High, CVSS 8.8
Pheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes
Packagist pheditor/pheditor · Upgrade to 2.0.7 or later · <= 2.0.6 · GHSA-g3hq-hphg-8fhh
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
26–50 of 129 matching · newest first
- High, CVSS 8.7
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
PyPI gitpython · Upgrade to 3.1.55 or later · < 3.1.55 · CVE-2026-73622 · GHSA-94p4-4cq8-9g67 · amended
- Medium, CVSS 4.9
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
npm @budibase/server · Upgrade to 3.39.25 or later · < 3.39.25 · CVE-2026-73304 · GHSA-fcrw-f7gg-6g9f · amended
- High, CVSS 7.5
react-server-dom: Denial of Service in Server Functions
npm react-server-dom-turbopack · Upgrade to 19.2.8, 19.1.9 or 19.0.8 by release line · >= 19.0.0, < 19.0.8; >= 19.1.0, < 19.1.9; >= 19.2.0, < 19.2.8 · +2 more packages · CVE-2026-44907 · GHSA-wx67-qw84-cm4g · amended
- Critical, CVSS 9.8
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
Maven org.openidentityplatform.openam:openam-core · Upgrade to 16.1.2 or later · <= 16.1.1 · CVE-2026-62379 · GHSA-wg5r-wc3x-39vc
- Medium, CVSS 6.1
OpenAM Reflected XSS in the OAuth2/OIDC
wapconsent pageMaven org.openidentityplatform.openam:openam-oauth2 · Upgrade to 16.1.2 or later · >= 13.0.0, <= 16.1.1 · CVE-2026-62280 · GHSA-vqxv-6xrh-49cp
- Critical, CVSS 9.2
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
Maven org.openidentityplatform.openam:openam-auth-webauthn · Upgrade to 16.1.2 or later · <= 16.1.1 · CVE-2026-62263 · GHSA-gf8h-gq53-288j
- High, CVSS 7.7
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.6, < 0.10.0 · CVE-2026-59221 · GHSA-frvj-c5qp-xj4w · amended
- Medium, CVSS 5.4
Open WebUI: Arena task endpoints can bypass underlying model access controls
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.8.12, < 0.10.0 · CVE-2026-59225 · GHSA-m3qf-58wf-w979 · amended
- Medium, CVSS 5.4
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.6, < 0.10.0 · CVE-2026-59212 · GHSA-2xwm-4h2q-ggfx · amended
- High, CVSS 8.0
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59224 · GHSA-j657-m4c4-24jq · amended
- Medium, CVSS 4.3
Open WebUI:
WEB_FETCH_FILTER_LISThost allow/block filter bypassable via URL path and non-label-boundary matchingPyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59223 · GHSA-qg3f-8x3j-ggf2 · amended
- High, CVSS 7.5
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
PyPI yt-dlp · Upgrade to 2026.7.4 or later · < 2026.7.4 · CVE-2026-55404 · GHSA-6v4j-43gg-vj32 · amended
- Medium, CVSS 6.0
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.7.0, < 0.10.0 · CVE-2026-59222 · GHSA-gh7p-78x6-jw6m · amended
- Low, CVSS 3.1
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59215 · GHSA-73x5-h92w-xc2j · amended
- Low, CVSS 3.5
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.6.27, < 0.10.0 · CVE-2026-59213 · GHSA-3wp3-xxj9-5jqq · amended
- Medium, CVSS 4.3
Open WebUI: Upload
metadata.knowledge_idbypasses the knowledge-base write-access check (read-only users can add files to KB)PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59217 · GHSA-7r7x-gjvr-448g · amended
- High, CVSS 7.7
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59216 · GHSA-74h3-cxq7-vc5q · amended
- High, CVSS 7.1
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.5, < 0.10.0 · CVE-2026-59714 · GHSA-x2ff-v5v8-m75m · amended
- High, CVSS 7.1
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.0, < 0.10.0 · CVE-2026-59219 · GHSA-855v-hq7w-jmjw · amended
- Low, CVSS 3.1
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.6.16, < 0.10.0 · CVE-2026-59715 · GHSA-gmfw-g93r-vg53 · amended
- Medium, CVSS 4.3
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.8.11, < 0.10.0 · CVE-2026-59227 · GHSA-rqj7-6wrp-6g2g · amended
- Medium, CVSS 6.5
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.2, < 0.10.0 · CVE-2026-59220 · GHSA-ffpj-xv5c-p3gw · amended
- Low, CVSS 3.1
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.0, < 0.10.0 · CVE-2026-59226 · GHSA-mvx4-532p-xfm9 · amended
- Medium, CVSS 5.3
Open WebUI: Account enumeration via observable login timing discrepancy
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59218 · GHSA-7rw5-9f7q-xj36 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.