Apache ActiveMQ has an Incorrect Default Permissions vulnerability
Maven org.apache.activemq:apache-activemq · Upgrade to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-49157 · GHSA-99qx-5qqr-4j95
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–47 of 47 matching · newest first
Maven org.apache.activemq:apache-activemq · Upgrade to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-49157 · GHSA-99qx-5qqr-4j95
Maven org.apache.fluss:fluss-common · Upgrade to 0.9.1-incubating (pre-release) or later · >= 0.8.0-incubating-rc1, < 0.9.1-incubating · CVE-2026-49361 · GHSA-4c39-fwgj-4vq7
Maven org.apache.activemq:apache-activemq · Upgrade to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-46605 · GHSA-cpw7-g3p5-qrfq
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-45360 · GHSA-2r5m-76wx-56gx · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · < 3.2.2 · CVE-2026-42358 · GHSA-33g2-gx67-c2h3 · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · < 3.2.2 · CVE-2026-42360 · GHSA-cg3x-89rc-x9mw · amended
Maven org.apache.activemq:apache-activemq +1 · Upgrade all 2 to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-42253 · GHSA-8wm6-6fqh-phmc
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-41084 · GHSA-mxq5-f9c5-w4p5 · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0, < 3.2.2 · CVE-2026-42252 · GHSA-c85c-g9wv-pph2 · amended
Maven org.apache.activemq:activemq-broker +2 · Upgrade all 3 to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-45505 · GHSA-v853-w46p-fv2h
Maven org.apache.activemq:activemq-broker +2 · Upgrade all 3 to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-42588 · GHSA-hg6c-8mvr-jqc9
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0, < 3.2.2 · CVE-2026-45426 · GHSA-x5wm-j6wh-2834 · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-42359 · GHSA-wr76-29cr-67w8 · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0, < 3.2.2 · CVE-2026-40963 · GHSA-gprj-xvq8-w53q · amended
is_safe_url checkPyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0b3, < 3.2.2 · CVE-2026-40961 · GHSA-6hcw-qqr8-pjj8 · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · < 3.2.2 · CVE-2026-40861 · GHSA-89cj-xrpx-j79m · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0, < 3.2.2 · CVE-2026-41017 · GHSA-95v7-h9j5-gvjr · amended
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-41014 · GHSA-x2x7-p37c-43cr · amended
extra to read-permitted usersPyPI apache-airflow · Upgrade to 3.2.2 or later · < 3.2.2 · CVE-2026-45192 · GHSA-2883-wwh7-x57v · amended
Maven org.apache.directory.api:api-ldap-client-api · Upgrade to 2.1.8 or later · >= 2.0.0, < 2.1.8 · CVE-2026-35563 · GHSA-85rw-g4f4-jprr
PyPI hermes-agent · Upgrade to 0.15.0 or later · < 0.15.0 · CVE-2026-10223 · GHSA-33qv-c5qm-799v · amended
PyPI hermes-agent · Upgrade to 0.18.0 or later · < 0.18.0 · CVE-2026-10222 · GHSA-mv8x-fg99-32mf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.