Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
PyPI ansible-jailexec · Upgrade to 2.0.0 or later · < 2.0.0 · CVE-2026-55074 · GHSA-cxgv-hp74-jj7r
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI ansible-jailexec · Upgrade to 2.0.0 or later · < 2.0.0 · CVE-2026-55074 · GHSA-cxgv-hp74-jj7r
NuGet sipsorcery · Upgrade to 10.0.14 or later · >= 10.0.5, <= 10.0.13 · GHSA-pfvm-w89x-94jw · amended
NuGet sipsorcery · Upgrade to 10.0.14 or later · < 10.0.14 · CVE-2026-123805 · GHSA-jwjp-4649-v8jp · amended
package in ado_package_installPyPI stata-mcp · Upgrade to 1.19.0 or later · < 1.19.0 · CVE-2026-55071 · GHSA-49m4-vp58-wgc9
Go github.com/seaweedfs/seaweedfs · Upgrade to 0.0.0-20260526080459-dd1b4287899e (pre-release) or later · < 0.0.0-20260526080459-dd1b4287899e · CVE-2026-54917 · GHSA-w62w-66v9-vvgv · amended
PyPI apache-airflow · Upgrade to 3.3.1 or later · < 3.3.1 · CVE-2026-68968 · GHSA-j4jc-cq9h-xrhr
PyPI apache-airflow · Upgrade to 3.3.1 or later · >= 3.3.0, < 3.3.1 · CVE-2026-67260 · GHSA-q4c3-7575-55j2
PyPI apache-airflow · Upgrade to 3.3.1 or later · >= 3.3.0, < 3.3.1 · CVE-2026-67587 · GHSA-2qjv-p2gc-mjg2
PyPI apache-airflow · Upgrade to 3.3.1 or later · >= 3.3.0, < 3.3.1 · CVE-2026-58076 · GHSA-8prw-8m6x-8w6f
PyPI compliance-trestle · Upgrade to 4.1.0 or later · < 4.1.0 · CVE-2026-52776 · GHSA-h47f-gmjp-m7rr
NuGet ssh.net · Upgrade to 2026.0.0 or later · <= 2025.1.0 · CVE-2026-48798 · GHSA-q939-rpr3-3284 · amended
crates.io nimiq-blockchain · Upgrade to 1.5.1 or later · <= 1.5.0 · CVE-2026-46369 · GHSA-3763-qp59-59vf · amended
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-35445 · GHSA-j5jq-cr68-v2xx · amended
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · >= 1.2.10, < 1.2.13 · CVE-2026-32258 · GHSA-vgp4-2fc4-qff2 · amended
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32257 · GHSA-v7cf-8gh9-gxmj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.