026-47104
PyPI libusb · Upgrade to 1.0.30 or later · < 1.0.30 · CVE-2026-23679
PyPI gdal · Upgrade to 3.13.1 or later · >= 3.1.0, < 3.13.1 · CVE-2026-49014 · GHSA-wphc-7cm7-8mf7 · amended
Proxy-Authorization header across cross-hostname redirectsnpm @hapi/wreck · Upgrade to 18.1.1 or later · < 18.1.1 · CVE-2026-44979 · GHSA-vhjm-w67q-g75c · amended
npm @hapi/content · Upgrade to 6.0.2 or later · < 6.0.2 · CVE-2026-44974 · GHSA-36hh-x5p5-jgc8 · amended
Packagist pimcore/admin-ui-classic-bundle · Upgrade to 2.3.6 or 1.7.18 by release line · >= 2.0.0-RC1, <= 2.3.5; < 1.7.18 · CVE-2026-44741 · GHSA-h4ph-crvj-9h92
Packagist pimcore/pimcore · Upgrade to 2026.1.2, 12.3.6 or 11.5.17 by release line · >= 2026.1.0, < 2026.1.2; <= 11.5.16; >= 12.0.0-RC1, <= 12.3.5 · CVE-2026-44739 · GHSA-3234-gxc3-pq6f
npm tmp · Upgrade to 0.2.6 or later · < 0.2.6 · CVE-2026-44705 · GHSA-ph9p-34f9-6g65 · amended
{% render %} tag silently bypasses per-render ownPropertyOnly:true via Context.spawn()npm liquidjs · Upgrade to 10.26.0 or later · < 10.26.0 · CVE-2026-44646 · GHSA-9x9p-qf8f-mvjg · amended
{% for %} bodynpm liquidjs · Upgrade to 10.26.0 or later · < 10.26.0 · CVE-2026-44645 · GHSA-8xx9-69p8-7jp3 · amended
npm liquidjs · Upgrade to 10.26.0 or later · < 10.26.0 · CVE-2026-44644 · GHSA-2qv6-9wx5-cwv4 · amended
JavaExprAlgorithmExecutionFactoryMaven org.yamcs:yamcs-core · Upgrade to 5.12.7 or later · < 5.12.7 · CVE-2026-44632 · GHSA-524g-x36v-9wm6
Maven org.yamcs:yamcs-core · Upgrade to 5.12.7 or later · < 5.12.7 · CVE-2026-44596 · GHSA-w5r6-mcgq-7pq4
Maven org.yamcs:yamcs-core · Upgrade to 5.12.7 or later · < 5.12.7 · CVE-2026-44595 · GHSA-p2rj-mrmc-9w29
RubyGems carrierwave · Upgrade to 3.1.3 or 2.2.7 by release line · >= 3.0.0.beta, < 3.1.3; < 2.2.7 · CVE-2026-44587 · GHSA-7g26-2qgj-chfg
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.