praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47416 · GHSA-c2m8-4gcg-v22g · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–25 of 87 matching · newest first
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47416 · GHSA-c2m8-4gcg-v22g · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47409 · GHSA-w388-2392-px73 · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47414 · GHSA-5jx9-w35f-vp65 · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47406 · GHSA-4x6r-9v57-3gqw · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47410 · GHSA-3qg8-5g3r-79v5 · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47405 · GHSA-h37g-4h4p-9x97 · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47399 · GHSA-6h6v-6m7w-7vxx · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47407 · GHSA-h8q5-cp56-rr65 · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47408 · GHSA-27p4-pjqv-whgj · amended
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-48169 · GHSA-gv23-xrm3-8c62 · amended
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47397 · GHSA-hvhp-v2gc-268q · amended
eval() tool executionPyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47391 · GHSA-vg22-4gmj-prxw · amended
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47394 · GHSA-9cr9-25q5-8prj · amended
print.__self__ builtins module leak in execute_code (subprocess mode)PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · +1 more package · CVE-2026-47392 · GHSA-4mr5-g6f9-cfrh · amended
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · +1 more package · CVE-2026-47395 · GHSA-5cxw-77wg-jrf3 · amended
deploy --type api emits a Flask server with authentication disabled by defaultPyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47393 · GHSA-8444-4fhq-fxpq · amended
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47396 · GHSA-86qc-r5v2-v6x6 · amended
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · +1 more package · CVE-2026-47390 · GHSA-5c6w-wwfq-7qqm · amended
spec.loader.exec_module in agents_generator.py - sibling of CVE-2026-44334PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47398 · GHSA-78r8-wwqv-r299 · amended
Packagist verbb/formie · Upgrade to 3.1.26 or 2.2.21 by release line · >= 3.0.0, < 3.1.26; < 2.2.21 · CVE-2026-47266 · GHSA-pgxq-p76c-x9cg
PyPI stigmem-node · Upgrade to 0.9.0a2 (pre-release) or later · < 0.9.0a2 · CVE-2026-76242 · GHSA-9vp8-3hmv-8fgh · amended
PyPI stigmem-node · Upgrade to 0.9.0a2 (pre-release) or later · < 0.9.0a2 · CVE-2026-76241 · GHSA-w7pm-9g55-mxfm · amended
PyPI stigmem-node · Upgrade to 0.9.0a2 (pre-release) or later · < 0.9.0a2 · CVE-2026-76244 · GHSA-jmfc-hfjq-pxcp · amended
PyPI stigmem-node · Upgrade to 0.9.0a2 (pre-release) or later · < 0.9.0a2 · CVE-2026-76240 · GHSA-9pc9-4crj-mhpj · amended
PyPI stigmem-node · Upgrade to 0.9.0a2 (pre-release) or later · < 0.9.0a2 · CVE-2026-76245 · GHSA-xh5j-xjfq-qvvx · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.