Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 944 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

2601–2625 of 30,921 matching · newest first

ExploitedClear filters

Critical, CVSS 10.021 Aug 2026
Xinference vulnerable to remote code execution via unsafe eval() in Llama3 tool-call parsing
PyPI xinference · Upgrade to 2.7.0 or later · <= 2.5.0 · CVE-2026-61539 · GHSA-x2rj-828p-hx9m · amended
21 Aug 2026Evidence →
Critical, CVSS 9.221 Aug 2026
Phalcon Volt compiler join filter compile-time PHP code injection (SSTI leads to RCE)
Packagist phalcon/cphalcon · Upgrade to 5.16.0 or later · <= 5.15.0 · CVE-2026-59989 · GHSA-hrwp-4hh9-c8r8 · amended
21 Aug 2026Evidence →
High, CVSS 7.521 Aug 2026
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
Go github.com/getkin/kin-openapi · Upgrade to 0.141.0 or later · >= 0.10.0, < 0.141.0 · CVE-2026-76905 · GHSA-mmfr-pmjx-hw9w · amended
21 Aug 2026Evidence →
High, CVSS 8.121 Aug 2026
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
Go github.com/runatlantis/atlantis · Upgrade to 0.45.0 or later · >= 0.19.8, < 0.45.0 · CVE-2026-64679 · GHSA-26w5-6g95-gj28 · amended
21 Aug 2026Evidence →
High, CVSS 7.521 Aug 2026
Keystone vulnerable to graphql.maxTake bypass with negative take
npm @keystone-6/core · Upgrade to 6.5.3 or later · <= 6.5.2 · CVE-2026-63421 · GHSA-cqmq-8755-7xvh
21 Aug 2026Evidence →
High, CVSS 8.221 Aug 2026
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
npm defuddle · Upgrade to 0.19.1 or later · <= 0.19.0 · CVE-2026-61824 · GHSA-jg4p-g6xj-4qmf
21 Aug 2026Evidence →
Critical, CVSS 9.821 Aug 2026
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
Maven org.geotools.jdbc:gt-jdbc-postgis · Upgrade to 35.1, 34.5 or 33.6 by release line · >= 35.0, <= 35.0; >= 34.0, < 34.5; >= 30.5, < 33.6 · CVE-2026-76904 · GHSA-mqjf-5f49-2fjh · amended
21 Aug 2026Evidence →
Medium, CVSS 5.121 Aug 2026
Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin
Packagist getgrav/grav · Upgrade to 2.0.20 or later · <= 2.0.19 · CVE-2026-86197 · GHSA-8hgv-xc77-jmcr · amended
21 Aug 2026Evidence →
Medium, CVSS 4.121 Aug 2026
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
npm unleash-server · Upgrade to 8.0.3 or later · < 8.0.3 · CVE-2026-63466 · GHSA-w4mq-xh27-6xpx
21 Aug 2026Evidence →
Medium, CVSS 5.521 Aug 2026
Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers
npm unleash-server · Upgrade to 8.0.2, 7.6.5 or 7.5.2 by release line · < 7.5.2; >= 7.6.0, < 7.6.5; >= 8.0.0, < 8.0.2 · CVE-2026-63004 · GHSA-5vf6-jrqr-78fj
21 Aug 2026Evidence →
High, CVSS 7.521 Aug 2026
Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
npm unleash-server · Upgrade to 8.0.2, 7.6.5 or 7.5.2 by release line · < 7.5.2; >= 7.6.0, < 7.6.5; >= 8.0.0, < 8.0.2 · CVE-2026-63462 · GHSA-r5pq-6chh-j3xp
21 Aug 2026Evidence →
High, CVSS 8.721 Aug 2026
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
PyPI nltk · Upgrade to 3.10.1 or later · < 3.10.1 · CVE-2026-72818 · GHSA-qx2g-xrx7-vfh8
21 Aug 2026Evidence →
Medium, CVSS 6.520 Aug 2026
Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)
Go github.com/axllent/mailpit · Upgrade to 1.30.6 or later · >= 1.29.0, <= 1.30.5 · CVE-2026-67448 · GHSA-8r62-w5wh-fc5m · amended
20 Aug 2026Evidence →
Medium, CVSS 5.320 Aug 2026
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
Go github.com/axllent/mailpit · Upgrade to 1.30.5 or later · >= 1.30.0, < 1.30.5 · CVE-2026-67447 · GHSA-r553-m4fv-5v97 · amended
20 Aug 2026Evidence →
Medium, CVSS 6.920 Aug 2026
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
npm gettext-converter · Upgrade to 1.3.3 or later · < 1.3.3 · CVE-2026-55451 · GHSA-f4jp-rw7w-ccwg
20 Aug 2026Evidence →
Medium, CVSS 6.520 Aug 2026
Wagtail: Improper restriction handling on Page translation API endpoint
PyPI wagtail · Upgrade to 8.0rc2 (pre-release), 7.4.3, 7.3.4 or 7.0.9 by release line · < 7.0.9; >= 7.1rc1, < 7.3.4; >= 7.4rc1, < 7.4.3; >= 8.0rc1, < 8.0rc2 · CVE-2026-125106 · GHSA-jm5p-837g-rv8g · amended
20 Aug 2026Evidence →
Medium, CVSS 6.520 Aug 2026
Wagtail: Improper permission handling when copying snippets
PyPI wagtail · Upgrade to 8.0rc2 (pre-release), 7.4.3, 7.3.4 or 7.0.9 by release line · < 7.0.9; >= 7.1, < 7.3.4; >= 7.4, < 7.4.3; >= 8.0rc1, < 8.0rc2 · CVE-2026-123819 · GHSA-x5cx-w6p2-mxf2 · amended
20 Aug 2026Evidence →
Medium, CVSS 5.320 Aug 2026
Wagtail: Improper restriction handling on descendant collections in Documents and Images API
PyPI wagtail · Upgrade to 8.0rc2 (pre-release), 7.4.3, 7.3.4 or 7.0.9 by release line · < 7.0.9; >= 7.1, < 7.3.4; >= 7.4, < 7.4.3; >= 8.0rc1, < 8.0rc2 · CVE-2026-123820 · GHSA-c2xx-cjmh-9q8f · amended
20 Aug 2026Evidence →
Low, CVSS 3.720 Aug 2026
Wagtail: Identification of documents by SHA1 hash
PyPI wagtail · Upgrade to 8.0rc2 (pre-release), 7.4.3, 7.3.4 or 7.0.9 by release line · < 7.0.9; >= 7.1, < 7.3.4; >= 7.4, < 7.4.3; >= 8.0rc1, < 8.0rc2 · CVE-2026-125105 · GHSA-92hv-j533-69wc · amended
20 Aug 2026Evidence →
Medium, CVSS 4.520 Aug 2026
Winter: Reflected XSS through the search query parameter in the backend Table widget
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · >= 1.0.420, < 1.2.14 · CVE-2026-125340 · GHSA-hq84-x37p-j6q5 · amended
20 Aug 2026Evidence →
Medium, CVSS 6.120 Aug 2026
Winter: CSRF through AJAX handler names reachable as backend page actions
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · >= 1.0.319, < 1.2.14 · CVE-2026-125339 · GHSA-p2ch-c2c3-4xm5 · amended
20 Aug 2026Evidence →
Medium, CVSS 4.520 Aug 2026
Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · < 1.2.14 · CVE-2026-125338 · GHSA-5cwr-5jxg-pcf6 · amended
20 Aug 2026Evidence →
High, CVSS 8.320 Aug 2026
Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · < 1.2.14 · CVE-2026-125337 · GHSA-fm29-4mq3-phg6 · amended
20 Aug 2026Evidence →
Medium, CVSS 4.320 Aug 2026
Winter: My Account preview exposes another backend user's profile by record ID
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · >= 1.2.13, < 1.2.14 · CVE-2026-126061 · GHSA-mpmw-f6h6-3g26 · amended
20 Aug 2026Evidence →
Low, CVSS 2.020 Aug 2026
Winter: Stored XSS through Backend List widget image columns
Packagist winter/wn-backend-module · Upgrade to 1.2.14 or later · >= 1.1.0, < 1.2.14 · CVE-2026-125341 · GHSA-7mpf-4465-7fc2 · amended
20 Aug 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

Keystone vulnerable to `graphql.maxTake` bypass with negative `take`

Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin

Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Wagtail: Improper restriction handling on Page translation API endpoint

Wagtail: Improper permission handling when copying snippets

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

Wagtail: Identification of documents by SHA1 hash

Winter: Reflected XSS through the search query parameter in the backend Table widget

Winter: CSRF through AJAX handler names reachable as backend page actions

Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles

Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

Winter: My Account preview exposes another backend user's profile by record ID

Winter: Stored XSS through Backend List widget image columns

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence