Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

26–50 of 50 matching · newest first

Show all severities

Exploited 29 May 2026 ×Clear filters

High, CVSS 8.629 May 2026
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env
PyPI ouroboros-ai · Upgrade to 0.39.0 or later · < 0.39.0 · CVE-2026-47211 · GHSA-c4m7-2gwp-vw76 · amended
29 May 2026Evidence →
High, CVSS 7.129 May 2026
CC-Tweaked has an SSRF Protection Bypass with NAT64
Maven cc.tweaked:cc-tweaked-1.20.5-core +7 · Upgrade all 8 to 1.119.0 or later · < 1.119.0 · CVE-2026-47695 · GHSA-5jh9-2h63-pw4q
29 May 2026Evidence →
High, CVSS 7.729 May 2026
Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs
Packagist phanan/koel · Upgrade to 9.3.5 or later · <= 9.3.4 · CVE-2026-47260 · GHSA-7j2f-6h2r-6cqc
29 May 2026Evidence →
High, CVSS 7.529 May 2026
russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
crates.io russh · Upgrade to 0.61.1 or later · >= 0.34.0, < 0.61.1 · CVE-2026-46702 · GHSA-wwx6-x28x-8259 · amended
29 May 2026Evidence →
Critical, CVSS 9.329 May 2026
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
PyPI redshift-connector · Upgrade to 2.1.14 or later · <= 2.1.13 · CVE-2026-8838 · GHSA-29h4-r29x-hchv · amended
29 May 2026Evidence →
High, CVSS 8.729 May 2026
xiaomusic contains an unauthenticated path traversal vulnerability
PyPI xiaomusic · Upgrade to 0.5.8 or later · < 0.5.8 · CVE-2026-10108 · GHSA-5j8p-5rrj-8wjg · amended
29 May 2026Evidence →
High, CVSS 8.629 May 2026
NodeVM network builtin exclusions bypass via internal _http_client and _http_server
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47139 · GHSA-r9pm-gxmw-wv6p · amended
29 May 2026Evidence →
Critical, CVSS 10.029 May 2026
NodeVM builtin denylist bypass via process and inspector/promises allows host code execution
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47140 · GHSA-rp36-8xq3-r6c4 · amended
29 May 2026Evidence →
High, CVSS 7.729 May 2026
ExifReader is vulnerable to denial of service via crafted ICC mluc tag
npm exifreader · Upgrade to 4.39.0 or later · >= 2.10.0, < 4.39.0 · CVE-2026-8813 · GHSA-h64w-w9pr-82m4 · amended
29 May 2026Evidence →
Critical, CVSS 9.829 May 2026
vm2 sandbox escape via JSPI-backed Promise .finally() species bypass
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47210 · GHSA-6j2x-vhqr-qr7q · amended
29 May 2026Evidence →
Critical, CVSS 10.029 May 2026
vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47137 · GHSA-m4wx-m65x-ghrr · amended
29 May 2026Evidence →
High, CVSS 8.629 May 2026
vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47209 · GHSA-c4cf-2hgv-2qv6 · amended
29 May 2026Evidence →
High, CVSS 8.729 May 2026
vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47135 · GHSA-m5q2-4fm3-vfqp · amended
29 May 2026Evidence →
Critical, CVSS 10.029 May 2026
vm2 is Vulnerable to Sandbox Breakout Through Promise Species
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47208 · GHSA-76w7-j9cq-rx2j · amended
29 May 2026Evidence →
Critical, CVSS 10.029 May 2026
vm2 has a Sandbox Escape issue
npm vm2 · Upgrade to 3.11.4 or later · <= 3.11.3 · CVE-2026-47131 · GHSA-v6mx-mf47-r5wg · amended
29 May 2026Evidence →
High, CVSS 7.529 May 2026
Gotenberg has a Race Condition via Multipart downloadFrom Handling
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.33.0 or later · >= 8.10.0, <= 8.32.0 · CVE-2026-45742 · GHSA-vp73-vjw8-8f32
29 May 2026Evidence →
High, CVSS 8.829 May 2026
Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.33.0 or later · <= 8.32.0 · CVE-2026-44829 · GHSA-hwc4-gmrw-5222
29 May 2026Evidence →
High, CVSS 7.029 May 2026
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
npm axios · Upgrade to 1.15.2 or 0.31.1 by release line · >= 1.0.0, < 1.15.2; >= 0.19.0, < 0.31.1 · CVE-2026-44495 · GHSA-3g43-6gmg-66jw · amended
29 May 2026Evidence →
High, CVSS 8.729 May 2026
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in config.proxy
npm axios · Upgrade to 1.16.0 or later · >= 1.0.0, < 1.16.0 · CVE-2026-44494 · GHSA-35jp-ww65-95wh · amended
29 May 2026Evidence →
High, CVSS 8.629 May 2026
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
npm axios · Upgrade to 1.16.0 or 0.32.0 by release line · <= 0.31.1; >= 1.15.0, < 1.16.0 · CVE-2026-44492 · GHSA-pjwm-pj3p-43mv · amended
29 May 2026Evidence →
High, CVSS 8.629 May 2026
Froxlor has an incomplete fix for CVE-2026-30932
Packagist froxlor/froxlor · Upgrade to 2.3.7 or later · <= 2.3.6 · CVE-2026-41237 · GHSA-j6fm-9rfm-j5hx
29 May 2026Evidence →
High, CVSS 8.829 May 2026
Froxlor has privilege escalation in SSH key synchronization via symlinked authorized_keys path
Packagist froxlor/froxlor · Upgrade to 2.3.7 or later · >= 2.3.6, <= 2.3.6 · CVE-2026-41236 · GHSA-mq5v-pxpm-8jw2
29 May 2026Evidence →
High, CVSS 8.629 May 2026
Froxlor has an authorization bypass in FTP shell assignment via missing server-side available_shells enforcement
Packagist froxlor/froxlor · Upgrade to 2.3.7 or later · >= 2.3.6, <= 2.3.6 · CVE-2026-41235 · GHSA-gcv3-5v9q-fmhh
29 May 2026Evidence →
High, CVSS 7.429 May 2026
GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands
Go github.com/cli/cli/v2 · Upgrade to 2.93.0 or later · <= 2.92.0 · CVE-2026-48501 · GHSA-8xvp-7hj6-mcj9
29 May 2026Evidence →
High, CVSS 8.729 May 2026
HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint
npm @haxtheweb/haxcms-nodejs · Upgrade to 26.0.1 or later · <= 26.0.0 · CVE-2026-48527 · GHSA-g2g8-95qg-v35h · amended
29 May 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env

CC-Tweaked has an SSRF Protection Bypass with NAT64

Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

xiaomusic contains an unauthenticated path traversal vulnerability

NodeVM network builtin exclusions bypass via internal _http_client and _http_server

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

vm2 has a Sandbox Escape issue

Gotenberg has a Race Condition via Multipart `downloadFrom` Handling

Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

Froxlor has an incomplete fix for CVE-2026-30932

Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path

Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands

HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence