Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

351–375 of 30,910 matching · newest first

ExploitedClear filters

Medium, CVSS 6.528 Oct 2026
Backstage catalog rules can be bypassed for URL locations using encoded path segments
npm @backstage/plugin-catalog-backend · Upgrade to 4.0.2 or 3.9.2 by release line · < 3.9.2; >= 4.0.0, < 4.0.2 · CVE-2026-115923 · GHSA-w658-mh9p-ww8f · amended
28 Oct 2026Evidence →
Critical, CVSS 9.328 Oct 2026
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
PyPI electrum · Upgrade to 4.8.3 or later · < 4.8.3 · CVE-2026-117601 · GHSA-6jp4-8v48-cc5v · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
Go knative.dev/pkg · Upgrade to 0.0.0-20260531000007-52dbd5ece63f (pre-release) or later · < 0.0.0-20260531000007-52dbd5ece63f · CVE-2026-54462 · GHSA-2hw4-c9m4-f2fj · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
Waline login accepts a non-string email as a match-all MongoDB query
npm @waline/vercel · Upgrade to 1.41.0 or later · < 1.41.0 · CVE-2026-55369 · GHSA-jf75-q64q-g65r · amended
28 Oct 2026Evidence →
Medium, CVSS 5.328 Oct 2026
Seroval: Code injection through a typed array's own constructor property
npm seroval · Upgrade to 1.6.11 or later · >= 1.6.0, < 1.6.11 · CVE-2026-116583 · GHSA-f86p-h4j2-7qgj · amended
28 Oct 2026Evidence →
Medium, CVSS 4.728 Oct 2026
Seroval: Script injection through RegExp sources in serialized output
npm seroval · Upgrade to 1.6.10 or 1.0.0 by release line · >= 1.5.5, < 1.6.10; < 1.0.0 · CVE-2026-116582 · GHSA-9wx9-5pv9-3349 · amended
28 Oct 2026Evidence →
High, CVSS 7.528 Oct 2026
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
npm seroval · Upgrade to 1.6.8 or later · < 1.6.8 · CVE-2026-116581 · GHSA-97r2-qh9m-474h · amended
28 Oct 2026Evidence →
High, CVSS 7.528 Oct 2026
Seroval fromJSON/fromCrossJSON denial of service via unvalidated array node length
npm seroval · Upgrade to 1.6.8 or later · >= 1.4.1, < 1.6.8 · CVE-2026-116584 · GHSA-wp97-x4hv-qvhp · amended
28 Oct 2026Evidence →
High, CVSS 7.328 Oct 2026
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
npm seroval · Upgrade to 1.6.8 or later · < 1.6.8 · CVE-2026-116580 · GHSA-7rv5-mrxv-xcr9 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.328 Oct 2026
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
PyPI mem0ai · Upgrade to 2.0.18 or later · < 2.0.18 · +1 more package · CVE-2026-116575 · GHSA-5324-3w58-qpp2 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.828 Oct 2026
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
PyPI social-auth-core · Upgrade to 6.2.0 or later · < 6.2.0 · CVE-2026-115910 · GHSA-h2r5-x5m7-3935 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.228 Oct 2026
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
PyPI onnx · Upgrade to 1.22.0 or later · >= 1.2.1, < 1.22.0 · CVE-2026-115920 · GHSA-6pwm-x34p-fvj2 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.228 Oct 2026
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs
PyPI onnx · Upgrade to 1.22.0 or later · < 1.22.0 · CVE-2026-115922 · GHSA-q69g-f4f5-v8m7 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.228 Oct 2026
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute
PyPI onnx · Upgrade to 1.22.0 or later · >= 1.4.0, < 1.22.0 · CVE-2026-115921 · GHSA-m4pr-6v3c-6fgr · amended
28 Oct 2026Evidence →
Medium, CVSS 6.228 Oct 2026
ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)
PyPI onnx · Upgrade to 1.22.0 or later · < 1.22.0 · CVE-2026-115919 · GHSA-48m4-24cq-37qf · amended
28 Oct 2026Evidence →
Low, CVSS 3.428 Oct 2026
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115917 · GHSA-vvpg-rrww-wpmh · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115913 · GHSA-8397-8qf6-f2gm · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
vLLM DeepSeek-OCR image processing vulnerable to denial of service
PyPI vllm · Upgrade to 0.32.0 or later · >= 0.11.1, < 0.32.0 · CVE-2026-115914 · GHSA-gq5q-89c7-vhvx · amended
28 Oct 2026Evidence →
High, CVSS 8.128 Oct 2026
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115915 · GHSA-h3rc-j82p-2c3h · amended
28 Oct 2026Evidence →
High, CVSS 7.528 Oct 2026
vLLM: Public multimodal SHM handle forgery reaches worker-side pickle.loads() with insecure serialization disabled
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115912 · GHSA-6757-hggm-hp2w · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
PyPI vllm · Upgrade to 0.32.0 or later · < 0.32.0 · CVE-2026-115916 · GHSA-q97c-p368-75c4 · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
PyPI vllm · Upgrade to 0.32.0 or later · >= 0.16.0, < 0.32.0 · CVE-2026-115918 · GHSA-x567-49g5-p4cf · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
PyPI vllm · Upgrade to 0.32.0 or later · >= 0.19.0, < 0.32.0 · CVE-2026-115911 · GHSA-542m-9234-8gvf · amended
28 Oct 2026Evidence →
Low, CVSS 3.328 Oct 2026
systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net
npm systeminformation · Upgrade to 5.33.14 or later · < 5.33.14 · CVE-2026-116673 · GHSA-4vjg-vx72-qq4g · amended
28 Oct 2026Evidence →
Medium, CVSS 6.528 Oct 2026
systeminformation has prototype pollution in networkStats() via the interface name
npm systeminformation · Upgrade to 5.33.13 or later · < 5.33.13 · CVE-2026-116674 · GHSA-7648-jmwf-vw7j · amended
28 Oct 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Backstage catalog rules can be bypassed for URL locations using encoded path segments

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

Waline login accepts a non-string email as a match-all MongoDB query

Seroval: Code injection through a typed array's own constructor property

Seroval: Script injection through RegExp sources in serialized output

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

systeminformation has prototype pollution in `networkStats()` via the interface name

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence