Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/almeidapaulopt/tsdproxy · Upgrade to 1.4.4-0.20260603142855-434819b4421e (pre-release) or later · < 1.4.4-0.20260603142855-434819b4421e · GHSA-g936-7jqj-mwv8
Go chainguard.dev/melange · Upgrade to 0.50.4 or later · < 0.50.4 · +1 more package · CVE-2026-54174 · GHSA-fpg8-7664-jc5q
PyPI mcp-server-kubernetes +1 · Upgrade all 2 to 3.9.0 or later · < 3.9.0 · CVE-2026-61459 · GHSA-wmg3-h8mf-wgvr · amended
PyPI clauster · Upgrade to 0.2.2 or later · <= 0.2.1 · GHSA-h4g2-xfmw-q2c9 · amended
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-50551 · GHSA-56mp-4f3v-fgj2
Packagist prestashop/ps_facetedsearch · Upgrade to 4.0.4 or later · >= 3.0.0, < 4.0.4 · CVE-2026-54159 · GHSA-m5f5-28qr-9g9r
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54158 · GHSA-5xfx-xj4h-5p7r
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-73498 · GHSA-g5r6-gv6m-f5jv · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-73496 · GHSA-wm45-qh3g-v83f · amended
npm safeinstall-cli · Upgrade to 0.10.2 or later · < 0.10.2 · GHSA-xrmc-c5cg-rv7x · amended
Packagist notrinos/notrinos-erp · Upgrade to 1.1.0 or later · < 1.1.0 · CVE-2026-76913 · GHSA-qv4m-m73m-8hj7 · amended
PyPI babeldoc · Upgrade to 0.6.3 or later · <= 0.6.2 · CVE-2026-54071 · GHSA-m8gf-v64p-gfmg · amended
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.63.6 or later · <= 2.63.5 · CVE-2026-54088 · GHSA-m93h-4hw7-5qcm
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54070 · GHSA-w7cg-whh7-xp28
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54069 · GHSA-hvr9-72v2-fff3
Go github.com/authorizerdev/authorizer · Upgrade to 0.0.0-20260409051328-bd3f5baf6d3d (pre-release) or later · < 0.0.0-20260409051328-bd3f5baf6d3d · CVE-2026-54072 · GHSA-h29v-hj44-q8cv
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54067 · GHSA-mvjr-vv3c-w4qv
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54066 · GHSA-p4m3-mgmm-c664
npm adm-zip · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-39244 · GHSA-xcpc-8h2w-3j85 · amended
npm @libp2p/gossipsub · Upgrade to 16.0.0 or later · < 16.0.0 · CVE-2026-49866 · GHSA-cwc9-cp4j-mcvv · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.