Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm @tdurieux/anonymous_github · Upgrade to 2.3.0 or later · >= 2.2.0, <= 2.2.0 · GHSA-g485-8j3v-p6x8 · amended
PyPI firefighter-incident · Upgrade to 0.0.54 or later · < 0.0.54 · CVE-2026-42864 · GHSA-fqvv-jvhr-g5jc · amended
npm inngest · Upgrade to 3.54.0 or later · >= 3.22.0, < 3.54.0 · CVE-2026-42047 · GHSA-2jf5-6wwv-vhxx · amended
crates.io diesel · Upgrade to 2.3.8 or later · < 2.3.8 · GHSA-h5x4-m2qf-r4f2
PyPI edx-enterprise · Upgrade to 7.0.5 or later · >= 7.0.2, <= 7.0.4 · CVE-2026-42860 · GHSA-64cv-vxpr-j6vc · amended
npm network-ai · Upgrade to 5.1.3 or later · <= 5.1.2 · CVE-2026-42856 · GHSA-fj4g-2p96-q6m3 · amended
Packagist webonyx/graphql-php · Upgrade to 15.32.3 or later · <= 15.32.2 · GHSA-r7cg-qjjm-xhqq
PyPI jupyter-server · Upgrade to 2.18.0 or later · <= 2.17.0 · CVE-2026-40934 · GHSA-5mrq-x3x5-8v8f · amended
re.match() in allow_origin_patPyPI jupyter-server · Upgrade to 2.18.0 or later · <= 2.17.0 · CVE-2026-40110 · GHSA-24qx-w28j-9m6p · amended
PyPI jupyter-server · Upgrade to 2.18.0 or later · <= 2.17.0 · CVE-2026-35397 · GHSA-5789-5fc7-67v3 · amended
npm vm2 · Upgrade to 3.10.5 or later · <= 3.10.4 · CVE-2026-26956 · GHSA-ffh4-j6h5-pg66 · amended
npm vm2 · Upgrade to 3.11.0 or later · < 3.11.0 · CVE-2026-26332 · GHSA-55hx-c926-fr95 · amended
npm vm2 · Upgrade to 3.11.0 or later · < 3.11.0 · CVE-2026-24781 · GHSA-v37h-5mfm-c47c · amended
npm vm2 · Upgrade to 3.10.5 or later · <= 3.10.3 · CVE-2026-24120 · GHSA-qvjj-29qf-hp7p · amended
Maven org.apache.thrift:libthrift · Upgrade to 0.23.0 or later · <= 0.22.0 · CVE-2026-43869 · GHSA-7pwc-h2j2-rjgj
Go github.com/hashicorp/boundary · Upgrade to 0.21.3, 0.20.3 or 0.19.5 by release line · < 0.19.5; >= 0.20.0, < 0.20.3; >= 0.21.0, < 0.21.3 · CVE-2026-7776 · GHSA-7x9r-wcgg-w86f
npm axios · Upgrade to 1.15.1 or 0.31.1 by release line · >= 1.0.0, < 1.15.1; <= 0.31.0 · CVE-2026-42033 · GHSA-pf86-5x62-jrwf · amended
npm axios · Upgrade to 1.15.1 or 0.31.1 by release line · >= 1.0.0, < 1.15.1; <= 0.31.0 · CVE-2026-42035 · GHSA-6chq-wfr3-2hj9 · amended
npm axios · Upgrade to 1.15.1 or 0.31.1 by release line · >= 1.0.0, < 1.15.1; <= 0.31.0 · CVE-2026-42043 · GHSA-pmwg-cvhr-8vh7 · amended
npm axios · Upgrade to 1.15.2 or later · >= 1.0.0, < 1.15.2 · CVE-2026-42264 · GHSA-q8qp-cvcw-x6jj · amended
Packagist webonyx/graphql-php · Upgrade to 15.32.2 or later · < 15.32.2 · GHSA-fc86-6rv6-2jpm
Packagist mckenziearts/livewire-markdown-editor · Upgrade to 1.3 or later · < 1.3 · GHSA-gxxh-8vcj-w2mh
proxy.* config (incomplete fix for CVE-2026-33509 / -35463 / -35464 /…PyPI pyload-ng · Upgrade to 0.5.0b3.dev100 (pre-release) or later · <= 0.5.0b3.dev99 · CVE-2026-42313 · GHSA-pg67-9wjv-mr85 · amended
RubyGems net-imap · Upgrade to 0.6.4, 0.5.14, 0.4.24 or 0.3.10 by release line · >= 0.6.0, <= 0.6.3; >= 0.5.0, <= 0.5.13; >= 0.4.0, <= 0.4.23; <= 0.3.9 · CVE-2026-42246 · GHSA-vcgp-9326-pqcp
PyPI rdiffweb · Upgrade to 2.10.6 or later · < 2.10.6 · CVE-2025-67796 · GHSA-v4gp-hf5j-4566 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.