Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–25 of 46 matching · newest first
Packagist contao/contao +1 · Upgrade all 2 to 5.7.9 or 5.3.48 by release line · >= 5.3.35, < 5.3.48; >= 5.4.0, < 5.7.9 · CVE-2026-57232 · GHSA-87mg-5grr-rhwh · amended
PyPI social-auth-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2026-57179 · GHSA-vqg6-3fw6-j9jg · amended
PyPI social-auth-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2026-57178 · GHSA-3c93-f73f-qc9h · amended
PyPI social-auth-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2026-57177 · GHSA-x7qq-23vw-7pfg · amended
PyPI social-auth-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2026-57176 · GHSA-fp7w-m676-w7gc · amended
PyPI social-auth-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2026-57175 · GHSA-vq6g-g6c7-5f2j · amended
PyPI compliance-trestle · Upgrade to 4.1.0 or 3.12.4 by release line · < 3.12.4; >= 4.0.0, < 4.1.0 · CVE-2026-57171 · GHSA-r4vp-3vw6-r2x5 · amended
PyPI compliance-trestle · Upgrade to 4.1.0 or 3.12.4 by release line · < 3.12.4; >= 4.0.0, < 4.1.0 · CVE-2026-57170 · GHSA-mr95-65j8-9mxp · amended
/browser endpoint)npm cline · Upgrade to 3.0.30 or later · < 3.0.30 · CVE-2026-59723 · GHSA-3cj3-hqcr-g934 · amended
Packagist zbateson/mail-mime-parser · Upgrade to 4.0.2 or 3.0.6 by release line · < 3.0.6; >= 4.0.0, < 4.0.2 · CVE-2026-61815 · GHSA-36h5-qg4p-q2qf · amended
Packagist zbateson/mail-mime-parser · Upgrade to 4.0.2 or 3.0.6 by release line · >= 2.0.0, < 3.0.6; >= 4.0.0, < 4.0.2 · CVE-2026-61816 · GHSA-f6v3-2qmr-vfjx · amended
PyPI hpack · Upgrade to 4.2.0 or later · <= 4.1.0 · CVE-2026-59980 · GHSA-8v8h-hg4w-mvq2 · amended
npm @rsdoctor/rspack-plugin · Upgrade to 1.5.16 or later · <= 1.5.15 · CVE-2026-61782 · GHSA-jmg2-rcxh-w8q3 · amended
Go github.com/cilium/cilium · Upgrade to 1.19.5 or 1.17.17 by release line · < 1.17.17; >= 1.19.0, < 1.19.5 · +1 more package · CVE-2026-56742 · GHSA-w7c2-w76w-5hmj · amended
npm @bytebase/dbhub · Upgrade to 0.22.6 or later · < 0.22.6 · CVE-2026-61788 · GHSA-mwwr-p57h-56pf · amended
npm @bytebase/dbhub · Upgrade to 0.22.5 or later · <= 0.22.4 · CVE-2026-61742 · GHSA-fm8p-53ww-hf6w · amended
Maven org.http4s:http4s-scala-xml_2.12 · Upgrade to 0.24.1 or later · <= 0.24.0 · +2 more packages · CVE-2026-61741 · GHSA-cjx3-73hr-rpw7 · amended
npm xhtml-purifier · Upgrade to 0.4.3 or later · <= 0.4.1 · CVE-2026-61784 · GHSA-j8r4-32c5-33rc · amended
@bsv/wallet-toolbox / -client / -mobile don't verify storage-supplied recipient output scripts against caller-requested outputs in createActionnpm @bsv/wallet-toolbox +2 · Upgrade all 3 to 2.4.0 or later · >= 1.1.47, < 2.4.0 · CVE-2026-56744 · GHSA-36f9-7rg5-cpf8 · amended
StopWords::add() — Unescaped Stop Word InsertionPackagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.6 or later · <= 4.1.5 · CVE-2026-56738 · GHSA-rw77-vq4g-x3hp · amended
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.6 or later · >= 3.2.0, < 4.1.6 · CVE-2026-56737 · GHSA-8gpw-xvpf-hvx5 · amended
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.2.0-alpha (pre-release) or later · < 4.2.0-alpha · CVE-2026-56736 · GHSA-pgwp-vc7q-cvj3 · amended
PyPI langchain-nvidia-ai-endpoints · Upgrade to 1.4.2 or later · <= 1.4.1 · GHSA-g28h-2cmm-rj9x · amended
npm cyberchef · Upgrade to 11.2.0 or later · < 11.2.0 · CVE-2026-57439 · GHSA-fx6f-382r-j72c · amended
PyPI decepticon +2 · Upgrade all 3 to 1.1.17 or later · <= 1.1.16 · CVE-2026-61732 · GHSA-g5f9-3xfg-p9mf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.