High, CVSS 8.2
PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
PyPI praisonai · Upgrade to 4.6.59 or later · >= 4.5.112, <= 4.6.58 · CVE-2026-56836 · GHSA-5qw8-f2g9-ff29 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.3
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
PyPI praisonai · Upgrade to 4.6.59 or later · >= 3.10.0, <= 4.6.58 · +1 more package · CVE-2026-57112 · GHSA-vmf9-xx9w-86wx · amended
- High, CVSS 7.5
PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal
PyPI praisonai · Upgrade to 4.6.59 or later · >= 3.8.1, <= 4.6.58 · CVE-2026-56833 · GHSA-22cj-m4wf-fv2c · amended
- High, CVSS 8.8
PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals
PyPI praisonai · Upgrade to 4.6.59 or later · >= 4.5.2, <= 4.6.58 · CVE-2026-56832 · GHSA-8579-rgg5-ph2m · amended
- High, CVSS 7.4
ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260616131956-0973b074b488 (pre-release) or later · < 1.80.0-v2.20.0.20260616131956-0973b074b488 · CVE-2026-55672 · GHSA-xqxv-4jc2-x56x
- High, CVSS 7.5
JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56740 · GHSA-47qp-hqvx-6r3f
- High, CVSS 7.5
JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56741 · GHSA-2r2c-cx56-8933
- High, CVSS 8.2
Karate Mock Server RCE via embedded expression evaluation of request-derived data
Maven io.karatelabs:karate-core · Upgrade to 2.1.0 or later · >= 2.0.1, <= 2.0.10 · GHSA-2c85-rfcc-g74j
- High, CVSS 7.5
http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in
fixRequestBodynpm http-proxy-middleware · Upgrade to 4.1.1 or 3.0.7 by release line · >= 3.0.4, < 3.0.7; >= 4.0.0, < 4.1.1 · CVE-2026-55603 · GHSA-gcq2-9pq2-cxqm · amended
- High, CVSS 8.1
piscina: Prototype Pollution Gadget → RCE via inherited options.filename
npm piscina · Upgrade to 6.0.0-rc.2 (pre-release), 5.2.0 or 4.9.3 by release line · >= 5.0.0-alpha.0, <= 5.1.4; <= 4.9.2; >= 6.0.0-rc.1, < 6.0.0-rc.2 · CVE-2026-55388 · GHSA-x9g3-xrwr-cwfg · amended
- High, CVSS 8.7
Docker MCP Gateway: Argument injection via OCI image label YAML
Go github.com/docker/mcp-gateway · Upgrade to 0.42.2 or later · >= 0.21.0, < 0.42.2 · CVE-2026-55887 · GHSA-r2xf-7jw5-pjg6
- High, CVSS 7.5
Gotenberg: SSRF via LibreOffice document processing
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.34.0 or later · < 8.34.0 · CVE-2026-55229 · GHSA-2mrg-35hw-x3x9
- High, CVSS 8.0
Strimzi: Cross-namespace privilege escalation via
Kafka.spec.entityOperatorMaven io.strimzi:strimzi · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-55225 · GHSA-mw9r-p8xp-wx96
- High, CVSS 7.0
OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution
npm openclaw · Upgrade to 2026.5.2 or later · < 2026.5.2 · CVE-2026-53842 · GHSA-fq9j-vw4w-fr6v · amended
- High, CVSS 7.6
OpenClaw: Shell inline-command parsing could miss an allowlist check
npm openclaw · Upgrade to 2026.5.12 or later · <= 2026.5.10-beta.1 · CVE-2026-53866 · GHSA-f397-5vjw-v2c2 · amended
- High, CVSS 8.8
OpenClaw: Pairing-scoped device session could restore revoked node token authority
npm openclaw · Upgrade to 2026.5.26 or later · < 2026.5.26 · CVE-2026-53843 · GHSA-q99w-vh6v-q3v7 · amended
- High, CVSS 7.6
OpenClaw: Host environment sanitizer missed two Node.js control variables
npm openclaw · Upgrade to 2026.5.26 or later · <= 2026.5.22 · CVE-2026-53864 · GHSA-ccwh-wwpp-6wg5 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.