Paymenter vulnerable to Remote Code Execution via public file uploads
Packagist paymenter/paymenter · Upgrade to 1.2.11 or later · < 1.2.11 · CVE-2025-58048 · GHSA-5pm9-r2m8-rcmj
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
51–58 of 58 matching · newest first
Packagist paymenter/paymenter · Upgrade to 1.2.11 or later · < 1.2.11 · CVE-2025-58048 · GHSA-5pm9-r2m8-rcmj
PyPI pycti · Upgrade to 6.1.9 or later · < 6.1.9 · CVE-2024-37155 · GHSA-4mvw-j8r9-xcgc · amended
PyPI doris-mcp-server · Upgrade to 0.6.1 or later · < 0.6.1 · CVE-2025-66336 · GHSA-pqrj-4gwg-h5f7 · amended
Maven org.apache.nifi:nifi-cdc-mysql-processors · Upgrade to 2.10.0 or later · >= 1.2.0, < 2.10.0 · CVE-2026-44913 · GHSA-chxj-gxww-q98w
Maven org.apache.nifi:nifi-web-api · Upgrade to 2.9.0 or later · >= 1.12.0, < 2.9.0 · CVE-2026-44914 · GHSA-r2g5-993q-664g
Maven org.apache.nifi:nifi-web-api · Upgrade to 2.10.0 or later · >= 1.15.0, < 2.10.0 · CVE-2026-44911 · GHSA-qvj8-gwpm-4x49
Maven org.apache.atlas:atlas-dashboardv2 · Upgrade to 2.5.0 or later · < 2.5.0 · CVE-2025-62198 · GHSA-v73p-f52r-fmmr
Maven org.apache.nifi:nifi-jetty · Upgrade to 2.10.0 or later · < 2.10.0 · CVE-2026-54665 · GHSA-8vm2-c32j-mvfr
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.