@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation
npm @asymmetric-effort/nogginlessdom · Upgrade to 0.0.22 or later · <= 0.0.21 · GHSA-x4hg-hfwf-p9mw · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
4176–4200 of 30,936 matching · newest first
npm @asymmetric-effort/nogginlessdom · Upgrade to 0.0.22 or later · <= 0.0.21 · GHSA-x4hg-hfwf-p9mw · amended
npm @asymmetric-effort/nogginlessdom · Upgrade to 0.0.22 or later · <= 0.0.21 · GHSA-322x-v876-g883 · amended
npm 9router · Upgrade to 0.4.44 or later · < 0.4.44 · CVE-2026-59800 · GHSA-g6g7-pvmx-m74p · amended
method, leaking credentials via GET if submitted before hydrationnpm @nuxt/ui · Upgrade to 4.8.1 or later · < 4.8.1 · CVE-2026-123808 · GHSA-gj2h-2fpw-fhv9 · amended
npm jsonata · Upgrade to 2.2.0 or 1.8.9 by release line · >= 2.0.0, < 2.2.0; < 1.8.9 · CVE-2026-52746 · GHSA-86vw-mfpg-wwv9 · amended
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · CVE-2026-52734 · GHSA-65jj-fmw8-468q
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · +1 more package · CVE-2026-52733 · GHSA-2gf8-q9rr-jq3h
Packagist craftcms/cms · Upgrade to 5.9.21 or 4.17.14 by release line · >= 5.0.0-RC1, < 5.9.21; >= 4.0.0-RC1, < 4.17.14 · CVE-2026-50282 · GHSA-3w32-23wj-rxg3
Packagist craftcms/cms · Upgrade to 5.9.21 or later · >= 5.7.0, < 5.9.21 · CVE-2026-50281 · GHSA-x5m4-g2cq-52pq
Packagist mautic/core · Upgrade to 7.1.2 or later · >= 7.0.0, < 7.1.2 · CVE-2026-9811 · GHSA-5hvg-w58j-545m
Packagist mautic/core · Upgrade to 7.1.2 or later · >= 7.0.0, < 7.1.2 · CVE-2026-9809 · GHSA-7h65-whp7-rgqf
Packagist mautic/core · Upgrade to 7.1.2 or later · >= 7.0.0, < 7.1.2 · CVE-2026-9808 · GHSA-2jrw-c95w-h43g
Packagist mautic/core · Upgrade to 7.1.2 or later · >= 7.0.0, < 7.1.2 · CVE-2026-9559 · GHSA-6r9h-4h75-7q4x
Packagist mautic/core · Upgrade to 7.1.2, 6.0.9 or 5.2.11 by release line; some affected versions have no fix yet · >= 4.0.0, <= 4.4.13; >= 5.0.0, < 5.2.11; >= 6.0.0, < 6.0.9; >= 7.0.0, < 7.1.2 · CVE-2026-9557 · GHSA-jmv8-8j9j-rcpc
crates.io zebra-state · Upgrade to 7.0.0 or later · <= 6.0.0 · +1 more package · CVE-2026-52739 · GHSA-hhm7-qrv5-h4r6
crates.io zebra-state · Upgrade to 7.0.0 or later · <= 6.0.0 · +1 more package · CVE-2026-52738 · GHSA-w834-cf6p-9m9w
crates.io zebra-consensus · Upgrade to 7.0.0 or later · <= 6.0.0 · +1 more package · CVE-2026-52737 · GHSA-gvjc-3w7c-92jx
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · +1 more package · CVE-2026-52735 · GHSA-gf9r-m956-97qx
crates.io zebra-state · Upgrade to 7.0.0 or later · <= 6.0.0 · +1 more package · CVE-2026-52736 · GHSA-4m69-67m6-prqp
crates.io zebra-network · Upgrade to 7.0.0 or later · <= 6.0.0 · +1 more package · GHSA-h72h-ppcx-998p
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · CVE-2026-52732 · GHSA-4fc2-h7jh-287c
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · +1 more package · GHSA-c8w6-x74f-vmg3
crates.io zebrad · Upgrade to 4.5.0 or later · < 4.5.0 · +1 more package · GHSA-443g-gwgp-49x4
crates.io zebrad · Upgrade to 4.5.0 or later · <= 4.4.1 · +1 more package · CVE-2026-52731 · GHSA-qv2r-v3mx-f4pf
Packagist mautic/core · Upgrade to 7.1.2, 6.0.9 or 5.2.11 by release line; some affected versions have no fix yet · >= 2.6.0, <= 4.4.13; >= 5.0.0, < 5.2.11; >= 6.0.0, < 6.0.9; >= 7.0.0, < 7.1.2 · CVE-2026-4776 · GHSA-fcmw-wx57-9p75
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.