Feast vulnerable to unsafe deserialization RCE in registry server via UDF proto
PyPI feast · Upgrade to 0.63.0 or later · < 0.63.0 · CVE-2026-56121 · GHSA-q63x-9pfm-mjx4 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–25 of 27 matching · newest first
PyPI feast · Upgrade to 0.63.0 or later · < 0.63.0 · CVE-2026-56121 · GHSA-q63x-9pfm-mjx4 · amended
ot_-prefixed Arguments that Bypass Input FilteringGo github.com/OliveTin/OliveTin · Upgrade to 0.0.0-20260531214440-ebffd9f040f7 (pre-release) or later · < 0.0.0-20260531214440-ebffd9f040f7 · CVE-2026-53541 · GHSA-prj9-97mp-mwh2
Go github.com/OliveTin/OliveTin · Upgrade to 0.0.0-20260521230847-a3865704c854 (pre-release) or later · < 0.0.0-20260521230847-a3865704c854 · CVE-2026-48709 · GHSA-f637-w7p2-m7fx
Maven org.openidentityplatform.openam:openam-federation-library · Upgrade to 16.1.1 or later · <= 16.0.6 · CVE-2026-45052 · GHSA-p462-xxwx-pqf4
Maven org.openidentityplatform.openam:openam-auth-webauthn · Upgrade to 16.1.1 or later · < 16.1.1 · CVE-2026-45051 · GHSA-6c99-87fr-6q7r · amended
Maven io.jenkins.plugins:mcp-server · Upgrade to 0.178.vffe5a (pre-release) or later · < 0.178.vffe5a · CVE-2026-57300 · GHSA-mpff-xhg4-vr45
Maven org.jenkins-ci.plugins:contrast-continuous-application-security · Upgrade to 3.12 or later · < 3.12 · CVE-2026-57298 · GHSA-6qc4-57v3-28rr
Maven fish.payara.distributions:payara · Upgrade to 7.2026.6 or later · >= 4.0.0, < 7.2026.6 · CVE-2026-12986 · GHSA-x939-7fq5-v9v6
Maven org.jenkins-ci.plugins:contrast-continuous-application-security · Upgrade to 3.12 or later · < 3.12 · CVE-2026-57299 · GHSA-8263-qv4g-vfxr
Maven org.jenkins-ci.tools:git-parameter · Upgrade to 462.463 or later · < 462.463 · CVE-2026-57286 · GHSA-hwvp-7xqv-8jx3
Maven io.jenkins.plugins:bitbucket-push-and-pull-request · Upgrade to 3.3.9 or later · < 3.3.9 · CVE-2026-57289 · GHSA-jwhr-h7pc-3974
Maven org.jenkins-ci.plugins:jobConfigHistory · Upgrade to 1367 or later · < 1367 · CVE-2026-57287 · GHSA-8qr4-27mh-hqfr
Maven org.jenkins-ci.plugins:external-workspace-manager · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-57296 · GHSA-hrmj-8fm9-cg8x
Maven org.jenkins-ci.plugins:gitee · Upgrade to 1292.v2559f2f3f2c0 or later · < 1292.v2559f2f3f2c0 · CVE-2026-57291 · GHSA-wjmq-rpqq-w4h9
Maven org.jenkins-ci.plugins:contrast-continuous-application-security · Upgrade to 3.12 or later · < 3.12 · CVE-2026-57297 · GHSA-p44q-fmwr-jqr7
Maven org.jenkins-ci.plugins:git-client · Upgrade to 6.6.1 or later · < 6.6.1 · CVE-2026-57282 · GHSA-wp5x-hrrw-6r4g
Maven io.jenkins.plugins:pipeline-groovy-lib · Upgrade to 4331.4333 or later · < 4331.4333 · CVE-2026-57284 · GHSA-2w2h-gwwj-fh3q
Maven org.jenkins-ci.plugins:github-branch-source · Upgrade to 1967.1970 or later · < 1967.1970 · CVE-2026-57285 · GHSA-g7c6-wxjf-8564
Maven io.jenkins.plugins:pipeline-groovy-lib · Upgrade to 4331.4333 or later · < 4331.4333 · CVE-2026-57283 · GHSA-72c8-3wwg-r59w
Maven org.jenkins-ci.plugins:active-directory · Upgrade to 2.41.2 or later · < 2.41.2 · CVE-2026-57288 · GHSA-gx55-p8g7-p3fh
Maven com.amazon.jenkins.fleet:ec2-fleet · Upgrade to 4.2.3.540.va or later · < 4.2.3.540.va · CVE-2026-57294 · GHSA-9v77-j4xv-34gq
Maven org.jenkins-ci.plugins:script-security · Upgrade to 1402.1405.vc96e74964250 or later · < 1402.1405.vc96e74964250 · CVE-2026-57280 · GHSA-c3jm-9vj7-5v66
Maven org.jenkins-ci.plugins:gitee · Upgrade to 1292.v2559f2f3f2c0 or later · < 1292.v2559f2f3f2c0 · CVE-2026-57293 · GHSA-jhcq-6wqp-qcfx
Maven com.amazon.jenkins.fleet:ec2-fleet · Upgrade to 4.2.3.540.va or later · < 4.2.3.540.va · CVE-2026-57295 · GHSA-2x9c-vp3g-hvv2
Maven org.jenkins-ci.plugins:gitee · Upgrade to 1292.v2559f2f3f2c0 or later · < 1292.v2559f2f3f2c0 · CVE-2026-57292 · GHSA-w794-rwp2-jc9m
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.