Critical, CVSS 9.4
MCP Toolbox for Databases has an Origin Validation Error
Go github.com/googleapis/genai-toolbox +1 · Upgrade all 2 to 0.25.0 or later · < 0.25.0 · CVE-2026-11624 · GHSA-76g7-m3xw-x9gr · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
1–25 of 54 matching · newest first
- Medium, CVSS 5.3
JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login
PyPI jupyterhub · Upgrade to 5.5.0 or later · < 5.5.0 · CVE-2026-54338 · GHSA-p43p-whwx-q52h
- High, CVSS 7.5
icalendar has Algorithmic Complexity in Equality
PyPI icalendar · Upgrade to 7.1.3 or later · >= 7.1.0, < 7.1.3 · CVE-2026-55099 · GHSA-cv84-9p8j-fj68
- High, CVSS 7.2
Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access
PyPI chainlit · Upgrade to 2.12.0 or later · >= 2.4.0rc0, < 2.12.0 · CVE-2026-45019 · GHSA-hvfh-5mj3-5f3j · amended
- Critical, CVSS 9.8
Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution
PyPI chainlit · Upgrade to 2.12.0 or later · >= 2.4.0rc0, <= 2.11.1 · CVE-2026-45018 · GHSA-w3fx-mc44-mf6j · amended
- Medium, CVSS 5.3
@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint
npm @arikusi/deepseek-mcp-server · Upgrade to 1.8.0 or later · >= 1.4.2, < 1.8.0 · CVE-2026-55605 · GHSA-72f3-6w86-7rv3
- High, CVSS 8.6
@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
npm @arikusi/deepseek-mcp-server · Upgrade to 1.7.0 or later · >= 1.4.2, < 1.7.0 · CVE-2026-55604 · GHSA-fh3r-g96v-f578
- High, CVSS 7.1
consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
npm consciousness-explorer · Upgrade to 1.1.2 or later · < 1.1.2 · +1 more package · CVE-2026-55609 · GHSA-xc9g-j69q-37xw
- High, CVSS 8.7
Whistle vulnerable to path traversal
npm whistle · Upgrade to 2.10.3 or later · < 2.10.3 · CVE-2026-55629 · GHSA-3vfr-4gwf-qxfp
- High, CVSS 7.5
eml_parser vulnerable to DoS via deeply nested parens in Received headers
PyPI eml-parser · Upgrade to 3.0.2 or later · < 3.0.2 · CVE-2026-55620 · GHSA-g7gc-gmgp-wgqg
- Medium, CVSS 5.3
eml_parser has parser DoS via deeply nested parentheses in e-mail headers
PyPI eml-parser · Upgrade to 3.0.2 or later · < 3.0.2 · CVE-2026-55619 · GHSA-m66c-fw79-6359
- Medium, CVSS 6.5
eml_parser has a URL extraction bypass via HTML entities in URLs
PyPI eml-parser · Upgrade to 3.0.2 or later · < 3.0.2 · CVE-2026-55618 · GHSA-fxgq-9m89-cxj9
- Medium, CVSS 5.6
mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
crates.io mediasoup · Upgrade to 0.22.5 or later · >= 0.22.0, <= 0.22.4 · +1 more package · CVE-2026-55663 · GHSA-p7x2-g5cq-fhmq · amended
- High, CVSS 8.8
genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport
Go github.com/geiserx/genieacs-mcp · Upgrade to 0.3.2 or later · <= 0.3.1 · CVE-2026-55637 · GHSA-cmwv-wf9p-p8wx · amended
- Unrated
mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in
PromptService._render_templatevia unsandboxed Jinja2 EnvironmentPyPI mcp-contextforge-gateway · Upgrade to 1.0.0 or later · < 1.0.0 · GHSA-vwf3-4xxj-qg6h
- Medium, CVSS 5.3
reachy_mini Allows Unrestricted Upload of File with Dangerous Type
PyPI reachy-mini · Upgrade to 1.8.2 or later · < 1.8.2 · CVE-2026-55419 · GHSA-m2pc-3q4q-w6jr
- High, CVSS 7.0
Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts
Go github.com/aquasecurity/trivy · Upgrade to 0.71.1 or later · < 0.71.1 · CVE-2026-55092 · GHSA-mcj4-mphf-j9ff · amended
- High, CVSS 8.8
phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.5 or later · <= 4.1.4 · CVE-2026-57995 · GHSA-pg62-f8g4-4wqh · amended
- Medium, CVSS 5.3
phpMyFAQ public FAQ APIs expose inactive FAQ content
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.5 or later · >= 4.1.0, <= 4.1.4 · CVE-2026-57994 · GHSA-mf8r-wm2w-f8c5 · amended
- Medium, CVSS 4.9
phpMyFAQ has Potential Authenticated Path Traversal in PDF Export
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.5 or later · >= 4.0.0-alpha, <= 4.1.4 · CVE-2026-57961 · GHSA-88g4-74f3-63x9 · amended
- High, CVSS 8.7
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
npm @platejs/media · Upgrade to 53.1.4 or later · >= 53.0.0, < 53.1.4 · CVE-2026-55596 · GHSA-qj6x-xx2h-8hvv
- High, CVSS 8.6
browse-mcp has an arbitrary file write via unconfined download and state paths
npm browse-mcp · Upgrade to 0.8.2 or later · <= 0.8.1 · CVE-2026-55557 · GHSA-m9mq-7m7q-xc6p
- High, CVSS 8.8
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy
parse_expr()PyPI qwed · Upgrade to 5.1.2 or later · < 5.1.2 · CVE-2026-55585 · GHSA-q27q-98j4-9pfv
- High, CVSS 7.5
urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
npm urllib · Upgrade to 4.9.1 or 2.44.1 by release line · >= 3.0.0, <= 4.9.0; <= 2.44.0 · CVE-2026-55553 · GHSA-hq3h-g68c-hp78
- High, CVSS 8.2
djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls
PyPI djust · Upgrade to 1.0.4 or later · < 1.0.4 · CVE-2026-55571 · GHSA-xx4j-w367-7247
A vendor fix does not resolve your finding until you verify it in your own systems.