virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
PyPI virtualenv +1 · Upgrade all 2 to 21.14.4 or later · < 21.14.4 · CVE-2026-113726 · GHSA-5vjq-rrrf-7h2q · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
51–65 of 65 matching · newest first
PyPI virtualenv +1 · Upgrade all 2 to 21.14.4 or later · < 21.14.4 · CVE-2026-113726 · GHSA-5vjq-rrrf-7h2q · amended
PyPI virtualenv +1 · Upgrade all 2 to 21.14.2 or later · < 21.14.2 · CVE-2026-113732 · GHSA-c947-3pg5-gm8q · amended
PyPI virtualenv +1 · Upgrade all 2 to 21.14.2 or later · >= 20.26.6, < 21.14.2 · CVE-2026-113776 · GHSA-8rjx-v5ww-45pp · amended
crates.io slack-morphism · Upgrade to 2.28.0 or later · >= 1.0.0, <= 2.27.0 · CVE-2026-113799 · GHSA-26w4-8w32-4x3v · amended
Maven ognl:ognl · Upgrade to 3.4.13 or later · < 3.4.13 · CVE-2026-113730 · GHSA-crwc-vw2r-qr6m · amended
Go github.com/openchoreo/openchoreo · Upgrade to 1.2.5, 1.1.7 or 1.0.6 by release line · >= 1.0.0, < 1.0.6; >= 1.1.0, < 1.1.7; >= 1.2.0, < 1.2.5 · CVE-2026-113727 · GHSA-46r4-q7wv-32fc · amended
Go github.com/moov-io/signedxml · Upgrade to 1.4.1 or later · < 1.4.1 · CVE-2026-113729 · GHSA-5588-rp99-5fjh · amended
PyPI pydantic-ai-harness · Upgrade to 0.59.0 or later · < 0.59.0 · CVE-2026-114386 · GHSA-3589-pxp7-3gj8 · amended
npm @apostrophecms/import-export · Upgrade to 3.7.0 or later · < 3.7.0 · +1 more package · CVE-2026-113711 · GHSA-86wm-68pq-5jwq · amended
Bitnami seaweedfs · Upgrade to 4.41.0 or later · >= 4.0.388, < 4.41.0 · CVE-2026-100413 · GHSA-hqp5-j79g-vr89
PyPI vllm · Upgrade to 0.31.0 or later · < 0.31.0 · CVE-2026-114054 · GHSA-rh6f-3x46-j33q
PyPI vllm · Upgrade to 0.31.0 or later · >= 0.24.0, < 0.31.0 · CVE-2026-114052 · GHSA-823j-m4cj-hmjf
crates.io rustls-webpki · Upgrade to 0.104.0-alpha.8 (pre-release) or 0.103.16 by release line · >= 0.0.0-0, < 0.103.16; >= 0.104.0-alpha.1, < 0.104.0-alpha.8 · +4 more packages · CVE-2026-111943 · amended
Bitnami node-min +2 · Upgrade all 3 to 26.12.1 or later · >= 25.0.0, < 26.12.1 · CVE-2026-106071 · amended
runtime node +2 · Upgrade all 3 to 26.12.1 or later · >= 26.0.0, < 26.12.1 · CVE-2026-106070 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.