Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 944 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

3351–3375 of 30,921 matching · newest first

ExploitedClear filters

Medium, CVSS 4.324 Jul 2026
Open WebUI: WEB_FETCH_FILTER_LIST host allow/block filter bypassable via URL path and non-label-boundary matching
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59223 · GHSA-qg3f-8x3j-ggf2 · amended
24 Jul 2026Evidence →
High, CVSS 7.524 Jul 2026
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
PyPI yt-dlp · Upgrade to 2026.7.4 or later · < 2026.7.4 · CVE-2026-55404 · GHSA-6v4j-43gg-vj32 · amended
24 Jul 2026Evidence →
Medium, CVSS 6.024 Jul 2026
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.7.0, < 0.10.0 · CVE-2026-59222 · GHSA-gh7p-78x6-jw6m · amended
24 Jul 2026Evidence →
Low, CVSS 3.124 Jul 2026
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59215 · GHSA-73x5-h92w-xc2j · amended
24 Jul 2026Evidence →
Low, CVSS 3.524 Jul 2026
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.6.27, < 0.10.0 · CVE-2026-59213 · GHSA-3wp3-xxj9-5jqq · amended
24 Jul 2026Evidence →
Medium, CVSS 4.324 Jul 2026
Open WebUI: Upload metadata.knowledge_id bypasses the knowledge-base write-access check (read-only users can add files to KB)
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59217 · GHSA-7r7x-gjvr-448g · amended
24 Jul 2026Evidence →
High, CVSS 7.724 Jul 2026
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59216 · GHSA-74h3-cxq7-vc5q · amended
24 Jul 2026Evidence →
High, CVSS 7.124 Jul 2026
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.5, < 0.10.0 · CVE-2026-59714 · GHSA-x2ff-v5v8-m75m · amended
24 Jul 2026Evidence →
High, CVSS 7.124 Jul 2026
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.0, < 0.10.0 · CVE-2026-59219 · GHSA-855v-hq7w-jmjw · amended
24 Jul 2026Evidence →
Low, CVSS 3.124 Jul 2026
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.6.16, < 0.10.0 · CVE-2026-59715 · GHSA-gmfw-g93r-vg53 · amended
24 Jul 2026Evidence →
Medium, CVSS 4.324 Jul 2026
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.8.11, < 0.10.0 · CVE-2026-59227 · GHSA-rqj7-6wrp-6g2g · amended
24 Jul 2026Evidence →
Medium, CVSS 6.524 Jul 2026
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.2, < 0.10.0 · CVE-2026-59220 · GHSA-ffpj-xv5c-p3gw · amended
24 Jul 2026Evidence →
Low, CVSS 3.124 Jul 2026
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
PyPI open-webui · Upgrade to 0.10.0 or later · >= 0.9.0, < 0.10.0 · CVE-2026-59226 · GHSA-mvx4-532p-xfm9 · amended
24 Jul 2026Evidence →
Medium, CVSS 5.324 Jul 2026
Open WebUI: Account enumeration via observable login timing discrepancy
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59218 · GHSA-7rw5-9f7q-xj36 · amended
24 Jul 2026Evidence →
High, CVSS 7.324 Jul 2026
Open WebUI: Stored web worker XSS via Pyodide
PyPI open-webui · Upgrade to 0.10.0 or later · < 0.10.0 · CVE-2026-59214 · GHSA-4r2p-27mh-5m22 · amended
24 Jul 2026Evidence →
High, CVSS 7.724 Jul 2026
Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution
npm @anthropic-ai/claude-code · Upgrade to 2.1.163 or later · >= 2.1.38, < 2.1.163 · CVE-2026-55607 · GHSA-7835-87q9-rgvv · amended
24 Jul 2026Evidence →
High, CVSS 7.524 Jul 2026
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
Maven io.netty:netty-codec-xml · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; <= 4.1.135.Final · CVE-2026-73507 · GHSA-v74w-7mr3-4qg3
24 Jul 2026Evidence →
Medium, CVSS 5.324 Jul 2026
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
Maven io.netty:netty-codec-dns · Upgrade to 4.2.16.Final or 4.1.136.Final by release line · >= 4.2.0.Final, <= 4.2.15.Final; <= 4.1.135.Final · CVE-2026-73508 · GHSA-mfg7-5gfp-c4w3
24 Jul 2026Evidence →
High, CVSS 7.524 Jul 2026
js-yaml: Exponential parsing time in flow collections leads to denial of service
npm js-yaml · Upgrade to 5.2.2 or later · >= 5.0.0, <= 5.2.1 · CVE-2026-73643 · GHSA-pm4m-ph32-ghv5 · amended
24 Jul 2026Evidence →
Medium, CVSS 5.324 Jul 2026
Russh: client wrong-length X25519 clone_from_slice panic (pre-auth DoS)
crates.io russh · Upgrade to 0.62.4 or later · <= 0.62.3 · CVE-2026-73429 · GHSA-g9hv-x236-4qp3
24 Jul 2026Evidence →
Medium, CVSS 4.324 Jul 2026
Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records
crates.io russh · Upgrade to 0.62.4 or later · <= 0.62.3 · CVE-2026-73489 · GHSA-cqjc-rmpq-xprq
24 Jul 2026Evidence →
Medium, CVSS 5.324 Jul 2026
Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)
crates.io russh · Upgrade to 0.62.4 or later · <= 0.62.3 · CVE-2026-73430 · GHSA-5xvq-cp9x-6p6r
24 Jul 2026Evidence →
High, CVSS 7.124 Jul 2026
React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
npm react-router · Upgrade to 8.3.0 or 7.18.2 by release line · >= 7.12.0, < 7.18.2; >= 8.0.0, < 8.3.0 · GHSA-qwww-vcr4-c8h2 · amended
24 Jul 2026Evidence →
Medium, CVSS 5.324 Jul 2026
@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths
npm @fastify/static · Upgrade to 10.1.2 or later · <= 10.1.1 · CVE-2026-7120 · GHSA-8pvw-jcv7-9cmj · amended
24 Jul 2026Evidence →
High, CVSS 7.524 Jul 2026
@fastify/static vulnerable to route guard bypass via path traversal
npm @fastify/static · Upgrade to 10.1.1 or later · <= 10.1.0 · CVE-2026-15074 · GHSA-83w8-p2f5-377r · amended
24 Jul 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Open WebUI: Account enumeration via observable login timing discrepancy

Open WebUI: Stored web worker XSS via Pyodide

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

js-yaml: Exponential parsing time in flow collections leads to denial of service

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

@fastify/static vulnerable to route guard bypass via path traversal

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence