Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
4376–4400 of 30,946 matching · newest first
__toString() policy bypass via Traversable in join and replace filtersPackagist twig/twig · Upgrade to 3.27.0 or later · <= 3.26.0 · CVE-2026-48807 · GHSA-8x9c-rmqh-456c
__toString() policy bypass via dynamic mapping keysPackagist twig/twig · Upgrade to 3.27.0 or later · <= 3.26.0 · CVE-2026-48806 · GHSA-5v5v-ww74-355v
src/Resources/core.phpPackagist twig/twig · Upgrade to 3.27.0 or later · <= 3.26.0 · CVE-2026-48805 · GHSA-p42q-9prx-q5wq
Go github.com/sigstore/fulcio · Upgrade to 1.8.6 or later · <= 1.8.5 · CVE-2026-49478 · GHSA-f5mr-q85p-6hh6
FolderSchemeHandlerFactory path boundary check can expose files outside the configured root folderNuGet cefsharp.common · Upgrade to 148.0.90 or later · < 148.0.90 · CVE-2026-48796 · GHSA-85jm-cwp2-mvpv
npm @adonisjs/bodyparser · Upgrade to 11.0.3 or 10.1.5 by release line · >= 10.1.3, <= 10.1.4; >= 11.0.0-next.9, <= 11.0.1 · CVE-2026-48795 · GHSA-qcm7-3vpr-hj5h · amended
Go go.probo.inc/probo · Upgrade to 0.204.0 or later · < 0.204.0 · CVE-2026-49820 · GHSA-x7qq-m748-8p2c
PyPI deeptutor · Upgrade to 1.4.10 or later · < 1.4.10 · CVE-2026-58168 · GHSA-jg88-rvpc-qvxj · amended
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-50566 · GHSA-m63v-2g9w-2w6v
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-50565 · GHSA-8wcj-mfrc-jx5q
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-50564 · GHSA-gx55-f84r-v3r7
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-50563 · GHSA-v455-mv2v-5g92
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-50545 · GHSA-wmgg-3p4h-48x7
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-49824 · GHSA-cvw6-gfvv-953q
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-49823 · GHSA-3r8v-2xmj-5c39
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-49822 · GHSA-gc3j-79f2-7vvw
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · CVE-2026-49821 · GHSA-vjhc-cf4p-72q4
Go github.com/fission/fission · Upgrade to 1.24.0 or later · <= 1.23.0 · GHSA-7m8x-qg2j-4m3v
Maven dev.sigstore:sigstore-java · Upgrade to 2.1.0 or later · >= 2.0.0, <= 2.0.0 · CVE-2026-48791 · GHSA-qqw8-7c2r-jxch
npm @cedar-policy/authorization-for-expressjs · Upgrade to 0.3.0 or later · <= 0.2.0 · CVE-2026-49473 · GHSA-g4w6-vmgf-xqvx · amended
Go github.com/kahiteam/kahi · Upgrade to 0.1.0-alpha.9 (pre-release) or later · <= 0.1.0-alpha.8 · GHSA-55f6-4pr5-c7m5
Packagist paymenter/paymenter · Upgrade to 1.5.1 or later · < 1.5.1 · CVE-2026-47198 · GHSA-5q4q-834j-g8g4
NuGet microsoft.openapi · Upgrade to 3.5.4 or 2.7.5 by release line · >= 3.0.0, <= 3.5.3; >= 2.0.0-preview.11, <= 2.7.4 · CVE-2026-49451 · GHSA-v5pm-xwqc-g5wc
Maven org.apache.gravitino:catalog-jdbc-common · Upgrade to 1.0.0 or later · >= 0.5.0, < 1.0.0 · CVE-2025-53648 · GHSA-7ph3-grqh-pv9v · amended
Bitnami activemq +3 · Upgrade all 4 to 6.2.7 or 5.19.8 by release line · < 5.19.8; >= 6.0.0, < 6.2.7 · CVE-2026-54475 · GHSA-mhp6-f224-j2c3 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.