Medium, CVSS 5.4
Apache Airflow environment-variable secrets backend permits cross-team credential use
PyPI apache-airflow · Upgrade to 3.3.1 or later · < 3.3.1 · CVE-2026-68076 · GHSA-75mg-c62r-v95g
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 944 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
2876–2900 of 30,921 matching · newest first
- High, CVSS 8.8
Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler
PyPI apache-airflow · Upgrade to 3.3.1 or later · >= 3.3.0, < 3.3.1 · CVE-2026-67587 · GHSA-2qjv-p2gc-mjg2
- Medium, CVSS 4.3
Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables
PyPI apache-airflow · Upgrade to 3.3.1 or later · < 3.3.1 · CVE-2026-54183 · GHSA-g4qj-5vxv-wggf
- Medium, CVSS 6.5
Apache Airflow exposes dict-valued var.json secrets in Rendered Templates
PyPI apache-airflow · Upgrade to 3.3.1 or later · < 3.3.1 · CVE-2026-59244 · GHSA-f643-3rc2-j27w
- High, CVSS 8.8
Apache Airflow exception-node deserialization permits arbitrary callable execution
PyPI apache-airflow · Upgrade to 3.3.1 or later · >= 3.3.0, < 3.3.1 · CVE-2026-58076 · GHSA-8prw-8m6x-8w6f
- High, CVSS 8.6
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
PyPI compliance-trestle · Upgrade to 4.1.0 or later · < 4.1.0 · CVE-2026-52776 · GHSA-h47f-gmjp-m7rr
- High, CVSS 7.1
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
NuGet ssh.net · Upgrade to 2026.0.0 or later · <= 2025.1.0 · CVE-2026-48798 · GHSA-q939-rpr3-3284 · amended
- Medium, CVSS 6.5
Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.87.0 or later · < 4.87.0 · CVE-2026-48786 · GHSA-88p2-jj8w-j8qg · amended
- Medium, CVSS 5.4
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration
Packagist thorsten/phpmyfaq · Upgrade to 4.2.0-alpha (pre-release) or later · < 4.2.0-alpha · CVE-2026-47132 · GHSA-6pvm-2vjj-rx4w · amended
- High, CVSS 7.5
nimiq-blockchain: Validity store off by one error
crates.io nimiq-blockchain · Upgrade to 1.5.1 or later · <= 1.5.0 · CVE-2026-46369 · GHSA-3763-qp59-59vf · amended
- Medium, CVSS 5.4
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment
Packagist librenms/librenms · Upgrade to 26.5.0 or later · <= 26.4.0 · CVE-2026-45694 · GHSA-jmqm-f8q4-v7wx · amended
- High, CVSS 7.1
Winter: Authenticated backend users can bypass Users controller permission checks
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-35445 · GHSA-j5jq-cr68-v2xx · amended
- Medium, CVSS 6.8
Winter: Broken access control in
Cms\Controllers\Indexallows cross-template actions and unauthorized asset uploadsPackagist winter/wn-cms-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32639 · GHSA-5c4f-9pq9-6c77 · amended
- Medium, CVSS 5.9
Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32593 · GHSA-m7jc-g4rc-jmvh · amended
- High, CVSS 8.1
Winter: Stored XSS through Editor Settings custom styles
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · >= 1.2.10, < 1.2.13 · CVE-2026-32258 · GHSA-vgp4-2fc4-qff2 · amended
- High, CVSS 8.1
Winter: Stored XSS through Brand Settings custom styles
Packagist winter/wn-backend-module · Upgrade to 1.2.13 or later · <= 1.2.12 · CVE-2026-32257 · GHSA-v7cf-8gh9-gxmj · amended
- Unrated
Memory corruption bug on
ApplyResulttypecrates.io z3 · Upgrade to 0.21.0 or later · >= 0.0.0-0, < 0.21.0
- Medium, CVSS 4.8
tablib: Stored XSS in the HTML export via unescaped dataset title
PyPI tablib · Upgrade to 3.10.0 or later · < 3.10.0 · CVE-2026-9318 · GHSA-gqgw-jghv-mxwx
- High, CVSS 7.0
Heimdall: IP Spoofing via Unvalidated Forwarding Headers in github.com/dadrus/heimdall
Go github.com/dadrus/heimdall · Upgrade to 0.17.17 or later · < 0.17.17 · CVE-2026-57210 · GHSA-38x9-25wx-7fg2 · amended
- High, CVSS 7.8
Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass
Go github.com/traefik/traefik/v3 · Upgrade to 3.7.3 or later · >= 3.7.0, < 3.7.3 · +1 more package · CVE-2026-48491 · GHSA-5r4w-85f3-pw66 · amended
- Medium, CVSS 6.5
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
NuGet microsoft.windowsdesktop.app.runtime.win-x86 +2 · Upgrade all 3 to 10.0.11, 9.0.19 or 8.0.30 by release line · >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29 · CVE-2026-62902 · GHSA-9mrh-pw7c-9mqm · amended
- High, CVSS 7.8
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
NuGet microsoft.windowsdesktop.app.runtime.win-x86 +2 · Upgrade all 3 to 10.0.11, 9.0.19 or 8.0.30 by release line · >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29 · CVE-2026-62871 · GHSA-vg44-h755-9hw7 · amended
- High, CVSS 7.0
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
NuGet microsoft.windowsdesktop.app.runtime.win-x86 +2 · Upgrade all 3 to 10.0.11, 9.0.19 or 8.0.30 by release line · >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29 · CVE-2026-62897 · GHSA-fx4q-gjrx-2jw6 · amended
- High, CVSS 7.8
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
NuGet microsoft.windowsdesktop.app.runtime.win-x86 +2 · Upgrade all 3 to 10.0.11, 9.0.19 or 8.0.30 by release line · >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29 · CVE-2026-70354 · GHSA-gg8c-3338-xw2f · amended
- Medium, CVSS 6.7
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
NuGet microsoft.netcore.app.runtime.linux-musl-x64 +7 · Upgrade all 8 to 10.0.11, 9.0.19 or 8.0.30 by release line · >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29 · CVE-2026-62909 · GHSA-9mr8-pwpw-3j2w · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.