PYSEC-2026-203
PyPI pycti · Upgrade to 7.260227.0 or later · < 7.260227.0 · CVE-2026-35212 · GHSA-rg6r-x26x-63vq
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–6 of 6 matching · newest first
PyPI pycti · Upgrade to 7.260227.0 or later · < 7.260227.0 · CVE-2026-35212 · GHSA-rg6r-x26x-63vq
PyPI openmed · Upgrade to 1.5.2 or later · < 1.5.2 · CVE-2026-47117 · GHSA-m3v4-v5gx-7wf5 · amended
Maven org.apache.calcite:calcite-core · Upgrade to 1.42.0 or later · >= 1.5.0, < 1.42.0 · CVE-2026-46718 · GHSA-c2rv-hwqm-wjpg
PyPI prefect · Upgrade to 3.6.22.dev7 (pre-release) or later · < 3.6.22.dev7 · CVE-2026-3514 · GHSA-c635-393c-hcx2 · amended
PyPI mlflow · Upgrade to 3.11.0rc0 (pre-release) or later · < 3.11.0rc0 · CVE-2026-3198 · GHSA-r5m9-wm49-959f · amended
npm @enderfga/claw-orchestrator · Upgrade to 3.7.1 or later · < 3.7.1 · CVE-2026-10291 · GHSA-95f6-rfpg-c3w8 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.