PYSEC-2026-3445
PyPI pycti · Upgrade to 7.260326.0 or later · < 7.260326.0 · CVE-2026-35210 · GHSA-36fr-4m54-94mj
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI pycti · Upgrade to 7.260326.0 or later · < 7.260326.0 · CVE-2026-35210 · GHSA-36fr-4m54-94mj
PyPI serena-agent · Upgrade to 1.5.2 or later · < 1.5.2 · CVE-2026-49471 · GHSA-37h2-6p4f-mp3q · amended
Maven nl.nl-portal:taak · Upgrade to 3.0.1 or later · >= 1.5.0, <= 3.0.0 · CVE-2026-49464 · GHSA-6h3c-r723-7fx3
Go github.com/BishopFox/joro · Upgrade to 0.0.0-20260601151442-5c0ca35db828 (pre-release) or later · < 0.0.0-20260601151442-5c0ca35db828 · CVE-2026-53649 · GHSA-xqhv-chqm-fhcc
Maven org.dspace:dspace-api · Upgrade to 10.0, 9.3 or 8.4 by release line · >= 8.0-rc1, < 8.4; >= 9.0-rc1, < 9.3; >= 10.0-rc1, <= 10.0-rc1 · CVE-2026-49832 · GHSA-9x82-rm84-c6x7
Go github.com/nuclio/nuclio · Upgrade to 0.0.0-20260601075854-3356b86a8bfa (pre-release) or later · < 0.0.0-20260601075854-3356b86a8bfa · CVE-2026-52831 · GHSA-v5px-423j-pf7p
Go github.com/zalando/skipper · Upgrade to 0.26.10 or later · < 0.26.10 · CVE-2026-50197 · GHSA-659f-rgp5-w4wf
lxml_html_clean.Cleaner does not strip javascript: URLs from namespaced URL attributesPyPI lxml-html-clean · Upgrade to 0.4.5 or later · < 0.4.5 · CVE-2026-49825 · GHSA-4jhm-jv67-739f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.