Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

1–25 of 72 matching · newest first

Show all severities

Exploited 19 Jun 2026 ×Clear filters

High, CVSS 8.719 Jun 2026
Anki's local HTTP server does not sufficiently validate requests
PyPI aqt · Upgrade to 25.9.3 or later · <= 25.9.2 · CVE-2026-59153 · GHSA-869j-r97x-hx2g · amended
19 Jun 2026Evidence →
High, CVSS 7.719 Jun 2026
SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter
crates.io surrealdb · Upgrade to 3.1.5 or later · < 3.1.5 · CVE-2026-63739 · GHSA-cc8f-fcx3-gpjr · amended
19 Jun 2026Evidence →
High, CVSS 8.719 Jun 2026
Lokka: Azure Resource Manager URL path validation issue
npm @merill/lokka · Upgrade to 2.1.2 or later · < 2.1.2 · CVE-2026-58201 · GHSA-g2gw-q38m-vjfc · amended
19 Jun 2026Evidence →
High, CVSS 7.119 Jun 2026
@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing
npm @jhb.software/payload-cloudinary-plugin · Upgrade to 0.4.0 or later · >= 0.3.0, < 0.4.0 · CVE-2026-58200 · GHSA-h5x8-xp6m-x6q4 · amended
19 Jun 2026Evidence →
High, CVSS 7.719 Jun 2026
LangSmith SDK TracingMiddleware: Arbitrary server-side file read
PyPI langsmith · Upgrade to 0.8.18 or later · < 0.8.18 · CVE-2026-59152 · GHSA-f4xh-w4cj-qxq8 · amended
19 Jun 2026Evidence →
High, CVSS 7.119 Jun 2026
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
GitHub Actions gouef/githubtoplanguages · Upgrade to 1.1.4 or later · < 1.1.4 · GHSA-c3xh-98xp-6qhf
19 Jun 2026Evidence →
Critical, CVSS 9.619 Jun 2026
OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
Maven io.openremote:openremote-manager · Upgrade to 1.25.0 or later · < 1.25.0 · CVE-2026-56120 · GHSA-h3m5-97jq-qjrf
19 Jun 2026Evidence →
High, CVSS 8.219 Jun 2026
appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)
npm appium-mcp · Upgrade to 1.85.10 or later · <= 1.85.9 · CVE-2026-58500 · GHSA-x975-rgx4-5fh4 · amended
19 Jun 2026Evidence →
High, CVSS 8.219 Jun 2026
EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id
PyPI everos · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-58499 · GHSA-c795-2g9c-j48m · amended
19 Jun 2026Evidence →
High, CVSS 8.619 Jun 2026
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
npm @zenalexa/unicli · Upgrade to 0.225.2 or later · < 0.225.2 · CVE-2026-58497 · GHSA-v3f4-w7r7-v3hm · amended
19 Jun 2026Evidence →
High, CVSS 7.219 Jun 2026
stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)
PyPI stigmem-node · Upgrade to 0.9.0a12 (pre-release) or later · < 0.9.0a12 · CVE-2026-76238 · GHSA-6gqw-jqv7-v88m · amended
19 Jun 2026Evidence →
High, CVSS 8.619 Jun 2026
stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)
PyPI stigmem-node · Upgrade to 0.9.0a12 (pre-release) or later · < 0.9.0a12 · CVE-2026-76237 · GHSA-xhv3-q4xx-349r · amended
19 Jun 2026Evidence →
High, CVSS 7.219 Jun 2026
stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)
PyPI stigmem-node · Upgrade to 0.9.0a12 (pre-release) or later · < 0.9.0a12 · CVE-2026-76236 · GHSA-x26h-xmv8-gxf7 · amended
19 Jun 2026Evidence →
High, CVSS 7.519 Jun 2026
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error
PyPI msgpack · Upgrade to 1.2.1 or later · <= 1.2.0 · CVE-2026-57585 · GHSA-6v7p-g79w-8964 · amended
19 Jun 2026Evidence →
High, CVSS 8.519 Jun 2026
Gogs: XSS in .ipynb files renderer due to outdated notebookjs
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · GHSA-6vxv-wg6j-5qwp
19 Jun 2026Evidence →
High, CVSS 7.119 Jun 2026
