Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm n8n · Upgrade to 2.28.1, 2.27.4 or 1.123.61 by release line · < 1.123.61; >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4 · CVE-2026-59206 · GHSA-75qm-gp28-rcq9 · amended
npm n8n · Upgrade to 2.28.1, 2.27.4 or 1.123.61 by release line · < 1.123.61; >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4 · CVE-2026-59209 · GHSA-q3j5-8vrg-4p9q · amended
Maven io.netty:netty-codec-compression · Upgrade to 4.2.16.Final or later · >= 4.2.0.Final, < 4.2.16.Final · +1 more package · CVE-2026-59901 · GHSA-558v-64gr-wgg4
Maven io.netty:netty-handler-ssl-ocsp · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, < 4.2.16.Final; < 4.1.136.Final · CVE-2026-56822 · GHSA-wc96-39fc-566f
Maven io.netty:netty-handler-ssl-ocsp · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, < 4.2.16.Final; < 4.1.136.Final · CVE-2026-56821 · GHSA-g7hg-vrcf-mvmr
Maven io.netty:netty-handler-ssl-ocsp · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, < 4.2.16.Final; < 4.1.136.Final · CVE-2026-56820 · GHSA-272m-gcwp-mpwg
Maven io.netty:netty-codec-xml · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; >= 4.1.0.Final, <= 4.1.135.Final · CVE-2026-56817 · GHSA-4qhr-g3c6-fcfx
Maven io.netty:netty-codec-http3 · Upgrade to 4.2.16.Final or later · < 4.2.16.Final · CVE-2026-56816 · GHSA-hpcc-26xq-25fv
Maven io.netty:netty-codec-http · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; >= 4.1.0.Final, <= 4.1.135.Final · CVE-2026-56745 · GHSA-jppx-w49h-x2qq
Maven io.netty:netty-codec-haproxy · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; >= 4.1.0.Final, <= 4.1.135.Final · CVE-2026-55851 · GHSA-q6cq-mhr2-jmr5
Maven io.netty:netty-codec-http · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; >= 4.1.0.Final, <= 4.1.135.Final · CVE-2026-55833 · GHSA-mvh2-crg5-v77c
Maven io.netty:netty-codec-http · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; >= 4.1.0.Final, <= 4.1.135.Final · CVE-2026-55831 · GHSA-6jqx-86gh-f27w
cachedResultUrlnpm n8n · Upgrade to 2.30.1, 2.29.8 or 1.123.64 by release line · < 1.123.64; >= 2.30.0, < 2.30.1; >= 2.0.0-rc.0, < 2.29.8 · CVE-2026-65592 · GHSA-9wcp-9r3j-383q · amended
npm n8n · Upgrade to 2.30.1, 2.29.8 or 1.123.64 by release line · < 1.123.64; >= 2.30.0, < 2.30.1; >= 2.0.0-rc.0, < 2.29.8 · CVE-2026-65597 · GHSA-p3rg-hrf9-w9gj · amended
npm n8n · Upgrade to 2.30.1, 2.29.8 or 1.123.64 by release line · < 1.123.64; >= 2.30.0, < 2.30.1; >= 2.0.0-rc.0, < 2.29.8 · CVE-2026-65598 · GHSA-g3r5-9h93-4j2c · amended
npm n8n · Upgrade to 2.30.1 or 2.29.8 by release line · >= 2.30.0, < 2.30.1; < 2.29.8 · CVE-2026-65015 · GHSA-x5vx-c2c8-m3w9 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.