High, CVSS 7.3
OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41391 · GHSA-7ggg-pvrf-458v · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- Critical, CVSS 9.1
fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key
npm fast-jwt · Upgrade to 6.2.0 or later · <= 6.1.0 · CVE-2026-34950 · GHSA-mvf2-f6gm-w987 · amended
- High, CVSS 7.5
Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads
RubyGems rack · Upgrade to 3.2.6, 3.1.21 or 2.2.23 by release line · < 2.2.23; >= 3.0.0.beta1, < 3.1.21; >= 3.2.0, < 3.2.6 · CVE-2026-34829 · GHSA-8vqr-qjwx-82mw
- High, CVSS 7.5
Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header
RubyGems rack · Upgrade to 3.2.6, 3.1.21 or 2.2.23 by release line · < 2.2.23; >= 3.0.0.beta1, < 3.1.21; >= 3.2.0, < 3.2.6 · CVE-2026-34230 · GHSA-v569-hp3g-36wr
- High, CVSS 7.5
Rack's multipart header parsing allows Denial of Service via escape-heavy quoted parameters
RubyGems rack · Upgrade to 3.2.6 or 3.1.21 by release line · >= 3.0.0.beta1, < 3.1.21; >= 3.2.0, < 3.2.6 · CVE-2026-34827 · GHSA-v6x5-cg8r-vv6x
- High, CVSS 7.5
Rack::Static prefix matching can expose unintended files under the static root
RubyGems rack · Upgrade to 3.2.6, 3.1.21 or 2.2.23 by release line · < 2.2.23; >= 3.0.0.beta1, < 3.1.21; >= 3.2.0, < 3.2.6 · CVE-2026-34785 · GHSA-h2jq-g4cq-5ppq
- Critical, CVSS 9.6
Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions
npm @lightdash/cli · Upgrade to 0.2695.1 or later · >= 0.1800.0, < 0.2695.1 · GHSA-3hfp-gqgh-xc5g · amended
- Critical, CVSS 9.8
Axios npm Supply Chain Incident Impacting @usebruno/cli
npm @usebruno/cli · Upgrade to 3.2.1 or later · < 3.2.1 · CVE-2026-34841 · GHSA-658g-p7jg-wx5g
- High, CVSS 7.4
Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw
Maven org.keycloak:keycloak-services · Upgrade to 26.5.7 or later · < 26.5.7 · CVE-2026-4282 · GHSA-hj93-h7pg-fh6v
- High, CVSS 7.5
Keycloak: Application-Level DoS via Scope Processing
Maven org.keycloak:keycloak-services · Upgrade to 26.5.7 or later · < 26.5.7 · CVE-2026-4634 · GHSA-h4wv-g838-66g3
- High, CVSS 8.1
Keycloak: UMA Policy Resource Injection Allows Unauthorized Cross-User Permission Grants
Maven org.keycloak:keycloak-services · Upgrade to 26.5.7 or later · < 26.5.7 · CVE-2026-4636 · GHSA-f2hx-5fx3-hmcv
- High, CVSS 7.3
Keycloak: Redirect URI validation bypass via ..;/ path traversal in OIDC auth endpoint
Maven org.keycloak:keycloak-services · Upgrade to 26.5.7 or later · < 26.5.7 · CVE-2026-3872 · GHSA-cjm2-j6cm-6p6m
- High, CVSS 7.1
mcp-handler has a tool response leak across concurrent client sessions ('Race Condition')
npm mcp-handler · Upgrade to 1.1.0 or later · < 1.1.0 · GHSA-w2fm-25vw-vh7f · amended
- High, CVSS 7.5
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
NuGet enhancedlinq.async · Upgrade to 1.0.0-beta.3 (pre-release) or later · >= 1.0.0-beta.1, < 1.0.0-beta.3 · GHSA-32wq-ppwg-3w4m
- High, CVSS 8.1
lodash vulnerable to Code Injection via
_.templateimports key namesnpm lodash +3 · Upgrade all 4 to 4.18.0 or later · >= 4.0.0, <= 4.17.23 · CVE-2026-4800 · GHSA-r5fr-rjxr-66jc · amended
- High, CVSS 7.1
listmonk's active sessions remain valid after password reset and password change
Go github.com/knadh/listmonk · Upgrade to 1.1.1-0.20260329113754-1b5e8d38c778 (pre-release) or later · >= 1.1.1-0.20241028090858-319053dd7a90, < 1.1.1-0.20260329113754-1b5e8d38c778 · CVE-2026-34828 · GHSA-h5j9-cvrw-v5qh
- High, CVSS 8.5
NocoBase Has SQL Injection via template variable substitution in workflow SQL node
npm @nocobase/plugin-workflow-sql · Upgrade to 2.0.30 or later · <= 2.0.29 · CVE-2026-34825 · GHSA-vx58-fwwq-5g8j · amended
- High, CVSS 7.1
ONNX: TOCTOU arbitrary file read/write in save_external_dat
PyPI onnx · Upgrade to 1.21.0 or later · <= 1.20.1 · CVE-2026-49114 · GHSA-q56x-g2fj-4rj6 · amended
- Critical, CVSS 9.1
PraisonAI Has Authentication Bypass via OAuthManager.validate_token()
PyPI praisonai · Upgrade to 4.5.97 or later · <= 4.5.96 · CVE-2026-34953 · GHSA-98f9-fqg5-hvq5 · amended
- Critical, CVSS 9.1
PraisonAI Has Missing Authentication in WebSocket Gateway
PyPI praisonai · Upgrade to 4.5.97 or later · <= 4.5.96 · CVE-2026-34952 · GHSA-cfh6-vr3j-qc3g · amended
- High, CVSS 8.6
PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
PyPI praisonaiagents · Upgrade to 1.5.95 or later · <= 1.5.94 · CVE-2026-34954 · GHSA-44c2-3rw4-5gvh · amended
- High, CVSS 8.8
PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
PyPI praisonai · Upgrade to 4.5.97 or later · <= 4.5.96 · CVE-2026-34955 · GHSA-r4f2-3m54-pp7q · amended
- High, CVSS 8.7
KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods
Go github.com/kubeai-project/kubeai · Upgrade to 0.23.2 or later · <= 0.23.1 · CVE-2026-34940 · GHSA-324q-cwx9-7crr
- High, CVSS 7.7
PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback
PyPI praisonai · Upgrade to 4.5.90 or later · <= 4.5.89 · CVE-2026-34936 · GHSA-x6m9-gxvr-7jpv · amended
- Critical, CVSS 9.8
PraisonAI Has Second-Order SQL Injection in
get_all_user_threadsPyPI praisonai · Upgrade to 4.5.90 or later · <= 4.5.89 · CVE-2026-34934 · GHSA-9cq8-3v94-434g · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.