Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

26–50 of 92 matching · newest first

Show all severities

Exploited 18 Jun 2026 ×Clear filters

High, CVSS 7.518 Jun 2026
Pipecat: Telephony WebSocket /ws Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
PyPI pipecat-ai · Upgrade to 1.4.0 or later · >= 0.0.77, < 1.4.0 · CVE-2026-54695 · GHSA-j8cv-x86q-rj85 · amended
18 Jun 2026Evidence →
High, CVSS 7.118 Jun 2026
Kirby: pages.access permission is not checked in the site/find REST API route
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54005 · GHSA-r3w8-2c5r-h9j9
18 Jun 2026Evidence →
Critical, CVSS 9.118 Jun 2026
Kirby: External Initialization of the Panel on reverse proxy setups with the Forwarded header
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54003 · GHSA-whxw-24jc-cwmv
18 Jun 2026Evidence →
High, CVSS 8.518 Jun 2026
Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in Dom::sanitize()
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54002 · GHSA-wr9h-4r83-f4v6
18 Jun 2026Evidence →
High, CVSS 7.418 Jun 2026
Kirby: Self cross-site scripting (self-XSS) in the writer field
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-49276 · GHSA-rhj6-r49h-5932
18 Jun 2026Evidence →
Critical, CVSS 9.318 Jun 2026
Jupyter Server: Stored XSS in NbconvertFileHandler / NbconvertPostHandler via missing sandbox CSP
PyPI jupyter-server · Upgrade to 2.20.0 or later · <= 2.19.0 · CVE-2026-44727 · GHSA-fcw5-x6j4-ccmp · amended
18 Jun 2026Evidence →
High, CVSS 7.418 Jun 2026
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
npm undici · Upgrade to 8.5.0 or 7.28.0 by release line · >= 7.23.0, < 7.28.0; >= 8.0.0, < 8.5.0 · CVE-2026-9697 · GHSA-vmh5-mc38-953g · amended
18 Jun 2026Evidence →
High, CVSS 7.518 Jun 2026
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
npm undici · Upgrade to 8.5.0 or later · >= 8.0.0, < 8.5.0 · CVE-2026-9675 · GHSA-38rv-x7px-6hhq · amended
18 Jun 2026Evidence →
High, CVSS 7.118 Jun 2026
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
npm nodemailer · Upgrade to 9.0.1 or later · <= 9.0.0 · CVE-2026-82659 · GHSA-p6gq-j5cr-w38f · amended
18 Jun 2026Evidence →
Critical, CVSS 9.318 Jun 2026
python-statemachine SCXML Eval Injection
PyPI python-statemachine · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2026-47103 · GHSA-v4jc-pm6r-3vj8 · amended
18 Jun 2026Evidence →
Critical, CVSS 9.818 Jun 2026
praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57147 · GHSA-cwj8-7gp2-ggcw · amended
18 Jun 2026Evidence →
High, CVSS 8.818 Jun 2026
PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.110, < 4.6.61 · CVE-2026-57144 · GHSA-6jcq-6546-qrrw · amended
18 Jun 2026Evidence →
High, CVSS 8.218 Jun 2026
PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
PyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57132 · GHSA-8ccj-p46r-jwqq · amended
18 Jun 2026Evidence →
High, CVSS 8.818 Jun 2026
PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
PyPI praisonaiagents · Upgrade to 1.6.61 or later · < 1.6.61 · CVE-2026-57143 · GHSA-4pcv-mg8v-vrgf · amended
18 Jun 2026Evidence →
Critical, CVSS 9.818 Jun 2026
praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57148 · GHSA-f38v-77qj-h4jq · amended
18 Jun 2026Evidence →
Critical, CVSS 9.118 Jun 2026
PraisonAI: Arbitrary File Read/Write via multiedit Tool Without Path Validation
PyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57145 · GHSA-29w3-p9w9-wc47 · amended
18 Jun 2026Evidence →
High, CVSS 7.518 Jun 2026
PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.115, < 4.6.61 · CVE-2026-57146 · GHSA-jxcw-qp4h-6jfq · amended
18 Jun 2026Evidence →
High, CVSS 7.818 Jun 2026
PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.87, < 4.6.61 · CVE-2026-57142 · GHSA-7qw2-w5rc-37x2 · amended
18 Jun 2026Evidence →
High, CVSS 8.818 Jun 2026
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.1, <= 1.7.1 · CVE-2026-57133 · GHSA-5jv7-2mjm-h6qj · amended
18 Jun 2026Evidence →
High, CVSS 8.818 Jun 2026
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57137 · GHSA-h2w2-v7j6-xqm4 · amended
18 Jun 2026Evidence →
Critical, CVSS 9.818 Jun 2026
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.0, <= 1.7.1 · CVE-2026-57139 · GHSA-j4f3-55x4-r6q2 · amended
18 Jun 2026Evidence →
Critical, CVSS 9.418 Jun 2026
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation
npm praisonai · Upgrade to 1.7.2 or later · >= 1.6.0, <= 1.7.1 · CVE-2026-57140 · GHSA-9752-mhqh-h34f · amended
18 Jun 2026Evidence →
Critical, CVSS 9.818 Jun 2026
PraisonAI: Remote Code Execution via Sandbox Escape in codeMode Tool
npm praisonai · Upgrade to 1.7.2 or later · <= 1.7.1 · CVE-2026-57141 · GHSA-p69m-4f92-2v84 · amended
18 Jun 2026Evidence →
High, CVSS 8.818 Jun 2026
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
npm praisonai · Upgrade to 1.7.2 or later · >= 1.2.3, <= 1.7.1 · CVE-2026-57136 · GHSA-vjv9-7m7j-h833 · amended
18 Jun 2026Evidence →
Critical, CVSS 9.918 Jun 2026
npm PraisonAI codeMode sandbox escape via Function constructor
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57138 · GHSA-vmmj-pfw7-fjwp · amended
18 Jun 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

Kirby: `pages.access` permission is not checked in the `site/find` REST API route

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

Kirby: Self cross-site scripting (self-XSS) in the writer field

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

python-statemachine SCXML Eval Injection

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication

PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

npm PraisonAI AgentLoop onToolCall approval runs after tool execution

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

npm PraisonAI codeMode sandbox escape via Function constructor

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence