High, CVSS 7.1
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in web_url_read
npm mcp-searxng · Upgrade to 1.7.1 or later · < 1.7.1 · CVE-2026-58485 · GHSA-mrvx-jmjw-vggc · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
26–50 of 162 matching · newest first
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in
- High, CVSS 7.5
SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in
web_url_readnpm mcp-searxng · Upgrade to 1.7.1 or later · < 1.7.1 · CVE-2026-58483 · GHSA-xcqx-9jf5-w339 · amended
- Medium, CVSS 6.1
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
npm network-ai · Upgrade to 5.12.2 or later · <= 5.12.1 · CVE-2026-58413 · GHSA-48x2-6pr9-2jjf · amended
- Medium, CVSS 5.5
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
npm network-ai · Upgrade to 5.12.2 or later · <= 5.12.1 · CVE-2026-58414 · GHSA-6x2m-p4xp-wg22 · amended
- Medium, CVSS 5.9
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
npm network-ai · Upgrade to 5.12.2 or later · >= 5.0.0, <= 5.12.1 · CVE-2026-58482 · GHSA-mxjx-28vx-xjjj · amended
- Medium, CVSS 6.5
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
npm network-ai · Upgrade to 5.12.2 or later · <= 5.12.1 · CVE-2026-58481 · GHSA-jvcm-f35g-w78p · amended
- High, CVSS 7.1
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning
npm network-ai · Upgrade to 5.12.2 or later · <= 5.12.1 · CVE-2026-58484 · GHSA-2fmp-9rvw-hc96 · amended
- Medium, CVSS 6.9
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
npm @bitbonsai/mcpvault · Upgrade to 0.11.5 or later · < 0.11.5 · CVE-2026-57442 · GHSA-9c83-rr99-vfwj · amended
- Low, CVSS 1.1
Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe
npm @sveltia/cms · Upgrade to 0.167.3 or later · < 0.167.3 · GHSA-h5jc-78hr-3pc9 · amended
- High, CVSS 7.8
symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest
Packagist symfony/ux-toolkit · Upgrade to 3.2.0 or 2.36.1 by release line · >= 2.32.0, < 2.36.1; >= 3.0.0, < 3.2.0 · CVE-2026-55878 · GHSA-p9xj-fpr2-jf2q
- Medium, CVSS 6.1
symfony/ux-icons: XSS via unsanitized SVG content in local files and Iconify on-demand responses
Packagist symfony/ux-icons · Upgrade to 3.2.0 or 2.36.1 by release line · >= 2.17.0, < 2.36.1; >= 3.0.0, < 3.2.0 · CVE-2026-55877 · GHSA-6v8j-33hc-mv84
- Low, CVSS 3.7
SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected
Go github.com/authzed/spicedb · Upgrade to 1.54.0 or later · >= 1.34.0, < 1.54.0 · CVE-2026-55866 · GHSA-4vrg-r928-h5vv
- Medium, CVSS 6.5
OpenBao: Transit secrets engine crashes on key creation with
derived: truefor asymmetric key typesGo github.com/openbao/openbao · Upgrade to 0.0.0-20260617104123-db57c62602b2 (pre-release); some affected versions have no fix yet · >= 0.1.0, <= 2.5.4; < 0.0.0-20260617104123-db57c62602b2 · CVE-2026-55776 · GHSA-8w8f-r2xv-4q4j
- Low, CVSS 2.3
OpenBao's System Backend allows Unauthorized Management of the containing Namespace
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260617103935-d3c1cc64b1ae (pre-release); some affected versions have no fix yet · < 0.0.0-20260617103935-d3c1cc64b1ae; >= 0.1.0, <= 2.5.4 · CVE-2026-55775 · GHSA-mwr2-wmgp-crj6
- Low, CVSS 2.1
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260617103932-b20b999dd404 (pre-release); some affected versions have no fix yet · >= 0.1.0, <= 2.5.4; < 0.0.0-20260617103932-b20b999dd404 · CVE-2026-55774 · GHSA-c36x-h252-g9x2
- Medium, CVSS 6.8
OpenBao: LDAPi ldaputil (wrong escape func)
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260617104213-10b7825c714c (pre-release); some affected versions have no fix yet · >= 0.1.0, <= 2.5.4; < 0.0.0-20260617104213-10b7825c714c · CVE-2026-55770 · GHSA-6mwx-4547-5vc9
- High, CVSS 7.5
StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled
Packagist starcitizenwiki/embedvideo · Upgrade to 4.1.0 or later · <= 4.0.0 · CVE-2026-55692 · GHSA-5c7p-g73q-rpg5
- Critical, CVSS 9.6
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
PyPI langflow · Upgrade to 1.9.2 or later · < 1.9.2 · CVE-2026-55447 · GHSA-ccv6-r384-xp75 · amended
- High, CVSS 7.5
Langflow: Unauthenticated DoS through multipart form boundary file upload
PyPI langflow · Upgrade to 1.0.19 or later · < 1.0.19 · CVE-2026-55446 · GHSA-qwqc-p3q8-wcg9 · amended
- Medium, CVSS 6.1
Langflow: Logout button does not clear session
PyPI langflow · Upgrade to 1.7.0 or later · < 1.7.0 · CVE-2026-55423 · GHSA-7hw8-6q6r-4276 · amended
- High, CVSS 8.4Exploited · CISA KEV
Langflow: IDOR Vulnerability in
/api/v1/responsesEndpoint Allows Authenticated Attackers to Access Another User's FlowPyPI langflow · Upgrade to 1.9.1 or later · < 1.9.1 · CVE-2026-55255 · GHSA-qrpv-q767-xqq2 · amended
- Medium, CVSS 6.9
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
PyPI py7zr · Upgrade to 1.1.3 or later · <= 1.1.2 · CVE-2026-55206 · GHSA-h4gh-22qq-72r7 · amended
- Medium, CVSS 6.9
py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
PyPI py7zr · Upgrade to 1.1.3 or later · <= 1.1.2 · CVE-2026-55195 · GHSA-gjrg-mpp7-g774 · amended
- Medium, CVSS 5.8
Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms
Go github.com/axllent/mailpit · Upgrade to 1.30.2 or later · <= 1.30.1 · CVE-2026-55187 · GHSA-w4mc-hhc6-xp28
- Medium, CVSS 5.1
Open Redirect Bypass in miniflux-v2
Go miniflux.app/v2 · Upgrade to 2.3.1 or later · <= 2.3.0 · CVE-2026-55185 · GHSA-m999-j542-5w3r
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.