kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items
Go github.com/getkin/kin-openapi · Upgrade to 0.143.0 or later · >= 0.136.0, < 0.143.0 · CVE-2026-97394 · GHSA-p6wj-qrr4-pgh5 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–47 of 47 matching · newest first
Go github.com/getkin/kin-openapi · Upgrade to 0.143.0 or later · >= 0.136.0, < 0.143.0 · CVE-2026-97394 · GHSA-p6wj-qrr4-pgh5 · amended
Packagist leantime/leantime · Upgrade to 3.10.0 or later · < 3.10.0 · CVE-2026-85990 · GHSA-54mm-6729-r5wp · amended
Go github.com/dunglas/frankenphp · Upgrade to 1.12.5 or later · <= 1.12.4 · CVE-2026-82416 · GHSA-v3ph-cgqh-r8p5 · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84360 · GHSA-vc32-4gwf-77xp · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84321 · GHSA-wq4w-vwvq-q3x9 · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84316 · GHSA-cf23-7qxj-xmhr · amended
PyPI mcp · Upgrade to 2.2.0 or 1.30.0 by release line · >= 1.8.0, < 1.30.0; >= 2.0.0, < 2.2.0 · CVE-2026-59951 · GHSA-84m7-p3x7-pcfv · amended
Packagist yourls/yourls · Upgrade to 1.10.5 or later · <= 1.10.4 · CVE-2026-62858 · GHSA-f8ff-652m-j5rx · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84315 · GHSA-5v7c-xpfp-p65m · amended
RequireSecureSession on User Management EndpointGo github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84314 · GHSA-2gc7-j998-5xx6 · amended
nginx_config_add Bypasses Directive Validation — Authenticated RCEGo github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · >= 1.9.10-0.20250506154222-1330888280a2, < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84318 · GHSA-9jww-cxg5-rj9m · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84317 · GHSA-76pm-mq2q-9gcr · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260715121709-f92218e01054 (pre-release) or later · < 1.9.10-0.20260715121709-f92218e01054 · CVE-2026-84320 · GHSA-jrq7-xrjx-pcfw · amended
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20260703131214-23d1934099b0 (pre-release) or later · < 1.9.10-0.20260703131214-23d1934099b0 · CVE-2026-84319 · GHSA-5r62-gj48-897x · amended
Packagist react/http · Upgrade to 1.11.1 or later · >= 1.0.0, <= 1.11.0 · CVE-2026-104827 · GHSA-g4f2-2pf3-2pwj · amended
npm @adonisjs/http-server · Upgrade to 9.1.1 or 8.2.2 by release line · >= 9.0.0, < 9.1.1; <= 8.2.1 · CVE-2026-104150 · GHSA-524c-h47v-m3h8 · amended
Maven com.github.junrar:junrar · Upgrade to 7.6.1 or later · <= 7.6.0 · CVE-2026-97370 · GHSA-h9h9-2rmf-rvhp · amended
Go github.com/bishopfox/sliver +1 · Upgrade all 2 to 1.7.6 or later · < 1.7.6 · CVE-2026-77622 · GHSA-663m-7x7m-g4fw · amended
PyPI borgbackup · Upgrade to 2.0.0b22 (pre-release) or 1.4.5 by release line · < 1.4.5; >= 2.0.0b1, < 2.0.0b22 · CVE-2026-62268 · GHSA-gfp8-w835-v44j · amended
PyPI social-auth-core · Upgrade to 5.0.2 or later · < 5.0.2 · CVE-2026-62322 · GHSA-526j-582w-7fm9 · amended
NuGet messagepack · Upgrade to 3.1.9 or 2.5.303 by release line · < 2.5.303; >= 3.0.0, < 3.1.9 · CVE-2026-92707 · GHSA-qhrr-8q5h-9q3h · amended
Go github.com/gruntwork-io/terragrunt · Upgrade to 1.1.1 or later · < 1.1.1 · CVE-2026-64672 · GHSA-wv6g-x823-wx9m · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.