Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

3226–3250 of 14,168 Critical + High advisories · newest first

Show all severities

Exploited

Critical, CVSS 9.411 May 2026
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
Go github.com/cloudnative-pg/cloudnative-pg · Upgrade to 1.29.1 or 1.28.3 by release line · < 1.28.3; >= 1.29.0, < 1.29.1 · CVE-2026-44477 · GHSA-423p-g724-fr39
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 15.0.0, < 15.5.16; >= 16.0.0, < 16.2.5 · CVE-2026-44579 · GHSA-mg66-mrh9-m8jx · amended
11 May 2026Evidence →
High, CVSS 8.611 May 2026
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 13.4.13, < 15.5.16; >= 16.0.0, < 16.2.5 · CVE-2026-44578 · GHSA-c4j6-fc7j-m34r · amended
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 15.2.0, < 15.5.16; >= 16.0.0, < 16.2.5 · CVE-2026-44575 · GHSA-267c-6grr-h53f · amended
11 May 2026Evidence →
High, CVSS 8.111 May 2026
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 15.4.0, < 15.5.16; >= 16.0.0, < 16.2.5 · CVE-2026-44574 · GHSA-492v-c6pp-mqqv · amended
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 12.2.0, < 15.5.16; >= 16.0.0, < 16.2.5 · CVE-2026-44573 · GHSA-36qx-fr4f-26g5 · amended
11 May 2026Evidence →
High, CVSS 7.111 May 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse
Go github.com/ellanetworks/core · Upgrade to 1.10.0 or later · < 1.10.0 · CVE-2026-44473 · GHSA-qfxw-v8qx-vj3v
11 May 2026Evidence →
High, CVSS 8.211 May 2026
python-liquid: Absolute paths escape filesystem loader search path
PyPI python-liquid · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2026-45017 · GHSA-8p4x-wr7x-3788 · amended
11 May 2026Evidence →
High, CVSS 8.911 May 2026
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
PyPI urllib3 · Upgrade to 2.7.0 or later · >= 2.6.0, < 2.7.0 · CVE-2026-44432 · GHSA-mf9v-mfxr-j63j · amended
11 May 2026Evidence →
High, CVSS 8.211 May 2026
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
PyPI urllib3 · Upgrade to 2.7.0 or later · >= 1.23, < 2.7.0 · CVE-2026-44431 · GHSA-qccp-gfcp-xxvc · amended
11 May 2026Evidence →
High, CVSS 7.511 May 2026
@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components
npm @vitejs/plugin-rsc · Upgrade to 0.5.26 or later · <= 0.5.25 · GHSA-w94c-4vhp-22gx · amended
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Next.js Vulnerable to Denial of Service with Server Components
npm next · Upgrade to 16.2.5 or 15.5.16 by release line · >= 13.0.0, < 15.5.16; >= 16.0.0, < 16.2.5 · GHSA-8h8q-6873-q5fj · amended
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Facebook React has a Denial of Service Vulnerability in React Server Components
npm react-server-dom-turbopack +2 · Upgrade all 3 to 19.2.6, 19.1.7 or 19.0.6 by release line · >= 19.0.0, < 19.0.6; >= 19.1.0, < 19.1.7; >= 19.2.0, < 19.2.6 · CVE-2026-23870 · GHSA-rv78-f8rc-xrxh · amended
11 May 2026Evidence →
High, CVSS 7.011 May 2026
go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git
Go github.com/go-git/go-git/v6 · Upgrade to 6.0.0-alpha.3 (pre-release) or later · >= 6.0.0-alpha.1, <= 6.0.0-alpha.2 · +1 more package · CVE-2026-45022 · GHSA-389r-gv7p-r3rp
11 May 2026Evidence →
High, CVSS 7.511 May 2026
Prometheus exporter process crash via malformed HTTP request
npm @opentelemetry/exporter-prometheus · Upgrade to 0.217.0 or later · < 0.217.0 · +2 more packages · CVE-2026-44902 · GHSA-q7rr-3cgh-j5r3 · amended
11 May 2026Evidence →
High, CVSS 8.811 May 2026
Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)
PyPI bentoml · Upgrade to 1.4.39 or later · <= 1.4.38 · CVE-2026-44346 · GHSA-w2pm-x38x-jp44 · amended
11 May 2026Evidence →
High, CVSS 8.811 May 2026
BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)
PyPI bentoml · Upgrade to 1.4.39 or later · <= 1.4.38 · CVE-2026-44345 · GHSA-78f9-r8mh-4xm2 · amended
11 May 2026Evidence →
High, CVSS 8.311 May 2026
Open WebUI has inconsistent authorization controls within memories API
PyPI open-webui · Upgrade to 0.6.19 or later · < 0.6.19 · CVE-2026-44570 · GHSA-hmjq-crxp-7rjw · amended
11 May 2026Evidence →
High, CVSS 7.111 May 2026
Open WebUI's Insecure Message Access Breaks Authorization
PyPI open-webui · Upgrade to 0.6.19 or later · <= 0.6.18 · CVE-2026-44569 · GHSA-jxwr-g6r6-j3fx · amended
11 May 2026Evidence →
High, CVSS 8.111 May 2026
Open WebUI Arbitrary File Write, Delete via Path Traversal
PyPI open-webui · Upgrade to 0.6.10 or later · <= 0.6.9 · CVE-2026-44565 · GHSA-j3fw-wc48-29g3 · amended
11 May 2026Evidence →
High, CVSS 8.311 May 2026
Open WebUI has a CORS misconfiguration and session validation issue
PyPI open-webui · Upgrade to 0.3.33 or later · < 0.3.33 · CVE-2026-56400 · GHSA-6xcp-7mpr-m7wm · amended
11 May 2026Evidence →
High, CVSS 8.711 May 2026
PraisonAI's symlink-extraction bypass of _safe_extractall writes outside dest_dir
PyPI praisonai · Upgrade to 4.6.37 or later · <= 4.6.36 · CVE-2026-44340 · GHSA-9q28-ghcr-c4x3 · amended
11 May 2026Evidence →
High, CVSS 8.611 May 2026
PraisonAI has unsafe tool resolution in ToolExecutionMixin.execute_tool: undeclared __main__ callables execute
PyPI praisonai · Upgrade to 4.6.37 or later · <= 4.6.36 · +1 more package · CVE-2026-44339 · GHSA-gmjg-hv98-qggq · amended
11 May 2026Evidence →
Critical, CVSS 9.411 May 2026
PraisonAI MCP tools/call path-traversal => RCE via Python .pth injection
PyPI praisonai · Upgrade to 4.6.34 or later · <= 4.6.33 · CVE-2026-44336 · GHSA-9mqq-jqxf-grvw · amended
11 May 2026Evidence →
High, CVSS 7.311 May 2026
PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
PyPI praisonai · Upgrade to 4.6.34 or later · >= 2.5.6, <= 4.6.33 · CVE-2026-44338 · GHSA-6rmh-7xcm-cpxj · amended
11 May 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

python-liquid: Absolute paths escape filesystem loader search path

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components

Next.js Vulnerable to Denial of Service with Server Components

Facebook React has a Denial of Service Vulnerability in React Server Components

go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git

Prometheus exporter process crash via malformed HTTP request

Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)

BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)

Open WebUI has inconsistent authorization controls within memories API

Open WebUI's Insecure Message Access Breaks Authorization

Open WebUI Arbitrary File Write, Delete via Path Traversal

Open WebUI has a CORS misconfiguration and session validation issue

PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence