golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-46595 · GHSA-x527-x647-q7gg
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-46595 · GHSA-x527-x647-q7gg
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-42508 · GHSA-5cgq-3rg8-m6cv
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39834 · GHSA-rm3j-f69w-wqmq
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39831 · GHSA-89gr-r52h-f8rx
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39829 · GHSA-w879-237q-wc7r
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39830 · GHSA-vgwf-h737-ff37
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-46597 · GHSA-q4h4-gmj2-qvw2
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39832 · GHSA-f5wc-c3c7-36mc
Go golang.org/x/crypto · Upgrade to 0.52.0 or later · < 0.52.0 · CVE-2026-39833 · GHSA-jppx-rxg9-jmrx
PyPI lemur · Upgrade to 1.9.2 or later · < 1.9.2 · CVE-2026-55166 · GHSA-v2wp-frmc-5q3v · amended
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.14.0 or later · < 14.14.0 · CVE-2026-53461 · GHSA-g22q-f7gc-5jhr
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.14.0 or later · < 14.14.0 · CVE-2026-53460 · GHSA-q62c-h75r-2xhc
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.14.0 or later · < 14.14.0 · CVE-2026-49218 · GHSA-8pj9-6897-74xc
Go github.com/sigstore/rekor · Upgrade to 1.5.2 or later · >= 0.3.0, < 1.5.2 · CVE-2026-48702 · GHSA-47q9-m4ww-924m
PyPI lemur · Upgrade to 1.9.1 or later · <= 1.9.0 · CVE-2026-48508 · GHSA-qcqw-jwxc-2hqg · amended
NuGet messagepack · Upgrade to 3.1.7 or 2.5.301 by release line · < 2.5.301; >= 3.0, < 3.1.7 · CVE-2026-48506 · GHSA-vh6j-jc39-fggf
Packagist filament/filament · Upgrade to 5.6.5 or 4.11.5 by release line · >= 4.0.0, < 4.11.5; >= 5.0.0, < 5.6.5 · CVE-2026-48505 · GHSA-mc5j-f6wx-h9qh
NuGet messagepack · Upgrade to 3.1.7 or later · >= 3.0, < 3.1.7 · CVE-2026-48502 · GHSA-382j-8mxh-c7x2
PyPI amazon-braket-sdk · Upgrade to 1.117.0 or later · >= 1.10.0, < 1.117.0 · CVE-2026-9291 · GHSA-g697-2xrc-gc46 · amended
npm i18next-fs-backend · Upgrade to 2.6.6 or later · < 2.6.6 · CVE-2026-48713 · GHSA-2933-q333-qg83 · amended
npm i18next-http-middleware · Upgrade to 3.9.7 or later · < 3.9.7 · CVE-2026-48714 · GHSA-f49m-vf83-692w · amended
Maven org.openidentityplatform.openam:openam-radius · Upgrade to 16.1.1 or later · < 16.1.1 · CVE-2026-46560 · GHSA-386j-6m86-78f9 · amended
Maven org.openidentityplatform.openam:openam-oauth2 · Upgrade to 16.1.1 or later · < 16.1.1 · CVE-2026-46498 · GHSA-cj8f-2fhf-826r · amended
Maven org.openidentityplatform.openam:openam-push-notification · Upgrade to 16.1.1 or later · < 16.1.1 · CVE-2026-45794 · GHSA-pp89-732f-3g8q · amended
Maven org.apache.shiro:shiro-guice · Upgrade to 3.0.0 or later · >= 2.0.0, < 3.0.0 · CVE-2026-56091 · GHSA-qj64-jj84-w38j · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.