High, CVSS 8.1
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
PyPI vllm · Upgrade to 0.31.0 or later · >= 0.7.3, < 0.31.0 · CVE-2026-114053 · GHSA-h3rc-6mm3-gc2m · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 7.1
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
PyPI strands-agents · Upgrade to 1.48.0 or later · < 1.48.0 · GHSA-3w55-933p-8pv5 · amended
- High, CVSS 7.5
snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.9 or later · < 1.1.10.9 · CVE-2026-93451 · GHSA-gwq9-9ffj-mvrv · amended
- High, CVSS 7.5
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.9 or later · < 1.1.10.9 · CVE-2026-108106 · GHSA-q233-g92q-qxp6 · amended
- High, CVSS 7.1
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
PyPI flexible-graphrag · Upgrade to 0.8.2 or later · >= 0.6.0, < 0.8.2 · CVE-2026-114510 · GHSA-vqrg-773h-4wxc · amended
- High, CVSS 8.1
LiteLLM: internal_user_viewer arbitrary local file read via
vertex_ai_credentialsPyPI litellm · Upgrade to 1.95.0 or later · < 1.95.0 · GHSA-g5ff-637f-6q2m · amended
- High, CVSS 7.4
better-auth: OAuth Proxy lets an attacker sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.5.0-beta.12, < 1.7.7 · CVE-2026-110864 · GHSA-r4xp-prcw-77qf · amended
- Critical, CVSS 9.1
better-auth: OAuth state can be used as a Magic Link to sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.4.0-beta.18, < 1.7.7 · CVE-2026-114607 · GHSA-965c-763c-88jm · amended
- High, CVSS 7.1
GitPython: arbitrary file read via attacker-controlled branch name in
Head.checkout()(incomplete fix of CVE-2026-78679)PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110859 · GHSA-23mf-xhv8-69c2 · amended
- High, CVSS 8.1
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution
PyPI gitpython · Upgrade to 3.2.0 or later · >= 3.1.30, < 3.2.0 · CVE-2026-110858 · GHSA-f9j4-qggq-h239 · amended
- High, CVSS 7.5
GitPython command wrappers omit unsafe protocol and option checks
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110857 · GHSA-w8jc-g24h-crhw · amended
- High, CVSS 8.7
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110856 · GHSA-m64x-33q8-m5h7 · amended
- High, CVSS 7.7
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
PyPI litellm · Upgrade to 1.104.0rc2 (pre-release), 1.103.1, 1.102.2 or 2 more by release line · >= 1.91.0, < 1.100.4; >= 1.101.0, < 1.101.3; >= 1.102.0, < 1.102.2; >= 1.103.0, < 1.103.1; >= 1.104.0rc1, < 1.104.0rc2 · CVE-2026-114612 · GHSA-7hp6-4w63-5g45 · amended
- High, CVSS 7.5
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
PyPI msgpack · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2026-114613 · GHSA-j586-36cw-2gc2 · amended
- High, CVSS 8.6
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment
PyPI nltk · Upgrade to 3.10.4 or later · < 3.10.4 · CVE-2026-109956 · GHSA-j456-xh4h-cpf2 · amended
- Critical, CVSS 9.1
Authlib: empty signatures validation in JWS JSON deserialization
PyPI authlib · Upgrade to 1.9.0 or later · < 1.9.0 · CVE-2026-96760 · GHSA-6v38-4h7w-rj9h · amended
- High, CVSS 8.1
better-auth: Device login approval does not show the requesting client or permissions
npm better-auth · Upgrade to 1.7.0-rc.3 (pre-release) or later · >= 1.3.8-beta.3, < 1.7.0-rc.3 · CVE-2026-109346 · GHSA-q84f-53jg-9ppm · amended
- High, CVSS 8.7
vllm p2p never connected zmq_exhaustion
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-94624 · GHSA-frvg-qw88-hww9 · amended
- High, CVSS 8.6
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
PyPI rembg · Upgrade to 2.0.82 or later · < 2.0.82 · CVE-2026-115924 · GHSA-qr6x-7v33-6qmg · amended
- High, CVSS 8.2
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation
Maven com.google.guava:guava · Upgrade to 33.7.2 or later · >= 4.0, < 33.7.2 · CVE-2026-102554 · GHSA-xxph-c9ww-hj94 · amended
- High, CVSS 8.5
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
PyPI oauthlib · Upgrade to 4.0.1 or later · >= 3.3.0, < 4.0.1 · CVE-2026-49272 · GHSA-3jp2-3mrg-2vxc · amended
- Critical, CVSS 9.3
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
PyPI monai · Upgrade to 1.6.1 or later · < 1.6.1 · CVE-2026-48705 · GHSA-6hp3-vr39-rqw8 · amended
- High, CVSS 7.6
Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
Go github.com/wailsapp/wails/v2 · Upgrade to 2.13.0 or later · >= 2.0.0, < 2.13.0 · CVE-2026-34157 · GHSA-47hv-j4px-h3c9 · amended
- High, CVSS 8.8
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
Packagist dolibarr/dolibarr · Upgrade to 23.0.2 or 22.0.5 by release line · < 22.0.5; >= 23.0.0, < 23.0.2 · CVE-2026-33944 · GHSA-v5fq-cf5m-vwv7 · amended
- High, CVSS 8.1
Ajenti has potential Remote Code Execution
PyPI aj · Upgrade to 2.2.13 or later · < 2.2.13 · CVE-2026-27975 · GHSA-vcw3-r3fx-j444 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.