Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–39 of 39 matching · newest first
npm electron · Upgrade to 42.0.0-beta.1 (pre-release), 41.2.0, 40.9.0 or 39.8.7 by release line · < 39.8.7; >= 40.0.0-alpha.1, < 40.9.0; >= 41.0.0-alpha.1, < 41.2.0; >= 42.0.0-alpha.1, < 42.0.0-beta.1 · CVE-2026-70609 · GHSA-4f78-qhmw-8j8m
npm electron · Upgrade to 42.0.1, 41.10.3 or 39.8.10 by release line · >= 42.0.0-alpha.1, < 42.0.1; >= 40.0.0-alpha.1, < 41.10.3; < 39.8.10 · CVE-2026-70608 · GHSA-9f4c-93c8-jc8g
npm electron · Upgrade to 42.0.0-beta.3 (pre-release), 41.2.1, 40.9.0 or 39.8.8 by release line · < 39.8.8; >= 40.0.0-alpha.1, < 40.9.0; >= 41.0.0-alpha.1, < 41.2.1; >= 42.0.0-alpha.1, < 42.0.0-beta.3 · CVE-2026-70607 · GHSA-v93f-fgjr-hjrj
npm electron · Upgrade to 43.0.0, 42.5.1, 41.9.1 or 40.10.6 by release line · >= 43.0.0-alpha.1, < 43.0.0; >= 42.0.0-alpha.1, < 42.5.1; >= 41.0.0-alpha.1, < 41.9.1; >= 40.0.0-alpha.1, < 40.10.6 · CVE-2026-70606 · GHSA-r4w5-6pfg-jxp5
npm electron · Upgrade to 42.0.0, 41.4.0, 40.9.3 or 39.8.10 by release line · >= 42.0.0-alpha.1, < 42.0.0; >= 41.0.0-alpha.1, < 41.4.0; >= 40.0.0-alpha.1, < 40.9.3; < 39.8.10 · CVE-2026-70604 · GHSA-v3j7-r9gq-3gjw
npm electron · Upgrade to 42.0.0-beta.3 (pre-release), 41.2.1, 40.9.0 or 39.8.8 by release line · < 39.8.8; >= 40.0.0-alpha.1, < 40.9.0; >= 41.0.0-alpha.1, < 41.2.1; >= 42.0.0-alpha.1, < 42.0.0-beta.3 · CVE-2026-70602 · GHSA-m55f-7gqj-fr98
npm electron · Upgrade to 42.0.0-beta.1 (pre-release), 41.1.1, 40.9.0 or 39.8.6 by release line · >= 42.0.0-alpha.1, < 42.0.0-beta.1; >= 41.0.0-alpha.1, < 41.1.1; >= 40.0.0-alpha.1, < 40.9.0; < 39.8.6 · CVE-2026-70603 · GHSA-5c9j-mhmv-5xgx
npm electron · Upgrade to 42.0.0-beta.5 (pre-release), 41.2.2, 40.9.2 or 39.8.9 by release line · < 39.8.9; >= 40.0.0-alpha.1, < 40.9.2; >= 41.0.0-alpha.1, < 41.2.2; >= 42.0.0-alpha.1, < 42.0.0-beta.5 · CVE-2026-70601 · GHSA-h7rp-cf8h-j98x
npm electron · Upgrade to 42.0.0-beta.1 (pre-release), 41.2.0, 40.9.0 or 39.8.7 by release line · < 39.8.7; >= 40.0.0-alpha.1, < 40.9.0; >= 41.0.0-alpha.1, < 41.2.0; >= 42.0.0-alpha.1, < 42.0.0-beta.1 · CVE-2026-70599 · GHSA-9pf5-hg6p-4pwp
npm electron · Upgrade to 42.0.0-beta.3 (pre-release), 41.2.1, 40.9.0 or 39.8.10 by release line · < 39.8.10; >= 40.0.0-alpha.1, < 40.9.0; >= 41.0.0-alpha.1, < 41.2.1; >= 42.0.0-alpha.1, < 42.0.0-beta.3 · CVE-2026-70598 · GHSA-pfmc-3mgc-p6fp
npm ghost · Upgrade to 6.21.2 or later · >= 5.46.1, < 6.21.2 · CVE-2026-53949 · GHSA-jx35-x7fj-vgpr
npm ghost · Upgrade to 6.54.1 or later · >= 4.9.0, < 6.54.1 · CVE-2026-70596 · GHSA-pr22-p9rp-2cqv
npm ghost · Upgrade to 6.54.1 or later · >= 6.26.0, < 6.54.1 · CVE-2026-70595 · GHSA-x5mm-wm4g-j5xv
Maven org.apache.qpid:proton-j · Upgrade to 0.35.0 or later · < 0.35.0 · CVE-2026-66274 · GHSA-p2gc-fm5w-94jj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.