Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
276–300 of 30,910 matching · newest first
Bitnami keycloak · Upgrade to 26.6.4 or 26.4.13 by release line · >= 26.4.0, < 26.4.13; >= 26.6.0, < 26.6.4 · +1 more package · CVE-2026-9705 · GHSA-r7rc-c989-86g6 · amended
npm @eeacms/volto-chatbot · Upgrade to 2.0.4 or later · < 2.0.4 · GHSA-w9x9-j56r-h98r · amended
RubyGems crass · Upgrade to 1.0.7 or later · < 1.0.7 · CVE-2026-61848 · GHSA-8vfg-2r28-hvhj · amended
RubyGems crass · Upgrade to 1.0.7 or later · < 1.0.7 · CVE-2026-61847 · GHSA-wwpr-jff3-395c · amended
RubyGems crass · Upgrade to 1.0.7 or later · < 1.0.7 · CVE-2026-61846 · GHSA-6jxj-px6v-747w · amended
npm @cedar-policy/cedar-wasm +1 · Upgrade all 2 to 4.11.1 or 3.4.3 by release line · >= 4.0.1, < 4.11.1; >= 3.2.0, < 3.4.3 · GHSA-c33x-vcv4-vg3g · amended
npm @sylphx/pdf-reader-mcp · Upgrade to 3.0.1 or later · >= 2.2.0, < 3.0.1 · CVE-2026-62264 · GHSA-q344-5v34-gm84 · amended
PyPI praisonai · Upgrade to 4.6.78 or later · < 4.6.78 · CVE-2026-61438 · GHSA-26mh-57q7-jfvr · amended
npm parse-server · Upgrade to 9.10.0-alpha.2 (pre-release) or 8.6.84 by release line · >= 9.0.0, < 9.10.0-alpha.2; < 8.6.84 · CVE-2026-61448 · GHSA-r899-h629-j84r · amended
Packagist pocketmine/pocketmine-mp · Upgrade to 5.44.2 or later · < 5.44.2 · CVE-2026-86198 · GHSA-pg53-p7qp-65cv · amended
Packagist silverstripe/mfa · Upgrade to 6.0.0 or later · < 6.0.0 · CVE-2026-55186 · GHSA-68wq-phq7-p2vg · amended
Bitnami python-min +2 · Upgrade all 3 to 3.15.2, 3.14.10, 3.13.18 or 2 more by release line · < 3.11.18; >= 3.12.0, < 3.12.16; >= 3.13.0, < 3.13.18; >= 3.14.0, < 3.14.10; >= 3.15.0, < 3.15.2 · CVE-2026-114583 · amended
i31 or nullref arguments may panic due to insufficient type-checkcrates.io wasmtime · Upgrade to 50.0.1, 49.0.5 or 48.0.8 by release line · >= 47.0.0, < 48.0.8; >= 49.0.0, < 49.0.5; >= 50.0.0, < 50.0.1 · GHSA-3982-jqvv-277m
send can deliver a datagram to an address only allowed for receivingcrates.io wasmtime-wasi · Upgrade to 50.0.1, 49.0.5 or 48.0.8 by release line · >= 48.0.0, < 48.0.8; >= 49.0.0, < 49.0.5; >= 50.0.0, < 50.0.1 · GHSA-hmmr-87qq-258j
crates.io wasmtime-wasi-http · Upgrade to 50.0.1, 49.0.5, 48.0.8 or 36.0.20 by release line · >= 0.0.0-0, < 36.0.20; >= 37.0.0, < 48.0.8; >= 49.0.0, < 49.0.5; >= 50.0.0, < 50.0.1 · GHSA-h4wp-g4x3-7398
crates.io wasmtime · Upgrade to 50.0.1, 49.0.5, 48.0.8 or 36.0.20 by release line · >= 0.0.0-0, < 36.0.20; >= 37.0.0, < 48.0.8; >= 49.0.0, < 49.0.5; >= 50.0.0, < 50.0.1 · GHSA-6fr9-xmw9-5352
crates.io juniper_warp · Upgrade to 0.9.1 or later · >= 0.0.0-0, < 0.9.1 · GHSA-fj3h-2jc3-973v
crates.io wasmtime · Upgrade to 50.0.1, 49.0.5 or 48.0.8 by release line · >= 47.0.0, < 48.0.8; >= 49.0.0, < 49.0.5; >= 50.0.0, < 50.0.1 · GHSA-qw58-7h65-crq2
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 12.0.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-16255 · amended
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 10.1.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-15723
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 17.4.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-14288 · amended
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 15.10.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-13319
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 18.2.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-12664
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 17.8.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-112378 · amended
Bitnami gitlab · Upgrade to 19.5.1, 19.4.3 or 19.3.6 by release line · >= 17.8.0, < 19.3.6; >= 19.4.0, < 19.4.3; >= 19.5.0, < 19.5.1 · CVE-2026-112326
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.