Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

4001–4025 of 14,168 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 7.53 Apr 2026
Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature
Go github.com/lin-snow/ech0 · Upgrade to 1.4.8-0.20260401031029-4ca56fea5ba4 (pre-release) or later · < 1.4.8-0.20260401031029-4ca56fea5ba4 · CVE-2026-35036 · GHSA-wc4h-2348-jc3p
3 Apr 2026Evidence →
Critical, CVSS 9.13 Apr 2026
Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache)
npm better-auth · Upgrade to 1.4.9 or later · < 1.4.9 · CVE-2026-67337 · GHSA-xg6x-h9c9-2m83 · amended
3 Apr 2026Evidence →
High, CVSS 7.13 Apr 2026
OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41393 · GHSA-q9w8-cf67-r238 · amended
3 Apr 2026Evidence →
High, CVSS 8.63 Apr 2026
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing
npm openclaw · Upgrade to 2026.3.22 or later · <= 2026.3.13-1 · CVE-2026-41386 · GHSA-gg9v-mgcp-v6m7 · amended
3 Apr 2026Evidence →
High, CVSS 7.63 Apr 2026
OpenClaw: Node browser proxy allowProfiles bypass through persistent profile mutation and runtime profile selection
npm openclaw · Upgrade to 2026.3.22 or later · <= 2026.3.13-1 · CVE-2026-41353 · GHSA-h5hg-h7rr-gpf3 · amended
3 Apr 2026Evidence →
High, CVSS 8.73 Apr 2026
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41378 · GHSA-gjm7-hw8f-73rq · amended
3 Apr 2026Evidence →
Critical, CVSS 9.43 Apr 2026
OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41296 · GHSA-9p3r-hh9g-5cmg · amended
3 Apr 2026Evidence →
High, CVSS 7.13 Apr 2026
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41369 · GHSA-cg7q-fg22-4g98 · amended
3 Apr 2026Evidence →
High, CVSS 8.63 Apr 2026
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41404 · GHSA-g374-mggx-p6xc · amended
3 Apr 2026Evidence →
High, CVSS 7.13 Apr 2026
OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-32846 · GHSA-f6pf-4gjx-c94r · amended
3 Apr 2026Evidence →
High, CVSS 8.23 Apr 2026
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via config.patch
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41349 · GHSA-v3qc-wrwx-j3pw · amended
3 Apr 2026Evidence →
High, CVSS 7.33 Apr 2026
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41373 · GHSA-g8xp-qx39-9jq9 · amended
3 Apr 2026Evidence →
High, CVSS 7.73 Apr 2026
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41352 · GHSA-xj9w-5r6q-x6v4 · amended
3 Apr 2026Evidence →
High, CVSS 8.73 Apr 2026
OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41405 · GHSA-p464-m8x6-vhv8 · amended
3 Apr 2026Evidence →
High, CVSS 7.23 Apr 2026
OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41366 · GHSA-57gh-m6rq-54cf · amended
3 Apr 2026Evidence →
High, CVSS 8.73 Apr 2026
OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41397 · GHSA-cwf8-44x6-32c2 · amended
3 Apr 2026Evidence →
High, CVSS 7.33 Apr 2026
OpenClaw: Workspace .env can override the bundled plugin trust root
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41396 · GHSA-qcj9-wwgw-6gm8 · amended
3 Apr 2026Evidence →
High, CVSS 8.33 Apr 2026
Electron: Context Isolation bypass via contextBridge VideoFrame transfer
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.7.0 or 39.8.0 by release line · >= 39.0.0-alpha.1, < 39.8.0; >= 40.0.0-alpha.1, < 40.7.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34780 · GHSA-jfqg-hf23-qpw2 · amended
3 Apr 2026Evidence →
High, CVSS 8.13 Apr 2026
Electron: Use-after-free in offscreen child window paint callback
npm electron · Upgrade to 41.0.0, 40.7.0 or 39.8.1 by release line · < 39.8.1; >= 40.0.0-alpha.1, < 40.7.0; >= 41.0.0-alpha.1, < 41.0.0 · CVE-2026-34774 · GHSA-532v-xpq5-8h95 · amended
3 Apr 2026Evidence →
High, CVSS 7.53 Apr 2026
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.7.0, 39.8.0 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.0; >= 40.0.0-alpha.1, < 40.7.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34771 · GHSA-8337-3p73-46f4 · amended
3 Apr 2026Evidence →
High, CVSS 7.03 Apr 2026
Electron: Use-after-free in PowerMonitor on Windows and macOS
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.8.0, 39.8.1 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.1; >= 40.0.0-alpha.1, < 40.8.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34770 · GHSA-jjp3-mq3x-295m · amended
3 Apr 2026Evidence →
High, CVSS 7.73 Apr 2026
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.7.0, 39.8.0 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.0; >= 40.0.0-alpha.1, < 40.7.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34769 · GHSA-9wfr-w7mm-pc7f · amended
3 Apr 2026Evidence →
High, CVSS 7.22 Apr 2026
OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41364 · GHSA-fv94-qvg8-xqpw · amended
2 Apr 2026Evidence →
High, CVSS 8.52 Apr 2026
OpenClaw: Workspace .env can override the bundled hooks root and load attacker hook code
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41336 · GHSA-3qpv-xf3v-mm45 · amended
2 Apr 2026Evidence →
Critical, CVSS 9.02 Apr 2026
OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41329 · GHSA-g5cg-8x5w-7jpm · amended
2 Apr 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature

Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache)

OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration

OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing

OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection

OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile

OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables

OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode

OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read

OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`

OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides

OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md

OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration

OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

OpenClaw: Workspace `.env` can override the bundled plugin trust root

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Electron: Use-after-free in offscreen child window paint callback

Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

Electron: Use-after-free in PowerMonitor on Windows and macOS

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host

OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code

OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence