Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution
Maven eu.copernik:copernik-xml-factory · Upgrade to 0.1.2 or later · < 0.1.2 · CVE-2026-61586 · GHSA-xm28-xvqc-gxxg · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven eu.copernik:copernik-xml-factory · Upgrade to 0.1.2 or later · < 0.1.2 · CVE-2026-61586 · GHSA-xm28-xvqc-gxxg · amended
crates.io wasmtime · Upgrade to 49.0.2 or 48.0.4 by release line · >= 39.0.0, < 48.0.4; >= 49.0.0, < 49.0.2 · CVE-2026-115384 · GHSA-32h6-97mm-8q3c · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.