Low, CVSS 3.7
msgpack5: Decoding negative int64 values mutates the input buffer
npm msgpack5 · Upgrade to 6.1.0 or later · < 6.1.0 · CVE-2026-107296 · GHSA-qw35-55vc-rhgj · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
76–100 of 104 matching · newest first
- Unrated
PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
PyPI praisonai · Upgrade to 4.6.78 or later · <= 4.6.77 · CVE-2026-60090 · GHSA-wf65-4jjx-q444 · amended
- Medium, CVSS 6.4
Pydantic AI Web chat UI (
Agent.to_web(),clai web): the local chat endpoint does not validate theHostheaderPyPI pydantic-ai +1 · Upgrade all 2 to 2.30.0 or 1.107.5 by release line · >= 1.34.0, < 1.107.5; >= 2.0.0b1, < 2.30.0 · CVE-2026-107292 · GHSA-q2xc-rrxj-58x9 · amended
- High, CVSS 7.6
Pydantic AI Web chat UI (
Agent.to_web(),clai web): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointPyPI pydantic-ai +1 · Upgrade all 2 to 2.28.0 or 1.107.4 by release line · >= 1.34.0, < 1.107.4; >= 2.0.0b1, < 2.28.0 · CVE-2026-107295 · GHSA-h4xc-3qfq-jf93 · amended
- Low, CVSS 2.3
Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when
include_content=FalsePyPI pydantic-ai +1 · Upgrade all 2 to 2.27.1 or 1.107.4 by release line · >= 0.3.4, < 1.107.4; >= 2.0.0b1, < 2.27.1 · CVE-2026-107293 · GHSA-3gh4-cghq-f8v4 · amended
- Medium, CVSS 6.5
Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
PyPI pydantic-ai +1 · Upgrade all 2 to 2.24.0 or 1.107.2 by release line · >= 1.77.0, < 1.107.2; >= 2.0.0b1, <= 2.23.0 · CVE-2026-107294 · GHSA-v2xh-2vp8-57h8 · amended
- High, CVSS 8.7
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element
Go github.com/xuri/excelize/v2 · Upgrade to 2.11.1-0.20260929015830-8ffeb07ec9a3 (pre-release) or later · >= 2.9.0, < 2.11.1-0.20260929015830-8ffeb07ec9a3 · CVE-2026-107213 · GHSA-r7x5-4969-99p7 · amended
- Medium, CVSS 6.8
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.1.0, <= 2.16.1 · CVE-2026-107228 · GHSA-2jwh-9rmr-j4xf · amended
- Medium, CVSS 6.8
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.1.0, <= 2.16.1 · CVE-2026-107226 · GHSA-p2jm-6hj6-9rjg · amended
- High, CVSS 7.5
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.2.0, <= 2.16.1 · CVE-2026-107227 · GHSA-x8v2-478q-2hvg · amended
- High, CVSS 7.4
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, < 3.0.14; >= 2.0.0, <= 2.16.1 · CVE-2026-107230 · GHSA-v2j5-22fr-j62r · amended
- High, CVSS 8.1
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61443 · GHSA-c44f-37qr-gw3f · amended
- High, CVSS 7.8
PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61437 · GHSA-4gfv-wg42-7jw5 · amended
- Medium, CVSS 5.7
PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61432 · GHSA-4xxv-6wmf-xf45 · amended
- Medium, CVSS 6.5
Pydantic AI: Event loop blocked by quadratic title extraction in
web_fetchPyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 1.77.0, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107290 · GHSA-fpf4-vwcp-v4hp · amended
- Low, CVSS 2.3
Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when
include_content=FalsePyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 0.3.4, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107291 · GHSA-4x9p-g9wm-8q7f · amended
- Medium, CVSS 6.8
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers
PyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 1.56.0, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107289 · GHSA-vmxc-h2x2-jmf3 · amended
- High, CVSS 8.4
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61446 · GHSA-m6wp-h223-4c8g · amended
- Critical, CVSS 10.0
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61447 · GHSA-2xv2-w8cq-5gxw · amended
- Medium, CVSS 6.1
PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-60087 · GHSA-29r9-67vg-qj56 · amended
- High, CVSS 8.5
PraisonAI: DNS rebinding bypass in
web_crawlSSRF protection allows internal response disclosurePyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61430 · GHSA-qg25-6gc4-48mg · amended
- Medium, CVSS 6.9
PraisonAI: Project config can auto-save agent output outside the project root
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-60089 · GHSA-qjw5-xwrp-xwpq · amended
- High, CVSS 7.5
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
Go github.com/xuri/excelize/v2 · Upgrade to 2.11.1-0.20260911060113-ea12859e43c6 (pre-release) or later · >= 2.8.1, < 2.11.1-0.20260911060113-ea12859e43c6 · CVE-2026-107216 · GHSA-wp2g-vpjj-g53r · amended
- Low, CVSS 3.7
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.12 or 2.16.1 by release line · >= 3.0.0, <= 3.0.11; >= 2.0.0, <= 2.16.0 · CVE-2026-107283 · GHSA-mfj3-87qq-382v · amended
- Medium, CVSS 5.9
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.12 or 2.16.1 by release line · >= 3.0.0, <= 3.0.11; >= 2.0.0, <= 2.16.0 · CVE-2026-107285 · GHSA-3wp9-xfwm-rjjf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.