Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32593 · GHSA-m7jc-g4rc-jmvh · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–30 of 30 matching · newest first
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32593 · GHSA-m7jc-g4rc-jmvh · amended
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · >= 1.2.10, < 1.2.13 · CVE-2026-32258 · GHSA-vgp4-2fc4-qff2 · amended
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32257 · GHSA-v7cf-8gh9-gxmj · amended
ApplyResult typecrates.io z3 · Upgrade to 0.21.0 or later · >= 0.0.0-0, < 0.21.0
PyPI tablib · Upgrade to 3.10.0 or later · < 3.10.0 · CVE-2026-9318 · GHSA-gqgw-jghv-mxwx
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.