MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-52883 · GHSA-4vpf-w7qv-5h3q
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–42 of 42 matching · newest first
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-52883 · GHSA-4vpf-w7qv-5h3q
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-52882 · GHSA-3v2j-6fw9-f57c
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-52881 · GHSA-vcrw-4xvv-jh49
PyPI lightning +1 · Upgrade all 2 to 2.6.6 or later · < 2.6.6 · CVE-2026-58659 · GHSA-qqmf-gpg7-g8gw · amended
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-52847 · GHSA-77x8-3v3h-hrhv
Packagist phanan/koel · Upgrade to 9.7.1 or later · <= 9.7.0 · CVE-2026-54494 · GHSA-rjg7-r26h-cfp2
Packagist phanan/koel · Upgrade to 9.7.1 or later · <= 9.7.0 · CVE-2026-50552 · GHSA-jr4p-4xjh-fwvw
Packagist phanan/koel · Upgrade to 9.7.1 or later · <= 9.7.0 · CVE-2026-54491 · GHSA-6qvr-wjmv-v8mm
PyPI garminconnect · Upgrade to 0.3.5 or later · <= 0.3.4 · CVE-2026-54447 · GHSA-wjhr-76vg-2hvc · amended
Packagist phanan/koel · Upgrade to 9.7.0 or later · <= 9.6.0 · GHSA-8q6q-m837-fv64
Packagist phanan/koel · Upgrade to 9.7.0 or later · <= 9.6.0 · CVE-2026-54493 · GHSA-6p96-cfg5-4vhp
Packagist phanan/koel · Upgrade to 9.7.0 or later · <= 9.6.0 · CVE-2026-54492 · GHSA-w79m-f3jx-779v
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · >= 2.8.0, <= 2.28.3 · CVE-2026-49280 · GHSA-m7ph-9558-mrx3
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · >= 1.3.0, <= 2.28.3 · CVE-2026-49273 · GHSA-v84x-qvhg-f36r
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-47156 · GHSA-c2xg-qjqw-2v98
Packagist mantisbt/mantisbt · Upgrade to 2.28.4 or later · <= 2.28.3 · CVE-2026-47142 · GHSA-mw6p-33vw-46cc
PyPI cornac · Upgrade to 2.6.0 or later · < 2.6.0 · CVE-2026-43637 · GHSA-rrh3-cwwj-g5mg · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.