High, CVSS 7.1
PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55540 · GHSA-ch89-h4r2-c8f8
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 941 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
2551–2575 of 30,910 matching · newest first
- Medium, CVSS 6.1
praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55530 · GHSA-cfxv-8fw8-rwpv
- High, CVSS 7.5
praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55524 · GHSA-vg6p-v9vm-6fgj
- High, CVSS 8.6
PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
PyPI praisonai · Upgrade to 4.6.58 or later · >= 4.6.34, < 4.6.58 · CVE-2026-55534 · GHSA-7ww9-85pg-cv4x
- High, CVSS 8.5
praisonaiagents has an SSRF protection bypass in
spider_tools._host_is_blocked()via DNS-resolved hostnames (127.0.0.1.nip.io)PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55526 · GHSA-x44h-65qv-cw74
- Medium, CVSS 6.5
PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55531 · GHSA-wv94-5qcp-6m36
- High, CVSS 8.2
praisonaiagents: AgentServer declares auth_token but never enforces it on any route
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55528 · GHSA-7g3p-92qq-8wvh
- Medium, CVSS 6.9
PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55529 · GHSA-wj6g-v78p-6fx3
- High, CVSS 7.7
praisonaiagents has a
web_crawlSSRF protection bypass via unchecked redirect targetsPyPI praisonaiagents · Upgrade to 1.6.58 or later · >= 1.5.128, < 1.6.58 · CVE-2026-55523 · GHSA-8hjw-25cg-g52h
- High, CVSS 7.8
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
PyPI praisonai · Upgrade to 4.6.58 or later · >= 3.9.26, < 4.6.58 · +1 more package · CVE-2026-55522 · GHSA-hxmv-c4g6-5fqc
- High, CVSS 7.5
praisonaiagents web_crawl vulnerable to SSRF via redirect-following
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55525 · GHSA-5r34-2g38-6569
- Medium, CVSS 6.9
vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
crates.io vibeio-http · Upgrade to 0.3.2 or later · < 0.3.2 · GHSA-fx4f-mhw4-qm7j · amended
- Medium, CVSS 6.9
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Go github.com/gorilla/websocket · Upgrade to 1.5.3 or later · < 1.5.3 · GHSA-w67g-5rqw-f597 · amended
- Low, CVSS 2.7
netfoil vulnerable to improper handling of untrusted DoH response data
Go github.com/tinfoil-factory/netfoil · Upgrade to 0.5.0 or later · < 0.5.0 · GHSA-4ph6-mjv7-3fq6 · amended
- Medium, CVSS 4.8
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
PyPI django-cms · Upgrade to 5.0.8 or later · < 5.0.8 · CVE-2026-54625 · GHSA-fwjf-m4qw-9f2x
- High, CVSS 7.1
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
PyPI django-cms · Upgrade to 5.0.8 or later · < 5.0.8 · CVE-2026-54623 · GHSA-8jj7-4v57-frf5
- Medium, CVSS 6.9
tokio-postgres: Panic on a
DataRowwith fewer fields than columns allows denial of servicecrates.io tokio-postgres · Upgrade to 0.7.18 or later · >= 0.4.0, < 0.7.18 · GHSA-3gjw-f78c-vvpw · amended
- Medium, CVSS 6.9
postgres-protocol: Panic decoding a malformed
hstorevalue allows denial of servicecrates.io postgres-protocol · Upgrade to 0.6.12 or later · < 0.6.12 · GHSA-rgqc-3x5p-6gwg · amended
- High, CVSS 8.7
postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
crates.io postgres-protocol · Upgrade to 0.6.12 or later · >= 0.3.0, < 0.6.12 · GHSA-5x78-73v4-xg6w · amended
- Medium, CVSS 6.5
Sakai Profile Image Deletion has an IDOR
Maven org.sakaiproject.profile2:profile2-api +1 · Upgrade all 2 to 23.5; some affected versions have no fix yet · >= 23.0, < 23.5; >= 25.0, <= 25.2 · CVE-2026-54050 · GHSA-9284-fjc3-fmmj · amended
- Critical, CVSS 10.0
mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
PyPI mcp-contextforge-gateway · Upgrade to 1.0.2 or later · <= 1.0.1 · CVE-2026-53710 · GHSA-xm98-3vcf-fph7 · amended
- Critical, CVSS 9.8
Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
Maven org.apache.camel:camel-undertow · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.11.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-78329 · GHSA-v7h8-xhh6-gfj4 · amended
- High, CVSS 7.5
Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result
Maven org.apache.camel:camel-google-storage · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.0.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-66907 · GHSA-f78g-9385-qxqj · amended
- Critical, CVSS 9.8
Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace
Maven org.apache.camel:camel-atmosphere-websocket · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.0.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-71300 · GHSA-m5r8-w65q-8wjf · amended
- Medium, CVSS 5.3
Apache Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy
Maven org.apache.camel:camel-knative · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 3.15.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-63621 · GHSA-vvwm-3j43-7pfm · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.