AWS Amplify Studio UI Component Properties Has an Input Validation Issue
npm @aws-amplify/codegen-ui-react · Upgrade to 2.20.3 or later · <= 2.20.2 · CVE-2025-4318 · GHSA-hf3j-86p7-mfw8 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm @aws-amplify/codegen-ui-react · Upgrade to 2.20.3 or later · <= 2.20.2 · CVE-2025-4318 · GHSA-hf3j-86p7-mfw8 · amended
RubyGems activestorage · Upgrade to 8.1.3.1, 8.0.5.1 or 7.2.3.2 by release line · < 7.2.3.2; >= 8.0.0.beta1, < 8.0.5.1; >= 8.1.0.beta1, < 8.1.3.1 · CVE-2026-66066 · GHSA-xr9x-r78c-5hrm · amended
npm dssrf · Upgrade to 1.0.4 or later · <= 1.0.3 · CVE-2026-54722 · GHSA-cg4g-m8jx-vjv2
PyPI flyto-core · Upgrade to 2.26.7 or later · <= 2.26.6 · CVE-2026-67424 · GHSA-c9hr-64h3-gxpc
PyPI flyto-core · Upgrade to 2.26.7 or later · <= 2.26.6 · CVE-2026-67428 · GHSA-pgwh-4jj4-qm8v
PyPI flyto-core · Upgrade to 2.26.7 or later · >= 2.26.6, < 2.26.7 · CVE-2026-67426 · GHSA-jx74-cqjv-2c67 · amended
PyPI flyto-core · Upgrade to 2.26.7 or later · < 2.26.7 · CVE-2026-67425 · GHSA-qq9q-xgm3-xv9g
PyPI flyto-core · Upgrade to 2.26.7 or later · < 2.26.7 · CVE-2026-67427 · GHSA-hr7p-wg7r-hg9m
PyPI flyto-core · Upgrade to 2.26.7 or later · < 2.26.7 · CVE-2026-67429 · GHSA-2956-977x-2w3r · amended
RubyGems mcp · Upgrade to 0.23.0 or later · <= 0.22.0 · CVE-2026-67431 · GHSA-5p9g-j988-pcwv · amended
RubyGems mcp · Upgrade to 0.23.0 or later · <= 0.22.0 · CVE-2026-67432 · GHSA-h669-8m4g-r2hc · amended
Go github.com/OliveTin/OliveTin · Upgrade to 0.0.0-20260708075951-ec114e95d297 (pre-release) or later · >= 0.0.0-20251024001301-45f9c18bc3ee, < 0.0.0-20260708075951-ec114e95d297 · CVE-2026-67437 · GHSA-xpxj-f2fm-rqch · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.