High, CVSS 8.6
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
PyPI onnx · Upgrade to 1.21.0 or later · <= 1.20.1 · CVE-2026-34445 · GHSA-538c-55jv-c5g9 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 7.6
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
Go github.com/modelcontextprotocol/go-sdk · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-34742 · GHSA-xw59-hvm2-8pj6
- High, CVSS 8.2
Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption
Packagist auth0/auth0-php · Upgrade to 8.19.0 or later · >= 8.0.0, <= 8.18.0 · CVE-2026-34236 · GHSA-w3wc-44p4-m4j7
- High, CVSS 7.7
Open WebUI has Broken Access Control in Tool Valves
PyPI open-webui · Upgrade to 0.8.11 or later · < 0.8.11 · CVE-2026-34222 · GHSA-7429-hxcv-268m · amended
- High, CVSS 7.7
Tinyauth has OAuth account confusion via shared mutable state on singleton service instances
Go github.com/steveiliop56/tinyauth · Upgrade to 1.0.1-0.20260401140714-fc1d4f2082a5 (pre-release) or later · < 1.0.1-0.20260401140714-fc1d4f2082a5 · CVE-2026-33544 · GHSA-9q5m-jfc4-wc92
- High, CVSS 7.2
OpenSTAManager Affected by Remote Code Execution via Insecure Deserialization in OAuth2
Packagist devcode-it/openstamanager · Upgrade to 2.10.2 or later · <= 2.10.1 · CVE-2026-29782 · GHSA-whv5-4q2f-q68g
- High, CVSS 8.8
OpenSTAManager has a Time-Based Blind SQL Injection via
options[stato]ParameterPackagist devcode-it/openstamanager · Upgrade to 2.10.2 or later · <= 2.10.1 · CVE-2026-28805 · GHSA-3gw8-3mg3-jmpc
- High, CVSS 7.1
PYSEC-2026-2131
PyPI changedetection-io · Upgrade to 0.54.7 or later · < 0.54.7 · CVE-2026-35000 · amended
- Critical, CVSS 9.1
Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery
npm payload +1 · Upgrade all 2 to 3.79.1 or later · < 3.79.1 · CVE-2026-34751 · GHSA-hp5w-3hxx-vmwf · amended
- High, CVSS 8.6
SiYuan vulnerable to reflected XSS via SVG namespace prefix bypass in SanitizeSVG (getDynamicIcon, unauthenticated)
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260330031106-f09953afc57a (pre-release) or later · < 0.0.0-20260330031106-f09953afc57a · CVE-2026-34605 · GHSA-73g7-86qr-jrg3
- High, CVSS 7.1
@tinacms/graphql's
FilesystemBridgePath Validation Can Be Bypassed via Symlinks or Junctionsnpm @tinacms/graphql · Upgrade to 2.2.2 or later · <= 2.2.0 · CVE-2026-34604 · GHSA-g9c2-gf25-3x67 · amended
- High, CVSS 7.1
@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions
npm @tinacms/graphql · Upgrade to 2.2.2 or later · <= 2.2.1 · CVE-2026-34603 · GHSA-g87c-r2jp-293w · amended
- High, CVSS 7.1
YesWiki has Persistent Blind XSS at "/?BazaR&vue=consulter"
Packagist yeswiki/yeswiki · Upgrade to 4.6.0 or later · < 4.6.0 · CVE-2026-34598 · GHSA-37fq-47qj-6j5j
- Critical, CVSS 9.1
CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.0.0 or later · <= 0.28.6.0 · CVE-2026-34557 · GHSA-rpjr-985c-qhvm
- Critical, CVSS 9.1
CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.0.0 or later · <= 0.28.6.0 · CVE-2026-34558 · GHSA-v77r-xg3p-75g7
- High, CVSS 8.6
SiYuan Desktop: Stored XSS in imported .sy.zip content leads to arbitrary command execution
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260329142331-918d1bd9f967 (pre-release) or later · < 0.0.0-20260329142331-918d1bd9f967 · CVE-2026-34585 · GHSA-ff66-236v-p4fg
- High, CVSS 8.1
TorchGeo Remote Code Execution Vulnerability
PyPI torchgeo · Upgrade to 0.6.1 or later · >= 0.4, <= 0.6.0 · CVE-2024-49048 · GHSA-ghq9-vc6f-8qjf · amended
- Critical, CVSS 9.6
OpenClaw has a CWD
.envenvironment variable injection which bypasses host-env policy and allows config takeovernpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41294 · GHSA-8rh7-6779-cjqq · amended
- High, CVSS 7.3
OpenClaw gateway exec allow-always over-trusts positional carrier executables
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41380 · GHSA-p4x4-2r7f-wjxg · amended
- High, CVSS 7.1
OpenClaw Gateway
operator.writecan reach admin-only session reset viachat.send/resetnpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41371 · GHSA-5r8f-96gm-5j6g · amended
- High, CVSS 7.3
OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41390 · GHSA-6pfc-6m7w-m8fx · amended
- High, CVSS 8.5
OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides
npm openclaw · Upgrade to 2026.3.22 or later · < 2026.3.22 · CVE-2026-41387 · GHSA-j7p2-qcwm-94v4 · amended
- High, CVSS 7.7
OpenClaw safeBins jq
$ENVfilter bypass allows environment variable disclosurenpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41368 · GHSA-jccr-rrw2-vc8h · amended
- High, CVSS 7.1
OpenClaw's message tool media parameter bypasses tool policy filesystem isolation
npm openclaw · Upgrade to 2026.3.24 or later · < 2026.3.24 · CVE-2026-33581 · GHSA-v8wv-jg3q-qwpq · amended
- High, CVSS 8.7
OpenClaw: Discord text
/approvebypasseschannels.discord.execApprovals.approversand allows non-approvers to resolve pending exec approvalsnpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41303 · GHSA-98hh-7ghg-x6rq · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.