Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
2776–2800 of 30,921 matching · newest first
Go github.com/kubev2v/migration-planner · Upgrade to 0.13.5 or later · < 0.13.5 · CVE-2026-53471 · GHSA-2fqw-7c6r-2cq6 · amended
Go github.com/apache/answer +1 · Upgrade all 2 to 1.7.2-0.20260525024654-2746bf5b455f (pre-release) or later · < 1.7.2-0.20260525024654-2746bf5b455f · CVE-2026-25688 · GHSA-hmr2-99jm-8x45 · amended
Go github.com/kubev2v/migration-planner · Upgrade to 0.13.5 or later · < 0.13.5 · CVE-2026-53469 · GHSA-6xvf-9742-48w2 · amended
Go github.com/apache/answer +1 · Upgrade all 2 to 1.7.2-0.20260511040518-11091244f64e (pre-release) or later · < 1.7.2-0.20260511040518-11091244f64e · CVE-2026-34031 · GHSA-x4f6-mqg6-28xx · amended
Go github.com/kubev2v/assisted-migration-agent · Upgrade to 0.16.0 or later · < 0.16.0 · CVE-2026-53475 · GHSA-8g5p-jxp9-457c · amended
Go github.com/apache/answer +1 · Upgrade all 2 to 1.7.2-0.20260509080709-d1a4092c61cc (pre-release) or later · < 1.7.2-0.20260509080709-d1a4092c61cc · CVE-2026-34033 · GHSA-6qwm-5fm9-cvjx · amended
Go github.com/apache/answer +1 · Upgrade all 2 to 2.0.1 or later · <= 1.7.1 · CVE-2026-25700 · GHSA-4gw2-vg4x-7p29 · amended
Go github.com/jandedobbeleer/oh-my-posh · Upgrade to 29.35.1 or later · <= 29.35.0 · CVE-2026-73506 · GHSA-fwjx-9p69-h25h · amended
crates.io suppaftp · Upgrade to 10.0.2 or later · >= 0.0.0-0, < 10.0.2 · GHSA-8mhj-xm4h-m5m6
npm mlflow · Upgrade to 3.15.0 or later · < 3.15.0 · CVE-2026-69148 · GHSA-gqch-g4w5-7qcw
npm mlflow · Upgrade to 3.15.0 or later · < 3.15.0 · CVE-2026-69146 · GHSA-3p64-6gvh-82v5
PyPI mlflow · Upgrade to 3.15.0 or later · >= 3.3.0, < 3.15.0 · CVE-2026-64849 · GHSA-7gwp-5pfp-969j · amended
DigestAuthProvider.verify did not bind to request URIMaven org.http4k:http4k-security-digest · Upgrade to 6.50.0.0, 5.42.0.0 or 4.51.0.0 by release line · >= 6.0.0.0, < 6.50.0.0; >= 5.0.0.0, < 5.42.0.0; >= 4.0.0.0, < 4.51.0.0 · CVE-2026-54148 · GHSA-p28p-j94q-pg32 · amended
DigestAuthProvider.verify ignored configured algorithm and did not bind to request URIMaven org.http4k:http4k-security-digest · Upgrade to 6.50.0.0 or 5.42.0.0 by release line; some affected versions have no fix yet · >= 5.0.0.0, < 5.42.0.0; <= 4.48.2.0; >= 6.0.0.0, < 6.50.0.0 · CVE-2026-54147 · GHSA-vxxm-wwqh-mh47
npm chrome-devtools-mcp · Upgrade to 1.1.0 or later · >= 0.24.0, <= 1.0.1 · CVE-2026-53766 · GHSA-8qf9-62x2-82pp
Go software.sslmate.com/src/go-pkcs12 · Upgrade to 0.7.2 or later · >= 0.6.0, < 0.7.2 · GHSA-mpwr-8vm7-h73f · amended
w:basedOn Style Chain leads to Denial of ServiceMaven org.docx4j:docx4j-core · Upgrade to 11.5.14 or later · <= 11.5.13 · CVE-2026-53752 · GHSA-gc95-3vw8-vg43 · amended
ServerFilters.GZip / RequestFilters.GunZip allowed memory-exhaustion DoSMaven org.http4k:http4k-core · Upgrade to 6.49.0.0 or 5.42.0.0 by release line; some affected versions have no fix yet · >= 5.0.0.0, < 5.42.0.0; <= 4.48.2.0; >= 6.0.0.0, < 6.49.0.0 · CVE-2026-53659 · GHSA-g4w2-6h2r-3m3w
PyPI atomic-agents-stack · Upgrade to 1.1.0 or later · <= 1.0.0 · GHSA-j659-8xh6-5pq5
PyPI atomic-agents-stack · Upgrade to 1.1.0 or later · <= 1.0.0 · GHSA-xhcr-cqfr-m3hv
Maven io.netty:netty-codec-http · Upgrade to 4.2.17.Final or 4.1.137.Final by release line · >= 4.2.0.Final, <= 4.2.16.Final; <= 4.1.136.Final · CVE-2026-59903 · GHSA-8c42-7qj2-3j46 · amended
Maven io.netty:netty-transport-sctp · Upgrade to 4.2.17.Final or 4.1.137.Final by release line · >= 4.2.0.Final, <= 4.2.16.Final; <= 4.1.136.Final · CVE-2026-59902 · GHSA-2qj4-mmr9-4v2f · amended
Go gitlab.com/uniget-org/cli · Upgrade to 0.28.9 or later · >= 0.27.4, < 0.28.9 · GHSA-fhgh-wq4q-r37x · amended
PyPI sqlparse · Upgrade to 0.6.0 or later · <= 0.5.6.dev0 · CVE-2026-59893 · GHSA-prg7-hcfm-mfcr
PyPI sqlparse · Upgrade to 0.6.0 or later · <= 0.5.5 · CVE-2026-54284 · GHSA-pwgv-4x5q-6m9f
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.