High, CVSS 8.6
Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.32.0 or later · < 8.32.0 · CVE-2026-42595 · GHSA-chwh-f6gm-r836
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.7
Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter
PyPI sentry · Upgrade to 8.2.2 or 8.1.4 by release line · < 8.1.4; >= 8.2.0, < 8.2.2 · CVE-2021-47935 · GHSA-444r-2whx-3685 · amended
- High, CVSS 8.6
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
Maven org.springframework.ai:spring-ai-milvus-store +1 · Upgrade all 2 to 1.1.6 or 1.0.7 by release line · >= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6 · CVE-2026-41705 · GHSA-v632-2m87-7469
- High, CVSS 8.8
@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools
npm @yoda.digital/gitlab-mcp-server · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-44895 · GHSA-8jr5-6gvj-rfpf · amended
- High, CVSS 8.1
epa4all-client has a VAU Signature bypass
Maven com.oviva.telematik:epa4all-client · Upgrade to 1.2.1 or later · <= 1.2.0 · CVE-2026-44900 · GHSA-g8r3-5hwf-qp96
- High, CVSS 7.0
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
PyPI gitpython · Upgrade to 3.1.50 or later · <= 3.1.49 · CVE-2026-67326 · GHSA-mv93-w799-cj2w · amended
- High, CVSS 8.2
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad
load()allowlistsPyPI langchain-core · Upgrade to 1.3.3 or 0.3.85 by release line · >= 1.0.0, <= 1.3.2; <= 0.3.84 · CVE-2026-44843 · GHSA-pjwx-r37v-7724 · amended
- High, CVSS 7.5
Phpseclib needs guardrails on large binaryfield integers
Packagist phpseclib/phpseclib · Upgrade to 3.0.34 or later · >= 3.0.0, < 3.0.34 · CVE-2023-49316 · GHSA-2f25-pfq3-c7h8
- Critical, CVSS 9.8
Snipe-IT has insecure permissions in file uploads
Packagist snipe/snipe-it · Upgrade to 8.4.1 or later · < 8.4.1 · CVE-2026-37709 · GHSA-xg82-2hrv-hf64
- Critical, CVSS 10.0
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers
Go github.com/free5gc/smf · Upgrade to 1.4.3 or later · < 1.4.3 · CVE-2026-44329 · GHSA-3258-qmv8-frp3
- High, CVSS 8.2
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating
Go github.com/free5gc/smf · Upgrade to 1.4.3 or later · < 1.4.3 · CVE-2026-44328 · GHSA-p9mg-74mg-cwwr
- High, CVSS 7.5
free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types
Go github.com/free5gc/nrf · Upgrade to 1.4.3 or later · < 1.4.3 · CVE-2026-44325 · GHSA-f8qv-7x5w-qr48
- High, CVSS 7.5
free5GC's NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference
Go github.com/free5gc/nef · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2026-44322 · GHSA-j59f-x285-69jx
- High, CVSS 7.5
free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)
Go github.com/free5gc/nef · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2026-44319 · GHSA-rxrq-fv76-26pr
- High, CVSS 7.5
free5GC's PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference
Go github.com/free5gc/pcf · Upgrade to 1.4.2 or later · < 1.4.2 · CVE-2026-44316 · GHSA-wr8j-6chw-gm6p
- High, CVSS 7.3
Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal
PyPI open-webui · Upgrade to 0.1.124 or later · <= 0.1.123 · CVE-2026-44566 · GHSA-9pgh-j74g-qj6m · amended
- High, CVSS 7.3
Open WebUI has Improper Authorization Control
PyPI open-webui · Upgrade to 0.1.124 or later · <= 0.1.123 · CVE-2026-44567 · GHSA-4vg5-rp28-gvjf · amended
- High, CVSS 7.3
Open WebUI has stored XSS in Excel file preview
PyPI open-webui · Upgrade to 0.8.0 or later · <= 0.7.2 · CVE-2026-44549 · GHSA-jwf8-pv5p-vhmc · amended
- High, CVSS 8.7
Snipe-IT has Privilege Escalation via API Permissions Assignment
Packagist snipe/snipe-it · Upgrade to 8.4.1 or later · < 8.4.1 · CVE-2026-44832 · GHSA-hq28-crg7-95pr
- High, CVSS 7.5
banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI
PyPI banks · Upgrade to 2.4.2 or later · <= 2.4.1 · CVE-2026-44209 · GHSA-gphh-9q3h-jgpp · amended
- High, CVSS 8.2
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
npm @babel/plugin-transform-modules-systemjs · Upgrade to 8.0.0-alpha.13 (pre-release) or 7.29.4 by release line · >= 7.12.0, <= 7.29.3; >= 8.0.0-alpha.0, <= 8.0.0-alpha.12 · CVE-2026-44728 · GHSA-fv7c-fp4j-7gwp · amended
- High, CVSS 8.1
Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44554 · GHSA-7r82-qhg4-6wvj · amended
- High, CVSS 7.1
Open WebUI's responses passthrough endpoint lacks access control authorization
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44556 · GHSA-hp5m-24vp-vq2q · amended
- High, CVSS 7.6
Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44555 · GHSA-9vvh-qmjx-p4q8 · amended
- High, CVSS 8.7
Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-44552 · GHSA-3x8w-4f7p-xxc2 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.