Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Packagist prestashop/prestashop · Upgrade to 9.1.0 or 8.2.5 by release line · >= 9.0.0-alpha.1, < 9.1.0; < 8.2.5 · CVE-2026-33673 · GHSA-35pf-37c6-jxjv
Packagist yansongda/pay · Upgrade to 3.7.20 or later · <= 3.7.19 · CVE-2026-33661 · GHSA-q938-ghwv-8gvc
npm liquidjs · Upgrade to 10.25.1 or later · < 10.25.1 · CVE-2026-33287 · GHSA-6q5m-63h6-5x4v · amended
npm @grackle-ai/server · Upgrade to 0.70.3 or later · <= 0.70.2 · GHSA-w3hv-x4fp-6h6j · amended
npm @grackle-ai/mcp · Upgrade to 0.70.2 or later · <= 0.70.1 · GHSA-647h-p824-99w7 · amended
PyPI modoboa · Upgrade to 2.7.1 or later · <= 2.7.0 · CVE-2026-27602 · GHSA-wwv8-cqpr-vx3m · amended
npm n8n · Upgrade to 2.10.1, 2.9.3 or 1.123.22 by release line · < 1.123.22; >= 2.10.0, < 2.10.1; >= 2.0.0-rc.0, < 2.9.3 · CVE-2026-27496 · GHSA-xvh5-5qg4-x9qp · amended
object.to_json Causing Unrecoverable Process Crash via StackOverflowExceptionNuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-xcx6-vp38-8hr5
NuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-v66j-x4hw-fv9g
NuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-c875-h985-hvrc
NuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-5wr9-m6jw-xx44
NuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-x6m9-38vm-2xhf
NuGet scriban +1 · Upgrade all 2 to 7.0.0 or later · < 7.0.0 · GHSA-p6q4-fgr8-vx4p
PyPI nemo-toolkit · Upgrade to 2.6.2 or later · < 2.6.2 · CVE-2026-24159 · GHSA-v7v2-m736-cf3c · amended
PyPI nemo-toolkit · Upgrade to 2.6.2 or later · < 2.6.2 · CVE-2026-24157 · GHSA-m4jw-wgmf-889x · amended
Go github.com/nats-io/nats-server/v2 · Upgrade to 2.12.6 or 2.11.15 by release line · < 2.11.15; >= 2.12.0-RC.1, < 2.12.6 · CVE-2026-33247 · GHSA-x6g4-f6q3-fqvv
npm parse-server · Upgrade to 9.6.0-alpha.55 (pre-release) or 8.6.61 by release line · >= 9.0.0, < 9.6.0-alpha.55; < 8.6.61 · CVE-2026-33627 · GHSA-37mj-c2wf-cx96 · amended
PyPI justhtml · Upgrade to 1.13.0 or later · <= 1.12.0 · CVE-2026-5389 · GHSA-5vp3-3cg6-2rq3 · amended
npm parse-server · Upgrade to 9.6.0-alpha.53 (pre-release) or 8.6.59 by release line · >= 9.0.0, < 9.6.0-alpha.53; < 8.6.59 · CVE-2026-33539 · GHSA-p2w6-rmh7-w8q3 · amended
npm parse-server · Upgrade to 9.6.0-alpha.52 (pre-release) or 8.6.58 by release line · >= 9.0.0, < 9.6.0-alpha.52; < 8.6.58 · CVE-2026-33538 · GHSA-g4cf-xj29-wqqr · amended
npm fido2-lib · Upgrade to 3.5.8 or later · <= 3.5.7 · GHSA-g3qj-j598-cxmq · amended
Packagist craftcms/cms · Upgrade to 5.9.13 or later · >= 5.6.0, <= 5.9.12 · CVE-2026-33157 · GHSA-2fph-6v5w-89hh
Packagist froxlor/froxlor · Upgrade to 2.3.5 or later · <= 2.3.4 · CVE-2026-30932 · GHSA-x6w6-2xwp-3jh6
Maven org.springframework.cloud:spring-cloud-config-server · Upgrade to 5.0.2 or 4.3.2 by release line; some affected versions have no fix yet · >= 4.3.0, < 4.3.2; >= 5.0.0-M1, < 5.0.2; >= 4.2.0, <= 4.2.4; >= 4.0.0, <= 4.1.7; <= 3.1.10 · CVE-2026-22739 · GHSA-3qwq-q9vm-5j42
PyPI briefcase · Upgrade to 0.3.26 or later · >= 0.3.0, < 0.3.26 · CVE-2026-33430 · GHSA-r3r2-35v9-v238 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.