Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI openexr · Upgrade to 3.4.9, 3.3.9 or 3.2.7 by release line · >= 3.1.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9 · CVE-2026-34588 · GHSA-588r-cr5c-w6hf · amended
Go github.com/kcp-dev/kcp · Upgrade to 0.30.3 or 0.29.3 by release line · >= 0.30.0, < 0.30.3; < 0.29.3 · CVE-2026-39429 · GHSA-3j3q-wp9x-585p
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260407035653-2f416e5253f1 (pre-release) or later · < 0.0.0-20260407035653-2f416e5253f1 · CVE-2026-39846 · GHSA-phhp-9rm9-6gr2
npm liquidjs · Upgrade to 10.25.3 or later · <= 10.25.2 · CVE-2026-35525 · GHSA-56p5-8mhr-2fph · amended
Maven org.xwiki.platform:xwiki-platform-oldcore +1 · Upgrade all 2 to 17.10.1 or 17.4.8 by release line · >= 17.0.0-rc-1, < 17.4.8; >= 17.5.0-rc-1, < 17.10.1 · CVE-2026-33229 · GHSA-h259-74h5-4rh9
PyPI emmett · Upgrade to 2.8.1 or later · >= 2.5.0, < 2.8.1 · CVE-2026-39847 · GHSA-pr46-2v3c-5356 · amended
npm @delmaredigital/payload-puck · Upgrade to 0.6.23 or later · < 0.6.23 · CVE-2026-39397 · GHSA-65w6-pf7x-5g85 · amended
RubyGems rack-session · Upgrade to 2.1.2 or later · >= 2.0.0, < 2.1.2 · CVE-2026-39324 · GHSA-33qg-7wpp-89cq
npm drizzle-orm · Upgrade to 1.0.0-beta.20 (pre-release) or 0.45.2 by release line · < 0.45.2; >= 1.0.0-beta.2, < 1.0.0-beta.20 · CVE-2026-39356 · GHSA-gpj5-g38j-94v9 · amended
Maven gov.nsa.emissary:emissary · Upgrade to 8.39.0 or later · < 8.39.0 · CVE-2026-35581 · GHSA-6c37-7w4p-jg9v · amended
Maven gov.nsa.emissary:emissary · Upgrade to 8.39.0 or later · < 8.39.0 · CVE-2026-35580 · GHSA-3g6g-gq4r-xjm9
PyPI fastfeedparser · Upgrade to 0.5.10 or later · <= 0.5.9 · CVE-2026-39376 · GHSA-4gx2-pc4f-wq37 · amended
npm rwsdk · Upgrade to 1.0.6 or later · >= 1.0.0-beta.50, <= 1.0.5 · CVE-2026-39371 · GHSA-x8rx-789c-2pxq · amended
RubyGems addressable · Upgrade to 2.9.0 or later · >= 2.3.0, < 2.9.0 · CVE-2026-35611 · GHSA-h27x-rffw-24p4
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.63.1 or later · < 2.63.1 · CVE-2026-35607 · GHSA-7526-j432-6ppp
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.63.1 or later · < 2.63.1 · CVE-2026-35604 · GHSA-v9w4-gm2x-6rvf
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.33.8 or later · < 2.33.8 · CVE-2026-35585 · GHSA-jvpw-637p-h3pw
PyPI litellm · Upgrade to 1.83.0 or later · < 1.83.0 · GHSA-69x8-hrgq-fjj8 · amended
PyPI monai · Upgrade to 1.6.0 or later · < 1.6.0 · CVE-2026-100846 · GHSA-89gg-p5r5-q6r4 · amended
Maven io.modelcontextprotocol.sdk:mcp-core · Upgrade to 1.0.0 or later · < 1.0.0 · CVE-2026-35568 · GHSA-8jxr-pr72-r468
crates.io mise · Upgrade to 2026.6.4 or later · >= 2026.2.18, < 2026.6.4 · CVE-2026-35533 · GHSA-436v-8fw5-4mj8
crates.io netavark · Upgrade to 1.17.1 or later · >= 1.16.0, <= 1.17.0 · CVE-2026-35406 · GHSA-hfpq-x728-986j
baggage header extraction causes excessive allocations (remote dos amplification)Go go.opentelemetry.io/otel · Upgrade to 1.41.0 or later · >= 1.36.0, <= 1.40.0 · CVE-2026-29181 · GHSA-mh2q-q3fh-2475
Maven org.apache.cassandra:cassandra-all · Upgrade to 5.0.7 or later · >= 5.0-alpha1, < 5.0.7 · CVE-2026-27314 · GHSA-qxpc-96fq-wwmg
Go github.com/jackc/pgx/v5 · Upgrade to 5.9.0 or later · < 5.9.0 · CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.