High, CVSS 7.5
XSS in Ghost's ActivityPub client
npm @tryghost/activitypub · Upgrade to 3.1.0 or later · < 3.1.0 · CVE-2026-53950 · GHSA-xpp7-93x6-v29m
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.1
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.10.0, < 0.11.0 · CVE-2026-70494 · GHSA-3cg5-48j3-v4gv
- High, CVSS 8.7
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.10.0, < 0.11.0 · CVE-2026-70492 · GHSA-pwxh-7358-jq2x
- High, CVSS 8.2
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, <= 0.10.2 · CVE-2026-70486 · GHSA-3xpf-xq7r-v8c5
- High, CVSS 7.1
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, < 0.11.0 · CVE-2026-70485 · GHSA-8x5v-cpv7-8jjp
- High, CVSS 8.1
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.8.0, < 0.11.0 · CVE-2026-70482 · GHSA-rq84-p6rr-vf89
- High, CVSS 7.7
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, < 0.11.0 · CVE-2026-70479 · GHSA-w2rx-84hp-gg95
- Critical, CVSS 9.2
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70478 · GHSA-qgvm-j2hm-6m38 · amended
- Critical, CVSS 9.5
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-70477 · GHSA-5xvg-pmgg-3mxr · amended
- High, CVSS 8.3
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70476 · GHSA-gmmw-qg98-6j6p
- High, CVSS 7.1
Flowise: Missing Authorization on Execution Update Endpoint
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70475 · GHSA-fm2f-4339-4p2f
- High, CVSS 8.7
Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
PyPI django · Upgrade to 6.0.8 or 5.2.17 by release line · < 5.2.17; >= 6.0a1, < 6.0.8 · CVE-2026-15307 · GHSA-wvqv-fj8w-qmhm
- High, CVSS 7.6
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70474 · GHSA-wch5-xp77-fxg4
- High, CVSS 8.3
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70473 · GHSA-fr6g-7cq8-fg82
- High, CVSS 7.1
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70472 · GHSA-chm3-vqcf-52rx
- Critical, CVSS 9.4
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69264 · GHSA-4j8x-x6v7-w9rq · amended
- High, CVSS 7.2
Flowise: Authenticated arbitrary file write in the
S3 Directorydocument loader via unsanitized S3 object keysnpm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · GHSA-88pr-878c-24wf
- High, CVSS 7.1
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70471 · GHSA-8r8h-6vcc-xhrv
- Critical, CVSS 9.5
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-70470 · GHSA-52fh-8v99-63c2 · amended
- High, CVSS 8.7
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69263 · GHSA-xc48-889x-5qmw
- High, CVSS 7.1
Flowise:
DELETE /api/v1/chatflows/:iddoes not validate resource type, allowingagentflows:deleteandchatflows:deleteto delete each other’s flow typenpm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69262 · GHSA-p5w8-m249-4r4v
- Critical, CVSS 9.4
Flowise RCE via SQLite Record Manager Node
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69259 · GHSA-x3hf-7cj6-3r4m · amended
- High, CVSS 8.8
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated
overrideConfigSpread in Prediction APInpm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69258 · GHSA-6vh2-wg4h-4vwj
- High, CVSS 7.6
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69257 · GHSA-c6xh-wv4j-ppv5
- Critical, CVSS 9.4
Flowise: Remote Code Execution Vulnerability in CSVAgent
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69256 · GHSA-x6vm-w76m-8j7g · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.