High, CVSS 8.1
LiteLLM: internal_user_viewer arbitrary local file read via vertex_ai_credentials
PyPI litellm · Upgrade to 1.95.0 or later · < 1.95.0 · GHSA-g5ff-637f-6q2m · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
51–75 of 85 matching · newest first
LiteLLM: internal_user_viewer arbitrary local file read via
- Low, CVSS 3.7
@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
npm @better-auth/drizzle-adapter · Upgrade to 1.7.7 or later · >= 1.6.17, < 1.7.7 · +2 more packages · CVE-2026-110861 · GHSA-44jh-23m7-hpcf · amended
- High, CVSS 7.4
better-auth: OAuth Proxy lets an attacker sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.5.0-beta.12, < 1.7.7 · CVE-2026-110864 · GHSA-r4xp-prcw-77qf · amended
- Critical, CVSS 9.1
better-auth: OAuth state can be used as a Magic Link to sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.4.0-beta.18, < 1.7.7 · CVE-2026-114607 · GHSA-965c-763c-88jm · amended
- Medium, CVSS 6.8
LiteLLM vulnerable to reflected XSS in /sso/debug/callback
PyPI litellm · Upgrade to 1.85.0 or later · >= 1.65.5, < 1.85.0 · GHSA-hhww-mrg2-969h · amended
- High, CVSS 7.1
GitPython: arbitrary file read via attacker-controlled branch name in
Head.checkout()(incomplete fix of CVE-2026-78679)PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110859 · GHSA-23mf-xhv8-69c2 · amended
- Unrated
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110860 · GHSA-gq48-pqfc-9p58 · amended
- High, CVSS 8.1
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution
PyPI gitpython · Upgrade to 3.2.0 or later · >= 3.1.30, < 3.2.0 · CVE-2026-110858 · GHSA-f9j4-qggq-h239 · amended
- High, CVSS 7.5
GitPython command wrappers omit unsafe protocol and option checks
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110857 · GHSA-w8jc-g24h-crhw · amended
- Medium, CVSS 6.5
GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110855 · GHSA-fx3j-rwgx-fr94 · amended
- High, CVSS 8.7
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110856 · GHSA-m64x-33q8-m5h7 · amended
- Medium, CVSS 5.9
Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
npm nodemailer · Upgrade to 10.0.13 or later · >= 3.0.0, < 10.0.13 · CVE-2026-110869 · GHSA-4ffr-jq9g-5ffx · amended
- Medium, CVSS 5.3
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
npm nodemailer · Upgrade to 10.0.13 or later · >= 3.0.0, < 10.0.13 · CVE-2026-110870 · GHSA-g73g-hqqh-jr95 · amended
- Medium, CVSS 5.9
Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
npm nodemailer · Upgrade to 10.0.10 or later · >= 3.0.0, < 10.0.10 · CVE-2026-110872 · GHSA-4g23-2xm8-66gc · amended
- High, CVSS 7.7
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
PyPI litellm · Upgrade to 1.104.0rc2 (pre-release), 1.103.1, 1.102.2 or 2 more by release line · >= 1.91.0, < 1.100.4; >= 1.101.0, < 1.101.3; >= 1.102.0, < 1.102.2; >= 1.103.0, < 1.103.1; >= 1.104.0rc1, < 1.104.0rc2 · CVE-2026-114612 · GHSA-7hp6-4w63-5g45 · amended
- High, CVSS 7.5
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
PyPI msgpack · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2026-114613 · GHSA-j586-36cw-2gc2 · amended
- High, CVSS 8.6
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment
PyPI nltk · Upgrade to 3.10.4 or later · < 3.10.4 · CVE-2026-109956 · GHSA-j456-xh4h-cpf2 · amended
- Critical, CVSS 9.1
Authlib: empty signatures validation in JWS JSON deserialization
PyPI authlib · Upgrade to 1.9.0 or later · < 1.9.0 · CVE-2026-96760 · GHSA-6v38-4h7w-rj9h · amended
- High, CVSS 8.1
better-auth: Device login approval does not show the requesting client or permissions
npm better-auth · Upgrade to 1.7.0-rc.3 (pre-release) or later · >= 1.3.8-beta.3, < 1.7.0-rc.3 · CVE-2026-109346 · GHSA-q84f-53jg-9ppm · amended
- Medium, CVSS 5.4
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
PyPI pylint · Upgrade to 4.0.9 or later · < 4.0.9 · CVE-2026-114608 · GHSA-22qq-2fwx-7p67 · amended
- Medium, CVSS 5.3
Satori-generated SVG has improper escaping
npm satori · Upgrade to 0.33.5 or later · >= 0.0.27, < 0.33.5 · CVE-2026-94545 · GHSA-wx4j-mvgx-mqwp · amended
- High, CVSS 8.7
vllm p2p never connected zmq_exhaustion
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-94624 · GHSA-frvg-qw88-hww9 · amended
- High, CVSS 8.6
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
PyPI rembg · Upgrade to 2.0.82 or later · < 2.0.82 · CVE-2026-115924 · GHSA-qr6x-7v33-6qmg · amended
- Low, CVSS 3.1
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
PyPI twisted · Upgrade to 26.10.0rc1 (pre-release) or later · < 26.10.0rc1 · CVE-2026-83813 · GHSA-jj36-9pvh-vj5r · amended
- Medium, CVSS 6.5
Ghost: Authorization Bypass in Comment Like Feature
npm ghost · Upgrade to 6.44.1 or later · >= 5.9.0, < 6.44.1 · CVE-2026-103288 · GHSA-qrh6-cwg3-343x · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.