Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
User-Agent HeaderNuGet yafnet.core · Upgrade to 4.0.5 or 3.2.12 by release line · >= 4.0.0-beta01, <= 4.0.4; <= 3.2.11 · CVE-2026-43938 · GHSA-33gv-fc78-qgf5
npm ssrfcheck · Upgrade to 1.2.0 or later · < 1.2.0 · CVE-2025-8267 · GHSA-p4hc-9pjh-55c8 · amended
crates.io rustfs · Upgrade to 1.0.0-alpha.98 (pre-release) or later · <= 1.0.0-alpha.91 · GHSA-mm2q-qcmx-gw4w
npm link-preview-js · Upgrade to 4.0.1 or later · <= 4.0.0 · CVE-2026-43897 · GHSA-4gp8-rjrq-ch6q · amended
Maven org.postgresql:postgresql · Upgrade to 42.7.11 or later · >= 42.2.0, < 42.7.11 · CVE-2026-42198 · GHSA-98qh-xjc8-98pq
PyPI django-s3file · Upgrade to 7.0.2 or later · < 7.0.2 · CVE-2026-42196 · GHSA-67qg-7284-2277 · amended
npm exiftool-vendored · Upgrade to 35.19.0 or later · <= 35.18.0 · CVE-2026-43893 · GHSA-cw26-7653-2rp5 · amended
Packagist openmage/magento-lts · Upgrade to 20.18.0 or later · <= 20.17.0 · CVE-2026-42155 · GHSA-2cwr-gcf9-pvxr
Go github.com/prometheus/prometheus · Upgrade to 0.311.3 or 0.305.2 by release line; some affected versions have no fix yet · >= 0.306.0, < 0.311.3; < 0.305.2; >= 1.0.0-rc.0, <= 2.5.0 · CVE-2026-42154 · GHSA-8rm2-7qqf-34qm
Go github.com/prometheus/prometheus · Upgrade to 0.311.3 or later · >= 0.45.2, < 0.311.3 · CVE-2026-42151 · GHSA-wg65-39gg-5wfj
crates.io gix · Upgrade to 0.83.0 or later · < 0.83.0 · +1 more package · GHSA-fr8x-3vfx-f45h
crates.io gix · Upgrade to 0.83.0 or later · < 0.83.0 · +1 more package · GHSA-pg4w-g64p-qwhj
crates.io gix-pack · Upgrade to 0.69.0 or later · <= 0.68.0 · GHSA-x494-mj8g-cj27
crates.io gix · Upgrade to 0.83.0 or later · >= 0.31.0, < 0.83.0 · CVE-2026-40034 · GHSA-f26g-jm89-4g65
crates.io gix · Upgrade to 0.83.0 or later · < 0.83.0 · +1 more package · GHSA-p3hw-mv63-rf9w
PyPI pycti · Upgrade to 6.9.13 or later · >= 6.9.0, < 6.9.13 · CVE-2026-27960 · GHSA-6vvv-vmfr-xhrx
PyPI pptagent · Upgrade to 1.1.36 or later · < 1.1.36 · CVE-2026-42079 · GHSA-89g2-xw5c-v95p · amended
Go github.com/oxyno-zeta/s3-proxy · Upgrade to 0.0.0-20260424211602-1320e4abd46a (pre-release) or later · < 0.0.0-20260424211602-1320e4abd46a · CVE-2026-42882 · GHSA-rfgq-wgg8-662p
crates.io tough · Upgrade to 0.22.0 or later · >= 0.9.0, < 0.22.0 · +1 more package · CVE-2026-6967 · GHSA-4v58-8p28-2rq3
crates.io tough · Upgrade to 0.22.0 or later · < 0.22.0 · +1 more package · CVE-2026-6966 · GHSA-8m7c-8m39-rv4x
npm openclaw · Upgrade to 2026.4.23 or later · < 2026.4.23 · CVE-2026-45006 · GHSA-cwj3-vqpp-pmxr · amended
npm openclaw · Upgrade to 2026.4.23 or later · < 2026.4.23 · CVE-2026-45004 · GHSA-r39h-4c2p-3jxp · amended
Maven org.eclipse.basyx:basyx.sdk · Upgrade to 2.0.0-milestone-10 (pre-release) or later · < 2.0.0-milestone-10 · CVE-2026-7411 · GHSA-8gpm-h2mh-36qc
Maven org.eclipse.basyx:basyx.sdk · Upgrade to 2.0.0-milestone-10 (pre-release) or later · < 2.0.0-milestone-10 · CVE-2026-7412 · GHSA-gx3v-wxfj-8h24
PyPI langflow · Upgrade to 1.9.0 or later · <= 1.8.4 · CVE-2026-42048 · GHSA-9whx-c884-c68q · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.