Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

2801–2825 of 14,168 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 7.51 Jun 2026
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Maven org.apache.fluss:fluss-common · Upgrade to 0.9.1-incubating (pre-release) or later · >= 0.8.0-incubating-rc1, < 0.9.1-incubating · CVE-2026-49361 · GHSA-4c39-fwgj-4vq7
1 Jun 2026Evidence →
High, CVSS 7.31 Jun 2026
Apache Airflow Vulnerable to Deserialization of Untrusted Data
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-45360 · GHSA-2r5m-76wx-56gx · amended
1 Jun 2026Evidence →
High, CVSS 7.51 Jun 2026
Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-41084 · GHSA-mxq5-f9c5-w4p5 · amended
1 Jun 2026Evidence →
Critical, CVSS 9.11 Jun 2026
Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0, < 3.2.2 · CVE-2026-42252 · GHSA-c85c-g9wv-pph2 · amended
1 Jun 2026Evidence →
High, CVSS 8.81 Jun 2026
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Maven org.apache.activemq:activemq-broker +2 · Upgrade all 3 to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-45505 · GHSA-v853-w46p-fv2h
1 Jun 2026Evidence →
High, CVSS 8.11 Jun 2026
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Maven org.apache.activemq:activemq-broker +2 · Upgrade all 3 to 6.2.6 or 5.19.7 by release line · < 5.19.7; >= 6.0.0, < 6.2.6 · CVE-2026-42588 · GHSA-hg6c-8mvr-jqc9
1 Jun 2026Evidence →
High, CVSS 8.81 Jun 2026
Apache Airflow has a Deserialization of Untrusted Data vulnerability
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.2.0, < 3.2.2 · CVE-2026-42359 · GHSA-wr76-29cr-67w8 · amended
1 Jun 2026Evidence →
High, CVSS 7.21 Jun 2026
Apache Airflow: Authenticated users can bypass the is_safe_url check
PyPI apache-airflow · Upgrade to 3.2.2 or later · >= 3.0.0b3, < 3.2.2 · CVE-2026-40961 · GHSA-6hcw-qqr8-pjj8 · amended
1 Jun 2026Evidence →
High, CVSS 8.81 Jun 2026
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
Maven org.apache.directory.api:api-ldap-client-api · Upgrade to 2.1.8 or later · >= 2.0.0, < 2.1.8 · CVE-2026-35563 · GHSA-85rw-g4f4-jprr
1 Jun 2026Evidence →
Critical, CVSS 9.629 May 2026
praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47416 · GHSA-c2m8-4gcg-v22g · amended
29 May 2026Evidence →
High, CVSS 8.129 May 2026
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47409 · GHSA-w388-2392-px73 · amended
29 May 2026Evidence →
High, CVSS 7.629 May 2026
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47414 · GHSA-5jx9-w35f-vp65 · amended
29 May 2026Evidence →
High, CVSS 8.129 May 2026
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47406 · GHSA-4x6r-9v57-3gqw · amended
29 May 2026Evidence →
Critical, CVSS 9.829 May 2026
praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47410 · GHSA-3qg8-5g3r-79v5 · amended
29 May 2026Evidence →
High, CVSS 8.829 May 2026
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47405 · GHSA-h37g-4h4p-9x97 · amended
29 May 2026Evidence →
High, CVSS 8.829 May 2026
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47399 · GHSA-6h6v-6m7w-7vxx · amended
29 May 2026Evidence →
Critical, CVSS 9.429 May 2026
PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-47407 · GHSA-h8q5-cp56-rr65 · amended
29 May 2026Evidence →
High, CVSS 8.829 May 2026
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
PyPI praisonai-platform · Upgrade to 0.1.4 or later · <= 0.1.2 · CVE-2026-48169 · GHSA-gv23-xrm3-8c62 · amended
29 May 2026Evidence →
High, CVSS 7.129 May 2026
PraisonAI has an Arbitrary File Write in Python API
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47397 · GHSA-hvhp-v2gc-268q · amended
29 May 2026Evidence →
Critical, CVSS 9.829 May 2026
PraisonAI's unauthenticated A2A official example can reach real LLM-driven eval() tool execution
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47391 · GHSA-vg22-4gmj-prxw · amended
29 May 2026Evidence →
High, CVSS 8.729 May 2026
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47394 · GHSA-9cr9-25q5-8prj · amended
29 May 2026Evidence →
Critical, CVSS 9.929 May 2026
PraisonAI vulnerable to sandbox escape via print.__self__ builtins module leak in execute_code (subprocess mode)
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · +1 more package · CVE-2026-47392 · GHSA-4mr5-g6f9-cfrh · amended
29 May 2026Evidence →
Critical, CVSS 9.829 May 2026
PraisonAI deploy --type api emits a Flask server with authentication disabled by default
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47393 · GHSA-8444-4fhq-fxpq · amended
29 May 2026Evidence →
Critical, CVSS 9.829 May 2026
PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47396 · GHSA-86qc-r5v2-v6x6 · amended
29 May 2026Evidence →
High, CVSS 8.129 May 2026
PraisonAI: Arbitrary code execution via unguarded spec.loader.exec_module in agents_generator.py - sibling of CVE-2026-44334
PyPI praisonai · Upgrade to 4.6.40 or later · <= 4.6.39 · CVE-2026-47398 · GHSA-78r8-wwqv-r299 · amended
29 May 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer

Apache Airflow Vulnerable to Deserialization of Untrusted Data

Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key

Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Apache Airflow has a Deserialization of Untrusted Data vulnerability

Apache Airflow: Authenticated users can bypass the `is_safe_url` check

Apache Directory LDAP API lacks server certificate verification for LDAP hostnames

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role

praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)

praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API

PraisonAI has an Arbitrary File Write in Python API

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

PraisonAI vulnerable to sandbox escape via `print.self` builtins module leak in `execute_code` (subprocess mode)

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence