Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 944 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

2676–2700 of 30,921 matching · newest first

ExploitedClear filters

Unrated20 Aug 2026
append-only-vec 0.1.9 was removed from crates.io due to a malicious dependency
crates.io append-only-vec · Upgrade to 0.1.10-0 (pre-release) or later · >= 0.1.9, < 0.1.10-0
20 Aug 2026Evidence →
Medium, CVSS 6.519 Aug 2026
Tina: Cross-origin POST /media/upload/* requests can write arbitrary files into the Tina dev server media root
npm @tinacms/cli · Upgrade to 2.5.2 or later · < 2.5.2 · CVE-2026-63123 · GHSA-rgr9-r7mj-mf6x
19 Aug 2026Evidence →
Medium, CVSS 5.419 Aug 2026
Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 (and sibling production media adapters)
npm next-tinacms-s3 · Upgrade to 23.0.4 or later · < 23.0.4 · +3 more packages · CVE-2026-59992 · GHSA-8mq9-5fw2-5rm4
19 Aug 2026Evidence →
High, CVSS 8.719 Aug 2026
logto-tunnel serves files outside --experience-path via path traversal
npm @logto/tunnel · Upgrade to 0.3.9 or later · < 0.3.9 · CVE-2026-63188 · GHSA-rxjr-6c9q-h67x · amended
19 Aug 2026Evidence →
Low, CVSS 2.319 Aug 2026
BuildKit has a possible runtime DoS via unbounded group parsing
Go github.com/moby/buildkit · Upgrade to 0.31.1 or later · <= 0.31.0 · CVE-2026-61712 · GHSA-72x6-4j93-7w86 · amended
19 Aug 2026Evidence →
Medium, CVSS 5.319 Aug 2026
BuildKit: Custom frontend could bypass Seccomp/AppArmor
Go github.com/moby/buildkit · Upgrade to 0.31.1 or later · <= 0.31.0 · CVE-2026-61711 · GHSA-7236-3392-c5c6 · amended
19 Aug 2026Evidence →
Medium, CVSS 5.519 Aug 2026
SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses
npm mcp-searxng · Upgrade to 1.12.0 or later · < 1.12.0 · GHSA-hjwh-xvfw-qrwj
19 Aug 2026Evidence →
High, CVSS 8.219 Aug 2026
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
Packagist getgrav/grav · Upgrade to 2.0.4 or later · < 2.0.4 · CVE-2026-62230 · GHSA-vwg3-w8w3-pc79 · amended
19 Aug 2026Evidence →
Medium, CVSS 6.319 Aug 2026
Snipe-IT: Stored DOM XSS via table selected-count IDs
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · < 8.6.2 · CVE-2026-61807 · GHSA-c8qc-wf67-342w
19 Aug 2026Evidence →
Medium, CVSS 4.319 Aug 2026
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
Packagist snipe/snipe-it · Upgrade to 8.6.3 or later · < 8.6.3 · CVE-2026-55703 · GHSA-r9r3-g9fp-3q4q
19 Aug 2026Evidence →
High, CVSS 7.119 Aug 2026
Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Packagist snipe/snipe-it · Upgrade to 8.6.3 or later · < 8.6.3 · CVE-2026-55694 · GHSA-3hgv-jr5j-cg9x
19 Aug 2026Evidence →
High, CVSS 7.619 Aug 2026
Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode
Packagist snipe/snipe-it · Upgrade to 8.6.3 or later · < 8.6.3 · CVE-2026-55643 · GHSA-c6w2-j4wq-mvwg
19 Aug 2026Evidence →
High, CVSS 7.219 Aug 2026
GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates
Maven org.geoserver:gs-main +2 · Upgrade all 3 to 2.27.0 or later · < 2.27.0 · CVE-2024-45747 · GHSA-wf6j-gr27-g7ch · amended
19 Aug 2026Evidence →
Medium, CVSS 6.319 Aug 2026
SearXNG MCP Server: Additional hardened-mode SSRF bypasses
npm mcp-searxng · Upgrade to 1.2.1 or later · < 1.2.1 · CVE-2026-54689 · GHSA-wppf-h75h-6pm6
19 Aug 2026Evidence →
Medium, CVSS 6.519 Aug 2026
SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)
npm mcp-searxng · Upgrade to 1.2.1 or later · < 1.2.1 · CVE-2026-54688 · GHSA-q87f-qc2r-2gw4
19 Aug 2026Evidence →
Unrated19 Aug 2026
GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)
PyPI geolens · Upgrade to 1.2.4 or later · < 1.2.4 · GHSA-p77j-g7h5-r2vw
19 Aug 2026Evidence →
High, CVSS 7.119 Aug 2026
XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing
Maven org.xwiki.platform:xwiki-platform-livedata-livetable · Upgrade to 18.1.0-rc-1 (pre-release), 17.10.4, 17.4.10 or 16.10.17 by release line · >= 13.4-rc-1, < 16.10.17; >= 17.0.0-rc-1, < 17.4.10; >= 17.5.0-rc-1, < 17.10.4; >= 18.0.0-rc-1, < 18.1.0-rc-1 · CVE-2026-53966 · GHSA-45ph-gxxr-gwgw · amended
19 Aug 2026Evidence →
High, CVSS 8.719 Aug 2026
MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter
Packagist mcp/sdk · Upgrade to 0.7.1 or later · >= 0.5.0, < 0.7.1 · CVE-2026-53965 · GHSA-7m52-jw36-44r3 · amended
19 Aug 2026Evidence →
High, CVSS 7.219 Aug 2026
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
PyPI document-merge-service · Upgrade to 9.1.0 or later · < 9.1.0 · CVE-2026-53964 · GHSA-w47q-945m-q9pc
19 Aug 2026Evidence →
High, CVSS 7.719 Aug 2026
Contentful MCP Server: export_space/import_space tools pass LLM-controlled host/proxy args to CMA client, redirecting server PAT to attacker-controlled endpoint
npm @contentful/mcp-tools · Upgrade to 0.4.5 or later · < 0.4.5 · +1 more package · CVE-2026-53957 · GHSA-2xhg-73j7-rrgx · amended
19 Aug 2026Evidence →
High, CVSS 8.819 Aug 2026
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
PyPI copier · Upgrade to 9.15.2 or later · >= 9.5.0, <= 9.15.1 · CVE-2026-53951 · GHSA-9gmc-jqmh-3rvm
19 Aug 2026Evidence →
Medium, CVSS 6.919 Aug 2026
Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS
Go github.com/inspektor-gadget/inspektor-gadget · Upgrade to 0.53.1 or later · >= 0.27.0, < 0.53.1 · CVE-2026-53941 · GHSA-vjhx-2cqw-3q6q · amended
19 Aug 2026Evidence →
Medium, CVSS 6.319 Aug 2026
block_buffer: panic corrupts inline buffer position
crates.io block_buffer · Upgrade to 0.12.1 or later · >= 0.11.0, < 0.12.1 · GHSA-qwgh-2vcv-g2f7 · amended
19 Aug 2026Evidence →
High, CVSS 7.519 Aug 2026
claude-faf-mcp has an arbitrary local file read/write via unconfined path argument in FAF tools
npm claude-faf-mcp · Upgrade to 5.7.2 or later · <= 5.7.1 · GHSA-rr55-jp92-8wp2
19 Aug 2026Evidence →
High, CVSS 7.519 Aug 2026
faf-mcp has an arbitrary local file read/write via unconfined path argument in FAF tools
npm faf-mcp · Upgrade to 2.1.3 or later · <= 2.1.2 · GHSA-j4r7-8ph4-43g3
19 Aug 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

`append-only-vec` 0.1.9 was removed from crates.io due to a malicious dependency

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

logto-tunnel serves files outside `--experience-path` via path traversal

BuildKit has a possible runtime DoS via unbounded group parsing

BuildKit: Custom frontend could bypass Seccomp/AppArmor

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

Snipe-IT: Stored DOM XSS via table selected-count IDs

Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

SearXNG MCP Server: Additional hardened-mode SSRF bypasses

SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

block_buffer: panic corrupts inline buffer position

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence