Genql: inject arbitrary JavaScript or TypeScript via a GraphQL schema
npm @genql/cli · Upgrade to 6.3.4 or later · < 6.3.4 · CVE-2026-63397 · GHSA-w757-xvvv-vgfw · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm @genql/cli · Upgrade to 6.3.4 or later · < 6.3.4 · CVE-2026-63397 · GHSA-w757-xvvv-vgfw · amended
Maven com.arcadedb:arcadedb-server · Upgrade to 26.7.2 or later · < 26.7.2 · GHSA-x8mg-6r4p-87pf
Maven com.arcadedb:arcadedb-engine · Upgrade to 26.7.2 or later · < 26.7.2 · GHSA-vwjc-v7x7-cm6g
Maven com.arcadedb:arcadedb-engine · Upgrade to 26.7.2 or later · < 26.7.2 · GHSA-x9f9-r4m8-9xc2
PyPI mcp · Upgrade to 1.28.1 or later · < 1.28.1 · CVE-2026-59950 · GHSA-vj7q-gjh5-988w · amended
Maven com.arcadedb:arcadedb-server · Upgrade to 26.7.1 or later · < 26.7.1 · GHSA-48qw-824m-86pr
Packagist pheditor/pheditor · Upgrade to 2.0.6 or later · >= 2.0.1, < 2.0.6 · CVE-2026-55579 · GHSA-p4h7-p9rj-2pq2
Packagist pheditor/pheditor · Upgrade to 2.0.6 or later · >= 2.0.1, < 2.0.6 · CVE-2026-55578 · GHSA-wg4w-wr5q-6vjc
Maven com.arcadedb:arcadedb-engine · Upgrade to 26.6.1 or later · < 26.6.1 · CVE-2026-54076 · GHSA-vg6x-6pg9-6qwg
Maven com.arcadedb:arcadedb-engine · Upgrade to 26.6.1 or later · < 26.6.1 · CVE-2026-54077 · GHSA-8w86-m9h8-hvqg
Packagist pheditor/pheditor · Upgrade to 2.0.5 or later · <= 2.0.4 · CVE-2026-54540 · GHSA-9643-6xjp-vx57
PyPI mcp · Upgrade to 1.27.2 or later · <= 1.27.1 · CVE-2026-52869 · GHSA-jpw9-pfvf-9f58 · amended
PyPI mcp · Upgrade to 1.27.2 or later · >= 1.23.0, <= 1.27.1 · CVE-2026-52870 · GHSA-hvrp-rf83-w775 · amended
Go github.com/nuclio/nuclio · Upgrade to 1.16.5 or later · < 1.16.5 · CVE-2026-52833 · GHSA-3v79-m2cg-89ww
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53714 · GHSA-22xc-xg2r-9j7v
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53713 · GHSA-wcrf-9vrr-854f
PyPI snowflake-connector-python · Upgrade to 4.7.1 or 3.18.1 by release line · < 3.18.1; >= 4.0.0, < 4.7.1 · CVE-2026-15925 · GHSA-5cc2-282f-jjq2 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.