Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

3876–3900 of 14,168 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 8.69 Apr 2026
OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42427 · GHSA-7437-7hg8-frrw · amended
9 Apr 2026Evidence →
High, CVSS 8.59 Apr 2026
OpenClaw: Authenticated /hooks/wake and mapped wake payloads are promoted into the trusted System: prompt channel
npm openclaw · Upgrade to 2026.4.8 or later · <= 2026.4.2 · GHSA-jf56-mccx-5f3f · amended
9 Apr 2026Evidence →
High, CVSS 7.39 Apr 2026
OpenClaw: Lower-trust background runtime output is injected into trusted System: events, and local async exec completion misses the intended exec-event downgrade
npm openclaw · Upgrade to 2026.4.8 or later · <= 2026.4.2 · GHSA-gfmx-pph7-g46x · amended
9 Apr 2026Evidence →
Critical, CVSS 9.19 Apr 2026
Apache Airflow: JWT token still valid after logout
PyPI apache-airflow · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2025-57735 · GHSA-c92r-g8j5-vhcx · amended
9 Apr 2026Evidence →
High, CVSS 7.59 Apr 2026
Apache DolphinScheduler vulnerable to sensitive information disclosure
Maven org.apache.dolphinscheduler:dolphinscheduler · Upgrade to 3.2.0 or later · >= 3.1.0, < 3.2.0 · CVE-2025-62188 · GHSA-3cjc-vhfm-ffp2
9 Apr 2026Evidence →
Critical, CVSS 9.68 Apr 2026
PraisonAI Vulnerable to OS Command Injection
PyPI praisonai · Upgrade to 4.5.121 or later · < 4.5.121 · CVE-2026-40088 · GHSA-2763-cj5r-c79m · amended
8 Apr 2026Evidence →
Critical, CVSS 9.3Exploited · CISA KEV8 Apr 2026
Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
PyPI marimo · Upgrade to 0.23.0 or later · < 0.23.0 · CVE-2026-39987 · GHSA-2679-6mx9-h9xc · amended
8 Apr 2026Evidence →
High, CVSS 8.78 Apr 2026
Pretext: Algorithmic Complexity (DoS) in the text analysis phase
npm @chenglou/pretext · Upgrade to 0.0.5 or later · <= 0.0.4 · GHSA-5478-66c3-rhxr · amended
8 Apr 2026Evidence →
High, CVSS 8.68 Apr 2026
basic-ftp has FTP Command Injection via CRLF
npm basic-ftp · Upgrade to 5.2.1 or later · >= 5.2.0, <= 5.2.0 · CVE-2026-39983 · GHSA-chqc-8p9q-pq6q · amended
8 Apr 2026Evidence →
High, CVSS 8.88 Apr 2026
AGiXT Vulnerable to Path Traversal in safe_join()
PyPI agixt · Upgrade to 1.9.2 or later · <= 1.9.1 · CVE-2026-39981 · GHSA-5gfj-64gh-mgmw · amended
8 Apr 2026Evidence →
High, CVSS 7.18 Apr 2026
Laravel Passport: TokenGuard Authenticates Unrelated User for Client Credentials Tokens
Packagist laravel/passport · Upgrade to 13.7.1 or later · >= 13.0.0, < 13.7.1 · CVE-2026-39976 · GHSA-349c-2h2f-mxf6
8 Apr 2026Evidence →
High, CVSS 8.58 Apr 2026
n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP mode
npm n8n-mcp · Upgrade to 2.47.4 or later · <= 2.47.3 · CVE-2026-39974 · GHSA-4ggg-h7ph-26qr · amended
8 Apr 2026Evidence →
High, CVSS 7.18 Apr 2026
mercure has Topic Selector Cache Key Collision
Go github.com/dunglas/mercure · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-39972 · GHSA-hwr4-mq23-wcv5
8 Apr 2026Evidence →
High, CVSS 7.18 Apr 2026
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
NuGet tmds.dbus · Upgrade to 0.92.0 or later · < 0.92.0 · +1 more package · CVE-2026-39959 · GHSA-xrw6-gwf8-vvr9
8 Apr 2026Evidence →
High, CVSS 7.58 Apr 2026
mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
npm mcp-from-openapi · Upgrade to 2.3.0 or later · <= 2.1.2 · +2 more packages · CVE-2026-39885 · GHSA-v6ph-xcq9-qxxj · amended
8 Apr 2026Evidence →
High, CVSS 7.38 Apr 2026
opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking
Go go.opentelemetry.io/otel/sdk · Upgrade to 1.43.0 or later · >= 1.15.0, <= 1.42.0 · CVE-2026-39883 · GHSA-hfvc-g4fc-pqhx
8 Apr 2026Evidence →
High, CVSS 8.88 Apr 2026
PraisonAI has Template Injection in Agent Tool Definitions
PyPI praisonai · Upgrade to 4.5.115 or later · <= 4.5.114 · CVE-2026-39891 · GHSA-hwg5-x759-7wjg · amended
8 Apr 2026Evidence →
High, CVSS 7.58 Apr 2026
PraisonAI Has Unauthenticated SSE Event Stream that Exposes All Agent Activity in A2U Server
PyPI praisonai · Upgrade to 4.5.115 or later · <= 4.5.114 · CVE-2026-39889 · GHSA-f292-66h9-fpmf · amended
8 Apr 2026Evidence →
Critical, CVSS 9.98 Apr 2026
PraisonAI has sandbox escape via exception frame traversal in execute_code (subprocess mode)
PyPI praisonaiagents · Upgrade to 1.5.115 or later · <= 1.5.114 · CVE-2026-39888 · GHSA-qf73-2hrx-xprp · amended
8 Apr 2026Evidence →
Critical, CVSS 9.88 Apr 2026
PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading
PyPI praisonai · Upgrade to 4.5.115 or later · <= 4.5.114 · CVE-2026-39890 · GHSA-32vr-5gcf-3pw2 · amended
8 Apr 2026Evidence →
High, CVSS 8.18 Apr 2026
CI4MS Vulnerable to .env CRLF Injection via Unvalidated host Parameter in Install Controller
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.4.0 or later · <= 0.31.3.0 · CVE-2026-39394 · GHSA-vfhx-5459-qhqh
8 Apr 2026Evidence →
High, CVSS 8.18 Apr 2026
CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.4.0 or later · <= 0.31.3.0 · CVE-2026-39393 · GHSA-8rh5-4mvx-xj7j
8 Apr 2026Evidence →
High, CVSS 8.78 Apr 2026
stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution
PyPI stata-mcp · Upgrade to 1.13.0 or later · < 1.13.0 · CVE-2026-31040 · GHSA-jpcj-7wfg-mqxv · amended
8 Apr 2026Evidence →
High, CVSS 7.88 Apr 2026
Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.1 or later · < 4.81.1 · CVE-2026-27806 · GHSA-rphv-h674-5hp2
8 Apr 2026Evidence →
High, CVSS 8.48 Apr 2026
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
PyPI openexr · Upgrade to 3.4.9, 3.3.9 or 3.2.7 by release line · >= 3.2.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9 · CVE-2026-34589 · GHSA-p8xc-w3q4-h64x · amended
8 Apr 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)

OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade

Apache Airflow: JWT token still valid after logout

Apache DolphinScheduler vulnerable to sensitive information disclosure

PraisonAI Vulnerable to OS Command Injection

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

Pretext: Algorithmic Complexity (DoS) in the text analysis phase

basic-ftp has FTP Command Injection via CRLF

AGiXT Vulnerable to Path Traversal in safe_join()

Laravel Passport: TokenGuard Authenticates Unrelated User for Client Credentials Tokens

n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP mode

mercure has Topic Selector Cache Key Collision

Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service

mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

PraisonAI has Template Injection in Agent Tool Definitions

PraisonAI Has Unauthenticated SSE Event Stream that Exposes All Agent Activity in A2U Server

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

CI4MS Vulnerable to .env CRLF Injection via Unvalidated `host` Parameter in Install Controller

CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit

OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence