Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
126–146 of 146 matching · newest first
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56740 · GHSA-47qp-hqvx-6r3f
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56741 · GHSA-2r2c-cx56-8933
npm tinacms · Upgrade to 3.9.3 or later · < 3.9.3 · +1 more package · CVE-2026-55661 · GHSA-2vcc-5v34-9jc8 · amended
Maven io.karatelabs:karate-core · Upgrade to 2.1.0 or later · >= 2.0.1, <= 2.0.10 · GHSA-2c85-rfcc-g74j
npm hydrooj · Upgrade to 5.0.2 or later · >= 4.10.4, <= 5.0.1 · CVE-2026-55617 · GHSA-94jp-7776-qj6q · amended
fixRequestBodynpm http-proxy-middleware · Upgrade to 4.1.1 or 3.0.7 by release line · >= 3.0.4, < 3.0.7; >= 4.0.0, < 4.1.1 · CVE-2026-55603 · GHSA-gcq2-9pq2-cxqm · amended
router host+path substring matching allows Host-header-driven backend routing bypassnpm http-proxy-middleware · Upgrade to 4.1.0, 3.0.6 or 2.0.10 by release line · >= 4.0.0, < 4.1.0; >= 3.0.0, < 3.0.6; >= 0.16.0, < 2.0.10 · CVE-2026-55602 · GHSA-64mm-vxmg-q3vj · amended
NuGet ncalc.core +1 · Upgrade all 2 to 6.1.1 or later · < 6.1.1 · CVE-2026-55254 · GHSA-3w5p-95mh-gq75
npm piscina · Upgrade to 6.0.0-rc.2 (pre-release), 5.2.0 or 4.9.3 by release line · >= 5.0.0-alpha.0, <= 5.1.4; <= 4.9.2; >= 6.0.0-rc.1, < 6.0.0-rc.2 · CVE-2026-55388 · GHSA-x9g3-xrwr-cwfg · amended
Go github.com/docker/mcp-gateway · Upgrade to 0.42.2 or later · >= 0.21.0, < 0.42.2 · CVE-2026-55887 · GHSA-r2xf-7jw5-pjg6
npm jodit · Upgrade to 4.12.26 or later · < 4.12.26 · CVE-2026-55886 · GHSA-vpmm-x3fm-qr5c · amended
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.34.0 or later · < 8.34.0 · CVE-2026-55229 · GHSA-2mrg-35hw-x3x9
Maven io.strimzi:strimzi · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-55226 · GHSA-r427-j2h7-wv3m
Kafka.spec.entityOperatorMaven io.strimzi:strimzi · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-55225 · GHSA-mw9r-p8xp-wx96
npm openclaw · Upgrade to 2026.4.25 or later · <= 2026.4.24 · CVE-2026-53863 · GHSA-985f-72mj-8gf7 · amended
npm openclaw · Upgrade to 2026.5.2 or later · < 2026.5.2 · CVE-2026-53842 · GHSA-fq9j-vw4w-fr6v · amended
npm openclaw · Upgrade to 2026.5.12 or later · <= 2026.5.10-beta.1 · CVE-2026-53866 · GHSA-f397-5vjw-v2c2 · amended
npm openclaw · Upgrade to 2026.5.26 or later · < 2026.5.26 · CVE-2026-53843 · GHSA-q99w-vh6v-q3v7 · amended
npm openclaw · Upgrade to 2026.5.26 or later · <= 2026.5.22 · CVE-2026-53864 · GHSA-ccwh-wwpp-6wg5 · amended
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2 (pre-release) or later · < 1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2 · CVE-2026-55671 · GHSA-29jh-8cfq-rr8x
PyPI marimo · Upgrade to 0.23.9 or later · < 0.23.9 · CVE-2026-54386 · GHSA-8m59-7xv8-735h · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.