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in web_url_read
npm mcp-searxng · Upgrade to 1.7.1 or later · < 1.7.1 · CVE-2026-58485 · GHSA-mrvx-jmjw-vggc · amended
19 Jun 2026Evidence →
High, CVSS 7.519 Jun 2026
SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in web_url_read
npm mcp-searxng · Upgrade to 1.7.1 or later · < 1.7.1 · CVE-2026-58483 · GHSA-xcqx-9jf5-w339 · amended
19 Jun 2026Evidence →
High, CVSS 7.119 Jun 2026
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning
npm network-ai · Upgrade to 5.12.2 or later · <= 5.12.1 · CVE-2026-58484 · GHSA-2fmp-9rvw-hc96 · amended
19 Jun 2026Evidence →
High, CVSS 7.819 Jun 2026
symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest
Packagist symfony/ux-toolkit · Upgrade to 3.2.0 or 2.36.1 by release line · >= 2.32.0, < 2.36.1; >= 3.0.0, < 3.2.0 · CVE-2026-55878 · GHSA-p9xj-fpr2-jf2q
19 Jun 2026Evidence →
High, CVSS 7.519 Jun 2026
StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled
Packagist starcitizenwiki/embedvideo · Upgrade to 4.1.0 or later · <= 4.0.0 · CVE-2026-55692 · GHSA-5c7p-g73q-rpg5
19 Jun 2026Evidence →
Critical, CVSS 9.619 Jun 2026
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
PyPI langflow · Upgrade to 1.9.2 or later · < 1.9.2 · CVE-2026-55447 · GHSA-ccv6-r384-xp75 · amended
19 Jun 2026Evidence →
High, CVSS 7.519 Jun 2026
Langflow: Unauthenticated DoS through multipart form boundary file upload
PyPI langflow · Upgrade to 1.0.19 or later · < 1.0.19 · CVE-2026-55446 · GHSA-qwqc-p3q8-wcg9 · amended
19 Jun 2026Evidence →
High, CVSS 8.4Exploited · CISA KEV19 Jun 2026
Langflow: IDOR Vulnerability in /api/v1/responses Endpoint Allows Authenticated Attackers to Access Another User's Flow
PyPI langflow · Upgrade to 1.9.1 or later · < 1.9.1 · CVE-2026-55255 · GHSA-qrpv-q767-xqq2 · amended
19 Jun 2026Evidence →
High, CVSS 8.219 Jun 2026
http4k: HmacSha256.hash (despite the Hmac naming) computed a plain unkeyed digest; clarified by deprecation in favour of Sha256.hash / Sha256.hmac
Maven org.http4k:http4k-core · Upgrade to 6.49.0.0 or later · < 6.49.0.0 · GHSA-m4w9-hjfw-vwj4
19 Jun 2026Evidence →
High, CVSS 7.819 Jun 2026
VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files
PyPI vcrpy · Upgrade to 8.2.1 or later · < 8.2.1 · GHSA-rpj2-4hq8-938g · amended
19 Jun 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Anki's local HTTP server does not sufficiently validate requests

SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter

Lokka: Azure Resource Manager URL path validation issue

@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

LangSmith SDK TracingMiddleware: Arbitrary server-side file read

githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)

appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)

EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)

stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)

stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

Gogs: XSS in .ipynb files renderer due to outdated notebookjs

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest

StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Langflow: Unauthenticated DoS through multipart form boundary file upload

Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

http4k: `HmacSha256.hash` (despite the `Hmac` naming) computed a plain unkeyed digest; clarified by deprecation in favour of `Sha256.hash` / `Sha256.hmac`

VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence