High, CVSS 7.1
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
npm mlflow · Upgrade to 3.15.0 or later · < 3.15.0 · CVE-2026-69148 · GHSA-gqch-g4w5-7qcw
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
1–25 of 47 matching · newest first
- Medium, CVSS 6.5
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
npm mlflow · Upgrade to 3.15.0 or later · < 3.15.0 · CVE-2026-69146 · GHSA-3p64-6gvh-82v5
- Critical, CVSS 9.3Exploited · CISA KEV
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
PyPI mlflow · Upgrade to 3.15.0 or later · >= 3.3.0, < 3.15.0 · CVE-2026-64849 · GHSA-7gwp-5pfp-969j · amended
- High, CVSS 8.1
http4k:
DigestAuthProvider.verifydid not bind to request URIMaven org.http4k:http4k-security-digest · Upgrade to 6.50.0.0, 5.42.0.0 or 4.51.0.0 by release line · >= 6.0.0.0, < 6.50.0.0; >= 5.0.0.0, < 5.42.0.0; >= 4.0.0.0, < 4.51.0.0 · CVE-2026-54148 · GHSA-p28p-j94q-pg32 · amended
- Medium, CVSS 6.5
http4k:
DigestAuthProvider.verifyignored configured algorithm and did not bind to request URIMaven org.http4k:http4k-security-digest · Upgrade to 6.50.0.0 or 5.42.0.0 by release line; some affected versions have no fix yet · >= 5.0.0.0, < 5.42.0.0; <= 4.48.2.0; >= 6.0.0.0, < 6.50.0.0 · CVE-2026-54147 · GHSA-vxxm-wwqh-mh47
- Medium, CVSS 6.1
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots
npm chrome-devtools-mcp · Upgrade to 1.1.0 or later · >= 0.24.0, <= 1.0.1 · CVE-2026-53766 · GHSA-8qf9-62x2-82pp
- Medium, CVSS 6.3
package pkcs12: Authentication bypass in Decode functions
Go software.sslmate.com/src/go-pkcs12 · Upgrade to 0.7.2 or later · >= 0.6.0, < 0.7.2 · GHSA-mpwr-8vm7-h73f · amended
- High, CVSS 7.5
docx4j: Stack Overflow via Cyclic
w:basedOnStyle Chain leads to Denial of ServiceMaven org.docx4j:docx4j-core · Upgrade to 11.5.14 or later · <= 11.5.13 · CVE-2026-53752 · GHSA-gc95-3vw8-vg43 · amended
- High, CVSS 7.5
http4k: Unbounded gzip decompression in
ServerFilters.GZip/RequestFilters.GunZipallowed memory-exhaustion DoSMaven org.http4k:http4k-core · Upgrade to 6.49.0.0 or 5.42.0.0 by release line; some affected versions have no fix yet · >= 5.0.0.0, < 5.42.0.0; <= 4.48.2.0; >= 6.0.0.0, < 6.49.0.0 · CVE-2026-53659 · GHSA-g4w2-6h2r-3m3w
- High, CVSS 8.7
atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard
PyPI atomic-agents-stack · Upgrade to 1.1.0 or later · <= 1.0.0 · GHSA-j659-8xh6-5pq5
- High, CVSS 8.7
atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)
PyPI atomic-agents-stack · Upgrade to 1.1.0 or later · <= 1.0.0 · GHSA-xhcr-cqfr-m3hv
- Medium, CVSS 6.5
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
Maven io.netty:netty-codec-http · Upgrade to 4.2.17.Final or 4.1.137.Final by release line · >= 4.2.0.Final, <= 4.2.16.Final; <= 4.1.136.Final · CVE-2026-59903 · GHSA-8c42-7qj2-3j46 · amended
- High, CVSS 7.5
Netty: Memory Exhaustion in SctpMessageCompletionHandler
Maven io.netty:netty-transport-sctp · Upgrade to 4.2.17.Final or 4.1.137.Final by release line · >= 4.2.0.Final, <= 4.2.16.Final; <= 4.1.136.Final · CVE-2026-59902 · GHSA-2qj4-mmr9-4v2f · amended
- High, CVSS 7.8
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
Go gitlab.com/uniget-org/cli · Upgrade to 0.28.9 or later · >= 0.27.4, < 0.28.9 · GHSA-fhgh-wq4q-r37x · amended
- High, CVSS 7.5
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
PyPI sqlparse · Upgrade to 0.6.0 or later · <= 0.5.6.dev0 · CVE-2026-59893 · GHSA-prg7-hcfm-mfcr
- High, CVSS 8.7
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
PyPI sqlparse · Upgrade to 0.6.0 or later · <= 0.5.5 · CVE-2026-54284 · GHSA-pwgv-4x5q-6m9f
- High, CVSS 8.7
Etherpad has stored XSS in HTML export via unescaped attribute-pool values
npm ep_etherpad-lite · Upgrade to 3.3.0 or later · <= 1.8.14 · CVE-2026-55090 · GHSA-2jp7-wwpg-3p9w · amended
- Unrated
Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling
npm ep_etherpad-lite · Upgrade to 3.3.0 or later · <= 1.8.14 · GHSA-92hr-gmr6-h8cp
- Medium, CVSS 6.9
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability
Go gitlab.com/uniget-org/cli · Upgrade to 0.27.6 or later · < 0.27.6 · CVE-2026-55062 · GHSA-m6jg-wr9m-cg2f · amended
- Medium, CVSS 6.9
uniget CLI has an EDITOR Command Injection
Go gitlab.com/uniget-org/cli · Upgrade to 0.27.6 or later · < 0.27.6 · CVE-2026-55061 · GHSA-qmcq-xw74-w667 · amended
- High, CVSS 7.5
vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass
npm vm2 · Upgrade to 3.11.6 or later · <= 3.11.5 · GHSA-v836-6xw4-9cx3
- Critical, CVSS 10.0
vm2: NodeVM
builtin: ['*']exposesosanddns— process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)npm vm2 · Upgrade to 3.11.6 or later · < 3.11.6 · CVE-2026-92960 · GHSA-m5w8-4gq2-6f8x · amended
- Critical, CVSS 9.8
vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
npm vm2 · Upgrade to 3.11.6 or later · <= 3.11.5 · CVE-2026-47698 · GHSA-cfcw-xp6x-25gj · amended
- Critical, CVSS 9.9
VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
npm vm2 · Upgrade to 3.11.6 or later · <= 3.11.5 · CVE-2026-47686 · GHSA-m283-3h24-438v · amended
- High, CVSS 8.7
vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
npm vm2 · Upgrade to 3.11.6 or later · <= 3.11.5 · CVE-2026-47683 · GHSA-gmc2-2x9w-cgh9
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.