Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()
npm quasar · Upgrade to 2.22.0 or later · < 2.22.0 · CVE-2026-106102 · GHSA-pq96-jpmf-w254 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
126–138 of 138 matching · newest first
npm quasar · Upgrade to 2.22.0 or later · < 2.22.0 · CVE-2026-106102 · GHSA-pq96-jpmf-w254 · amended
npm @quasar/icongenie · Upgrade to 6.1.1 or later · < 6.1.1 · CVE-2026-106103 · GHSA-wmpw-j6qv-mw88 · amended
Go github.com/sipcapture/homer-app · Upgrade to 0.0.0-20260625085520-a7d027dc684b (pre-release) or later · < 0.0.0-20260625085520-a7d027dc684b · CVE-2026-62251 · GHSA-f46q-3v67-fmm4 · amended
Go github.com/sipcapture/homer-app · Upgrade to 0.0.0-20260625091610-b2e942031ff8 (pre-release) or later · < 0.0.0-20260625091610-b2e942031ff8 · CVE-2026-62252 · GHSA-6xp5-7rcx-xfgx · amended
Go github.com/sipcapture/homer-app · Upgrade to 0.0.0-20260625093330-5e90809657c9 (pre-release) or later · < 0.0.0-20260625093330-5e90809657c9 · CVE-2026-62253 · GHSA-rqcc-94gv-wjm9 · amended
PyPI praisonai · Upgrade to 4.6.78 or later · <= 4.6.77 · CVE-2026-62176 · GHSA-g6j7-pffp-8whg · amended
PyPI praisonai-platform · Upgrade to 0.1.9 or later · <= 0.1.8 · CVE-2026-62179 · GHSA-mxmx-rh57-jx58 · amended
Go github.com/grafana/grafana · Upgrade to 1.9.2-0.20260127141016-e702db6096e0 (pre-release) or later · < 1.9.2-0.20260127141016-e702db6096e0 · CVE-2026-21727 · GHSA-p5x9-j974-rpfp · amended
Go github.com/mudler/LocalAI · Upgrade to 1.40.1-0.20260703213242-2cbb3c96b34d (pre-release) or later · < 1.40.1-0.20260703213242-2cbb3c96b34d · CVE-2026-59707 · GHSA-8c5q-hx4g-qq23 · amended
Go golang.org/x/text · Upgrade to 0.41.0 or later · < 0.41.0 · CVE-2026-56851
PyPI praisonai · Upgrade to 4.6.78 or later · <= 4.6.77 · CVE-2026-61436 · GHSA-7c92-x8vg-4258 · amended
PyPI praisonai · Upgrade to 4.6.78 or later · <= 4.6.77 · CVE-2026-61428 · GHSA-qj9c-59p6-8cgx · amended
npm @actual-app/sync-server · Upgrade to 26.7.0 or later · <= 26.6.0 · CVE-2026-57449 · GHSA-m62c-5q34-f3cf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.