Medium, CVSS 5.3
OpenClaw: Skill Workshop apply flow could override pending approval
npm openclaw · Upgrade to 2026.5.6 or later · <= 2026.5.5 · CVE-2026-53808 · GHSA-cqwv-9qjx-vxw2 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 960 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
- Critical
- 66 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
4251–4275 of 30,936 matching · newest first
- High, CVSS 7.4
OpenClaw: QQBot streaming command could mutate config without explicit allowFrom
npm openclaw · Upgrade to 2026.4.29 or later · <= 2026.4.27 · CVE-2026-53833 · GHSA-jvm4-4j77-39p6 · amended
- Medium, CVSS 6.0
OpenClaw: Node pairing reconnection could confuse approval scope state
npm openclaw · Upgrade to 2026.5.27 or later · < 2026.5.27 · CVE-2026-53838 · GHSA-83w9-h5wv-j9xm · amended
- Unrated
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-32906 · GHSA-wv26-j37q-2g7p · amended
- Medium, CVSS 6.5
OpenClaw: memory-wiki ingest could read local files with operator.write scope
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-53825 · GHSA-p2fh-f5fc-44hr · amended
- High, CVSS 8.8
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35674 · GHSA-hw9r-h9mr-4jff · amended
- High, CVSS 7.6
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53831 · GHSA-mhq8-78pj-5j79 · amended
- High, CVSS 7.5
OpenClaw: QQBot native approval buttons did not enforce configured approver identity
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35630 · GHSA-mgq6-vr84-7m2j · amended
- High, CVSS 8.7
OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority
npm openclaw · Upgrade to 2026.5.20 or later · < 2026.5.20 · CVE-2026-53814 · GHSA-6fvr-66p3-3qj4 · amended
- High, CVSS 8.7
OpenClaw: Control UI locality spoofing could mint a durable admin device token
npm openclaw · Upgrade to 2026.5.22 or later · < 2026.5.22 · CVE-2026-53817 · GHSA-chr9-m4q2-76hw · amended
- High, CVSS 7.4
OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53832 · GHSA-rggc-m335-3wvj · amended
- High, CVSS 7.7
OpenClaw's marketplace runtime extension metadata could point at unscanned payloads
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53810 · GHSA-v6r2-jh58-xx6w · amended
- Medium, CVSS 4.9
OpenClaw's browser act interactions could bypass private-network navigation checks
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53812 · GHSA-2hfg-4fh4-qp7f · amended
- Medium, CVSS 6.9
OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-53820 · GHSA-qh2f-99mv-mrcf · amended
- High, CVSS 8.0
OpenClaw: Exec approval display truncation could hide the command being approved
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53829 · GHSA-xww8-gqvh-92x9 · amended
- High, CVSS 7.1
OpenClaw: Message read actions could skip channel allowlist checks
npm openclaw · Upgrade to 2026.5.19 or later · <= 2026.5.19-beta.2 · CVE-2026-53815 · GHSA-q7q8-3mgw-q67r · amended
- Critical, CVSS 9.8
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
PyPI mcp-memory-service · Upgrade to 10.67.1 or later · < 10.67.1 · CVE-2026-50027 · GHSA-84hp-mqvj-3p8h · amended
- Medium, CVSS 5.3
GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward
Go github.com/gofiber/fiber/v3 · Upgrade to 3.3.0 or later · <= 3.2.0 · +1 more package · CVE-2026-45045 · GHSA-gcfq-8gqf-4876
- Medium, CVSS 5.3
GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default Authorizer
Go github.com/gofiber/fiber/v3 · Upgrade to 3.3.0 or later · <= 3.2.0 · CVE-2026-44332 · GHSA-g5vh-55hw-rxm8
- High, CVSS 8.1
MLflow: trace API endpoints lack proper authorization validators
PyPI mlflow · Upgrade to 3.13.0rc0 (pre-release) or later · >= 2.14.0rc0, < 3.13.0rc0 · CVE-2026-8147 · GHSA-2cm6-r77w-6g96 · amended
- High, CVSS 7.3
Wagtail: Reflected XSS in dynamic image URL generator view
PyPI wagtail · Upgrade to 7.4.2 or 7.3.3 by release line · >= 7.3, < 7.3.3; >= 7.4, < 7.4.2 · CVE-2026-54263 · GHSA-23m2-mghx-vqmf · amended
- Medium, CVSS 4.3
Wagtail: Pages translations can be created without page permissions when using simple_translation
PyPI wagtail · Upgrade to 7.4.2, 7.3.3 or 7.0.8 by release line · < 7.0.8; >= 7.1, < 7.3.3; >= 7.4, < 7.4.2 · CVE-2026-54262 · GHSA-8634-mr4j-r72c · amended
- Medium, CVSS 6.5
Wagtail: Improper permission handling in image preview
PyPI wagtail · Upgrade to 7.4.2, 7.3.3 or 7.0.8 by release line · < 7.0.8; >= 7.1, < 7.3.3; >= 7.4, < 7.4.2 · CVE-2026-54261 · GHSA-r6p4-grq7-xm4m · amended
- Medium, CVSS 4.3
Wagtail: Denial of service via unbounded filter specs in the image preview
PyPI wagtail · Upgrade to 7.4.2, 7.3.3 or 7.0.8 by release line · < 7.0.8; >= 7.1, < 7.3.3; >= 7.4, < 7.4.2 · CVE-2026-54260 · GHSA-f2p5-j6fg-5cxf · amended
- Medium, CVSS 4.3
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
PyPI wagtail · Upgrade to 7.4.2, 7.3.3 or 7.0.8 by release line · < 7.0.8; >= 7.1, < 7.3.3; >= 7.4, < 7.4.2 · CVE-2026-54259 · GHSA-h54r-xq46-qwqm · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.