Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
3776–3800 of 30,922 matching · newest first
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53713 · GHSA-wcrf-9vrr-854f
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53715 · GHSA-8fv2-88gg-hm7q
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53717 · GHSA-h7pq-86h8-rp5x
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53719 · GHSA-m2v6-2jmh-4c68
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53716 · GHSA-cxpq-8v7q-cg56
Go github.com/envoyproxy/gateway · Upgrade to 1.8.1 or 1.7.4 by release line · >= 1.8.0-rc.0, < 1.8.1; < 1.7.4 · CVE-2026-53718 · GHSA-fcrp-7gc2-93g7
PyPI snowflake-connector-python · Upgrade to 4.7.1 or 3.18.1 by release line · < 3.18.1; >= 4.0.0, < 4.7.1 · CVE-2026-15925 · GHSA-5cc2-282f-jjq2 · amended
Go github.com/stacklok/toolhive · Upgrade to 0.31.0 or later · < 0.31.0 · CVE-2026-58196 · GHSA-pr64-jmmf-jp54
npm @andrea9293/mcp-documentation-server · Upgrade to 1.13.1 or later · >= 1.13.0, <= 1.13.0 · CVE-2026-54504 · GHSA-6f5r-5672-72j7 · amended
npm systeminformation · Upgrade to 5.31.7 or later · <= 5.31.6 · CVE-2026-50289 · GHSA-5xpp-75jx-m839 · amended
Go github.com/pomerium/pomerium · Upgrade to 0.32.8 or later · >= 0.32.6, < 0.32.8 · CVE-2026-50285 · GHSA-ggw3-5987-rx77
RubyGems datadog · Upgrade to 2.32.0 or later · < 2.32.0 · CVE-2026-50276 · GHSA-p5f6-rccc-jv98
NuGet datadog.trace.opentracing +1 · Upgrade all 2 to 3.43.0 or later · < 3.43.0 · CVE-2026-50273 · GHSA-38wr-vpc7-2mp4
npm dd-trace · Upgrade to 5.100.0 or later · < 5.100.0 · CVE-2026-50272 · GHSA-wxqq-gcq8-c443 · amended
PyPI ddtrace · Upgrade to 4.8.2 or later · < 4.8.2 · CVE-2026-50271 · GHSA-mw54-j2v2-42hr · amended
Maven com.datadoghq:dd-java-agent · Upgrade to 1.62.0 or later · < 1.62.0 · CVE-2026-50270 · GHSA-74xj-wh4w-vqxc
RubyGems view_component · Upgrade to 4.12.0 or later · >= 4.0.0, < 4.12.0 · CVE-2026-54497 · GHSA-9h85-g7w3-rh49
RubyGems view_component · Upgrade to 4.12.0 or later · >= 4.0.0, < 4.12.0 · CVE-2026-54498 · GHSA-97jw-64cj-jc58
eval() in Elasticsearch Result DeserializationPyPI django-haystack · Upgrade to 3.4.0 or later · < 3.4.0 · CVE-2026-105315 · GHSA-r3hx-x5rh-p9vv · amended
crates.io serde_with · Upgrade to 3.21.0 or later · >= 2.3.0, < 3.21.0 · GHSA-7gcf-g7xr-8hxj
npm websocket-driver · Upgrade to 0.7.5 or later · < 0.7.5 · CVE-2026-54490 · GHSA-mp7j-qc5w-4988 · amended
npm websocket-driver · Upgrade to 0.7.5 or later · < 0.7.5 · CVE-2026-54466 · GHSA-xv26-6w52-cph6 · amended
RubyGems websocket-driver · Upgrade to 0.8.1 or later · < 0.8.1 · CVE-2026-54465 · GHSA-8j3g-f24p-4mpw
RubyGems websocket-driver · Upgrade to 0.8.1 or later · < 0.8.1 · CVE-2026-54464 · GHSA-33ph-fccm-39pj
RubyGems websocket-driver · Upgrade to 0.8.1 or later · < 0.8.1 · CVE-2026-54463 · GHSA-ghhp-3qvg-889p
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.