High, CVSS 7.6
Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export
Go github.com/lin-snow/ech0 · Upgrade to 4.3.5 or later · < 4.3.5 · GHSA-4h9q-p5j4-xvvh
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- Critical, CVSS 9.1
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
PyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40289 · GHSA-8x8f-54wf-vv92 · amended
- Critical, CVSS 9.8
PraisonAI has critical RCE via
type: jobworkflow YAMLPyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40288 · GHSA-vc46-vw85-3wvm · amended
- High, CVSS 8.4
PraisonAI Vulnerable to RCE via Automatic tools.py Import
PyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40287 · GHSA-g985-wjh9-qxxc · amended
- High, CVSS 8.1
SiYuan: Publish Reader Can Arbitrarily Delete Attribute View Files via
/api/av/removeUnusedAttributeViewGo github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260407035653-2f416e5253f1 (pre-release) or later · < 0.0.0-20260407035653-2f416e5253f1 · CVE-2026-40259 · GHSA-7m5h-w69j-qggg
- High, CVSS 7.1
Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble
PyPI bugsink · Upgrade to 2.1.1 or later · >= 2.1.0, <= 2.1.0 · CVE-2026-40162 · GHSA-8hw4-fhww-273g · amended
- High, CVSS 8.2
Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read
npm @saltcorn/server · Upgrade to 1.6.0-beta.4 (pre-release), 1.5.5 or 1.4.5 by release line · < 1.4.5; >= 1.5.0-beta.0, < 1.5.5; >= 1.6.0-alpha.0, < 1.6.0-beta.4 · CVE-2026-40163 · GHSA-32pv-mpqg-h292 · amended
- High, CVSS 7.2
PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40114 · GHSA-8frj-8q3m-xhgm · amended
- High, CVSS 7.1
PraisonAIAgents: SSRF via unvalidated URL in
web_crawlhttpx fallbackPyPI praisonaiagents · Upgrade to 1.5.128 or later · >= 0.13.23, < 1.5.128 · CVE-2026-40160 · GHSA-qq9r-63f6-v542 · amended
- High, CVSS 8.1
PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
PyPI praisonaiagents · Upgrade to 4.5.128 or later · < 4.5.128 · GHSA-x462-jjpc-q4q4 · amended
- Critical, CVSS 9.4
PraisonAI vulnerable to arbitrary file write via path traversal in
praisonai recipe unpackPyPI praisonai · Upgrade to 4.5.128 or later · >= 2.7.2, < 4.5.128 · CVE-2026-40157 · GHSA-99g3-w8gr-x37c · amended
- High, CVSS 7.8
PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic
tools.pyLoadingPyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40156 · GHSA-2g3w-cpc4-chr4 · amended
- Critical, CVSS 9.3
PraisonAI Vulnerable Untrusted Remote Template Code Execution
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40154 · GHSA-pv9q-275h-rh7x · amended
- High, CVSS 8.8
PraisonAI: Hardcoded
approval_mode="auto"in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command ExecutionPyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-56075 · GHSA-qwgj-rrpj-75xm · amended
- High, CVSS 8.6
PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40158 · GHSA-3c4r-6p77-xwr7 · amended
- High, CVSS 7.4
PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40153 · GHSA-v8g7-9q6v-p3x8 · amended
- High, CVSS 7.9
PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40149 · GHSA-4wr3-f4p3-5wjh · amended
- High, CVSS 7.7
PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40150 · GHSA-8f4v-xfm9-3244 · amended
- High, CVSS 7.5
PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40116 · GHSA-q5r4-47m9-5mc7 · amended
- High, CVSS 8.4
PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40113 · GHSA-fvxx-ggmx-3cjg · amended
- Critical, CVSS 9.3
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
PyPI praisonaiagents · Upgrade to 1.5.128 or later · <= 1.5.126 · CVE-2026-40111 · GHSA-v7px-3835-7gjx · amended
- High, CVSS 8.7
SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260407035653-2f416e5253f1 (pre-release) or later · < 0.0.0-20260407035653-2f416e5253f1 · CVE-2026-40107 · GHSA-w95v-4h65-j455
- High, CVSS 8.2
@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass
npm @sveltejs/kit · Upgrade to 2.57.1 or later · <= 2.57.0 · CVE-2026-40073 · GHSA-2crg-3p73-43xp · amended
- High, CVSS 7.5
@vitejs/plugin-rsc has a Denial of Service with React Server Components
npm @vitejs/plugin-rsc · Upgrade to 0.5.23 or later · <= 0.5.22 · GHSA-v457-wxvj-p9w9 · amended
- High, CVSS 7.5
Next.js has a Denial of Service with Server Components
npm next · Upgrade to 16.2.3 or 15.5.15 by release line · >= 13.0.0, < 15.5.15; >= 16.0.0-beta.0, < 16.2.3 · GHSA-q4gf-8mx6-v5v3 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.