Medium, CVSS 6.3
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Packagist dompdf/dompdf · Upgrade to 3.1.6 or later · < 3.1.6 · CVE-2026-59941 · GHSA-8hg6-c449-896m
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
26–50 of 86 matching · newest first
- Low, CVSS 2.1
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
PyPI litellm · Upgrade to 1.82.0 or later · < 1.82.0 · CVE-2026-59821 · GHSA-72m8-9m7m-h278 · amended
- High, CVSS 8.8Exploited · CISA KEV
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
PyPI litellm · Upgrade to 1.84.0 or later · < 1.84.0 · CVE-2026-59822 · GHSA-7488-6r32-c95q · amended
- Low, CVSS 2.1
LiteLLM: Local file read via request-supplied OIDC file references
PyPI litellm · Upgrade to 1.83.10 or later · < 1.83.10 · CVE-2026-59819 · GHSA-4g5m-c9r5-49xf · amended
- Medium, CVSS 6.1
LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
PyPI litellm · Upgrade to 1.83.7 or later · < 1.83.7 · CVE-2026-59820 · GHSA-5jmr-gcrj-2c9q · amended
- Medium, CVSS 6.3
n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
npm n8n · Upgrade to 2.27.4 or later · < 2.27.4 · CVE-2026-65014 · GHSA-33q9-f52j-gc75 · amended
- Medium, CVSS 5.1
n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
npm n8n · Upgrade to 2.30.1, 2.29.8 or 1.123.64 by release line · < 1.123.64; >= 2.30.0, < 2.30.1; >= 2.0.0, < 2.29.8 · CVE-2026-65596 · GHSA-gq66-9cw5-j5jm · amended
- Medium, CVSS 5.1
n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check
npm n8n · Upgrade to 2.30.1 or 2.29.8 by release line · >= 2.30.0, < 2.30.1; < 2.29.8 · CVE-2026-65594 · GHSA-q5xf-xhwf-cwqf · amended
- Medium, CVSS 5.5
n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows
npm n8n · Upgrade to 2.30.1 or 2.29.8 by release line · >= 2.30.0, < 2.30.1; < 2.29.8 · CVE-2026-65590 · GHSA-fpg6-x68q-5793 · amended
- Medium, CVSS 5.3
n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
npm n8n · Upgrade to 2.28.0 or 1.123.58 by release line · >= 2.0.0, < 2.28.0; < 1.123.58 · CVE-2026-58661 · GHSA-w867-jm58-p9pv · amended
- Medium, CVSS 5.3
n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects
npm n8n · Upgrade to 2.28.0 or later · < 2.28.0 · CVE-2026-59253 · GHSA-2xgm-wc4g-5jvg · amended
- Medium, CVSS 6.3
n8n: External Secrets Accessible via Workflow Expressions Outside Credentials
npm n8n · Upgrade to 2.28.1 or 2.27.4 by release line · >= 2.28.0, < 2.28.1; < 2.27.4 · CVE-2026-59254 · GHSA-2434-3x6q-8r99 · amended
- Medium, CVSS 5.3
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
npm n8n · Upgrade to 2.28.1, 2.27.4 or 1.123.61 by release line · < 1.123.61; >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4 · CVE-2026-59257 · GHSA-hwmj-qg4v-cvg9 · amended
- Medium, CVSS 6.0
n8n: External Secrets Permission Bypass via Expression Parser Mismatch
npm n8n · Upgrade to 2.28.1, 2.27.4 or 1.123.61 by release line · < 1.123.61; >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4 · CVE-2026-59259 · GHSA-jp7m-xcgx-57qm · amended
- Medium, CVSS 4.9
n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory
npm n8n · Upgrade to 2.32.1 or 2.31.5 by release line · >= 2.32.0, < 2.32.1; < 2.31.5 · CVE-2026-72773 · GHSA-pf2q-pxhf-hgmw · amended
- Medium, CVSS 6.1
n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72769 · GHSA-hx4h-vr3m-45vh · amended
- High, CVSS 7.1
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72749 · GHSA-xwx6-jjhv-84p8 · amended
- High, CVSS 7.7
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72762 · GHSA-xmc9-4f2h-jf9c · amended
- High, CVSS 7.2
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72763 · GHSA-cj9h-qx8g-pq2g · amended
- High, CVSS 7.1
n8n: Credential Authorization Bypass via Expression in HTTP Request Node
genericAuthTypenpm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72774 · GHSA-6qc9-mqvw-jg7x · amended
- High, CVSS 8.7
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
npm n8n · Upgrade to 2.32.1 or 2.31.5 by release line · >= 2.32.0, < 2.32.1; < 2.31.5 · CVE-2026-72765 · GHSA-gv7g-jm28-cr3m · amended
- High, CVSS 8.2
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72766 · GHSA-2x35-3fw4-9jr4 · amended
- High, CVSS 8.7
n8n: Authenticated code execution in the n8n Git node
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72767 · GHSA-rcv6-pvrj-4xcg · amended
- Medium, CVSS 6.4
n8n: SSRF Protection Bypass via MCP Client Node
npm n8n · Upgrade to 2.32.1 or 2.31.5 by release line · >= 2.32.0, < 2.32.1; < 2.31.5 · CVE-2026-72768 · GHSA-vhf8-cg2h-cg3p · amended
- High, CVSS 7.1
n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction
npm n8n · Upgrade to 2.32.1, 2.31.5 or 1.123.67 by release line · < 1.123.67; >= 2.32.0, < 2.32.1; >= 2.0.0-rc.0, < 2.31.5 · CVE-2026-72770 · GHSA-gf29-4f56-r2jf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.