mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control
npm @insumermodel/mppx-condition-gate · Upgrade to 3.0.0 or later · <= 2.0.3 · +1 more package · CVE-2026-104891 · GHSA-jg6q-3qfh-r9f8 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
76–100 of 138 matching · newest first
npm @insumermodel/mppx-condition-gate · Upgrade to 3.0.0 or later · <= 2.0.3 · +1 more package · CVE-2026-104891 · GHSA-jg6q-3qfh-r9f8 · amended
npm @backstage/plugin-techdocs-node · Upgrade to 1.15.4 or later · < 1.15.4 · CVE-2026-106510 · GHSA-4488-j8vj-vqqv · amended
npm @backstage/plugin-techdocs-node · Upgrade to 1.15.4 or later · < 1.15.4 · CVE-2026-106558 · GHSA-qmw3-745m-w99g · amended
npm @backstage/plugin-scaffolder-backend-module-confluence-to-markdown · Upgrade to 0.3.25 or later · < 0.3.25 · CVE-2026-106559 · GHSA-75qf-886x-5xf2 · amended
npm @backstage/plugin-scaffolder-backend-module-confluence-to-markdown · Upgrade to 0.3.25 or later · < 0.3.25 · CVE-2026-106560 · GHSA-2cmg-v53w-8xfp · amended
npm @backstage/plugin-search-backend · Upgrade to 2.1.6 or later · < 2.1.6 · +1 more package · CVE-2026-106562 · GHSA-9325-vq29-gp3v · amended
npm @backstage/plugin-kubernetes-backend · Upgrade to 0.21.8 or later · < 0.21.8 · CVE-2026-106563 · GHSA-r9ph-3637-55px · amended
npm @backstage/plugin-kubernetes-backend · Upgrade to 0.21.9 or later · < 0.21.9 · CVE-2026-106561 · GHSA-p795-mqf2-36mf · amended
npm @backstage/plugin-scaffolder-backend-module-bitbucket-cloud · Upgrade to 0.3.10 or later · < 0.3.10 · +5 more packages · CVE-2026-106462 · GHSA-29gx-h2m3-xw44 · amended
npm @backstage/plugin-catalog-backend-module-gitlab · Upgrade to 0.8.7 or later · < 0.8.7 · CVE-2026-106463 · GHSA-gp6m-x9vw-5c5x · amended
npm @backstage/plugin-scaffolder-backend-module-bitbucket-cloud · Upgrade to 0.3.10 or later · < 0.3.10 · +1 more package · CVE-2026-106486 · GHSA-g8rx-f7m5-7794 · amended
npm @backstage/plugin-kubernetes-backend · Upgrade to 0.21.10 or later · < 0.21.10 · CVE-2026-106487 · GHSA-h53x-hjx6-25gr · amended
npm @backstage/plugin-auth-backend-module-oidc-provider · Upgrade to 0.4.20 or later · < 0.4.20 · CVE-2026-106488 · GHSA-826h-28h9-65hg · amended
npm @backstage/plugin-techdocs-backend · Upgrade to 2.2.4 or later · < 2.2.4 · CVE-2026-106489 · GHSA-rg9r-hr7g-5gc2 · amended
npm @backstage/plugin-techdocs-backend · Upgrade to 2.2.4 or later · < 2.2.4 · CVE-2026-106490 · GHSA-7mfx-xg57-53c9 · amended
npm @backstage/backend-defaults · Upgrade to 0.17.8 or later · < 0.17.8 · +2 more packages · CVE-2026-106493 · GHSA-xvh9-35w9-42m4 · amended
npm @backstage/plugin-proxy-backend · Upgrade to 0.6.17 or later · < 0.6.17 · CVE-2026-106491 · GHSA-9ghw-48h5-v2w5 · amended
npm @backstage/backend-defaults · Upgrade to 0.17.8 or later · < 0.17.8 · CVE-2026-106492 · GHSA-cq7v-rfgc-5c7v · amended
npm @backstage/backend-defaults · Upgrade to 0.17.8 or later · < 0.17.8 · CVE-2026-106494 · GHSA-7649-wm97-w3j3 · amended
npm @backstage/plugin-catalog-backend · Upgrade to 3.9.1 or later · < 3.9.1 · CVE-2026-106496 · GHSA-pcmq-25r3-5w9v · amended
npm @backstage/plugin-catalog-backend · Upgrade to 3.9.1 or later · < 3.9.1 · CVE-2026-106498 · GHSA-qgvj-qcf8-xq73 · amended
npm @backstage/plugin-scaffolder-backend · Upgrade to 4.1.0, 4.0.3, 3.4.1 or 3.3.1 by release line · < 3.3.1; >= 3.4.0, < 3.4.1; >= 4.0.0, < 4.0.3; >= 4.0.4, < 4.1.0 · CVE-2026-106501 · GHSA-g2v8-7jhw-pp8p · amended
npm @backstage/plugin-scaffolder-backend · Upgrade to 4.1.0 or later · < 4.1.0 · CVE-2026-106499 · GHSA-mfvq-x7vr-rgqg · amended
npm @backstage/plugin-scaffolder-backend · Upgrade to 4.1.0, 4.0.3, 3.4.1 or 3.3.1 by release line · < 3.3.1; >= 3.4.0, < 3.4.1; >= 4.0.0, < 4.0.3; >= 4.0.4, < 4.1.0 · CVE-2026-106503 · GHSA-hmp2-4m7g-22cv · amended
npm @backstage/plugin-scaffolder-backend · Upgrade to 4.1.0 or later · < 4.1.0 · CVE-2026-106500 · GHSA-xvgh-hmx8-9xxf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.