ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions
Go github.com/zitadel/zitadel · Upgrade to 4.16.0 or later · < 4.16.0 · CVE-2026-76081 · GHSA-v859-c572-qh5p · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–9 of 9 matching · newest first
Go github.com/zitadel/zitadel · Upgrade to 4.16.0 or later · < 4.16.0 · CVE-2026-76081 · GHSA-v859-c572-qh5p · amended
Go github.com/zitadel/zitadel · Upgrade to 4.15.3 or later · < 4.15.3 · CVE-2026-56668 · GHSA-vrh8-c9cm-wh8v · amended
PyPI esphome-device-builder · Upgrade to 1.0.12 or later · < 1.0.12 · CVE-2026-59178 · GHSA-rrxg-g2pf-6hh4 · amended
Packagist october/october · Upgrade to 4.3.5 or later · >= 4.3.0, < 4.3.5 · CVE-2026-100909 · GHSA-2xmm-m4wv-3fjh
Packagist october/system · Upgrade to 4.2.23 or 3.7.17 by release line · < 3.7.17; >= 4.0.0, < 4.2.23 · CVE-2026-49400 · GHSA-2ff2-mx52-q8wp · amended
Packagist october/system · Upgrade to 4.2.23 or 3.7.17 by release line · < 3.7.17; >= 4.0.0, < 4.2.23 · CVE-2026-46696 · GHSA-xv9m-fm3w-8w5x · amended
crates.io quinn-proto · Upgrade to 0.11.18 or later · >= 0.11.0, < 0.11.18 · GHSA-3g6h-r5qx-f6hq
crates.io quinn-proto · Upgrade to 0.11.18 or later · >= 0.7.0, < 0.11.18 · GHSA-465w-v9q3-7j98
crates.io quinn-proto · Upgrade to 0.11.18 or later · >= 0.11.17, < 0.11.18 · GHSA-ppcp-v39w-8jq2
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.