Medium, CVSS 6.5
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115916 · GHSA-q97c-p368-75c4 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
26–50 of 93 matching · newest first
- Medium, CVSS 6.5
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
PyPI vllm · Upgrade to 0.32.0 or later · >= 0.16.0, < 0.32.0 · CVE-2026-115918 · GHSA-x567-49g5-p4cf · amended
- Medium, CVSS 6.5
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
PyPI vllm · Upgrade to 0.32.0 or later · >= 0.19.0, < 0.32.0 · CVE-2026-115911 · GHSA-542m-9234-8gvf · amended
- Low, CVSS 3.3
systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net
npm systeminformation · Upgrade to 5.33.14 or later · < 5.33.14 · CVE-2026-116673 · GHSA-4vjg-vx72-qq4g · amended
- Medium, CVSS 6.5
systeminformation has prototype pollution in
networkStats()via the interface namenpm systeminformation · Upgrade to 5.33.13 or later · < 5.33.13 · CVE-2026-116674 · GHSA-7648-jmwf-vw7j · amended
- Medium, CVSS 4.1
LangGraph CLI prints the registry push token in
langgraph deploy --verboseoutputPyPI langgraph-cli · Upgrade to 0.4.32 or later · >= 0.4.15, < 0.4.32 · CVE-2026-115885 · GHSA-8prr-f582-jqq3 · amended
- High, CVSS 7.5
graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
npm graphql-scalars · Upgrade to 2.0.1 or later · >= 1.24.1, < 2.0.1 · CVE-2026-115887 · GHSA-x8rm-f576-gq67 · amended
- Medium, CVSS 5.9
Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
PyPI autobahn · Upgrade to 26.10.1 or later · >= 26.7.1, < 26.10.1 · CVE-2026-116579 · GHSA-pjh6-c8mg-3x7m · amended
- Low, CVSS 3.7
i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string
npm i18next-http-backend · Upgrade to 4.0.4 or later · < 4.0.4 · CVE-2026-118258 · GHSA-3cmx-xjww-583x · amended
- High, CVSS 7.5
RE2JS: Quadratic-time denial of service in re2js lookbehind matching
npm re2js · Upgrade to 2.8.7 or later · >= 2.2.0, < 2.8.7 · CVE-2026-116795 · GHSA-gg6h-894w-4m9c · amended
- Critical, CVSS 9.4
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
crates.io zip · Upgrade to 9.0.5 or later · < 9.0.5 · CVE-2026-115905 · GHSA-m665-v7pm-7grj · amended
- High, CVSS 8.6
LangGraph JavaScript custom authentication may permit cross-user Store access
PyPI langgraph-api · Upgrade to 0.15.0 or later · >= 0.1.2, < 0.15.0 · CVE-2026-118668 · GHSA-4hm6-w6qq-w73v · amended
- Low, CVSS 3.3
filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock
PyPI filelock · Upgrade to 4.2.1 or later · >= 4.1.0, < 4.2.1 · CVE-2026-112941 · GHSA-wfhq-q4j2-c37m · amended
- Medium, CVSS 5.3
filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.30.0, < 4.2.1 · CVE-2026-112908 · GHSA-6627-m3xw-93mp · amended
- Medium, CVSS 6.3
filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.30.0, < 4.2.1 · CVE-2026-112911 · GHSA-9c4x-gm8v-wgc4 · amended
- Medium, CVSS 5.3
filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.10.0, < 4.2.1 · CVE-2026-112910 · GHSA-8mx5-7m5m-r77g · amended
- Medium, CVSS 5.5
filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.20.4, < 4.2.1 · CVE-2026-112915 · GHSA-cwqr-hh33-gh44 · amended
- Medium, CVSS 4.7
filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.22.0, < 4.2.1 · CVE-2026-112939 · GHSA-rfpc-qcw5-3pc4 · amended
- Low, CVSS 2.5
filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.32.6, < 4.2.1 · CVE-2026-112912 · GHSA-9j6q-wvj5-jgjg · amended
- Medium, CVSS 6.1
filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path
PyPI filelock · Upgrade to 4.2.1 or later · < 4.2.1 · CVE-2026-112909 · GHSA-69hj-f68j-2879 · amended
- Medium, CVSS 6.1
filelock: ReadWriteLock follows a symlink at the lock path into SQLite
PyPI filelock · Upgrade to 4.0.9 or later · >= 3.20.4, < 4.0.9 · CVE-2026-112936 · GHSA-j8f7-rjxc-mr56 · amended
- Medium, CVSS 5.8
filelock: StrictSoftFileLock follows a symbolic link swapped in at .filelock and creates claim files in a directory another local user chooses
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.30.0, < 4.2.1 · CVE-2026-112938 · GHSA-m462-7rxw-wvpg · amended
- Medium, CVSS 6.1
filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record
PyPI filelock · Upgrade to 4.2.1 or later · >= 4.0.0, < 4.2.1 · CVE-2026-112934 · GHSA-fj95-fr6c-h845 · amended
- Medium, CVSS 4.7
filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.22.0, < 4.2.1 · CVE-2026-112935 · GHSA-fq56-3cx3-fjxp · amended
- Low, CVSS 3.1
i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)
npm i18next-http-backend · Upgrade to 4.0.3 or later · < 4.0.3 · CVE-2026-115730 · GHSA-9jhj-wvmw-cfx5 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.