Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
4476–4500 of 30,958 matching · newest first
Packagist statamic/cms · Upgrade to 6.20.0 or 5.73.23 by release line · < 5.73.23; >= 6.0.0, < 6.20.0 · CVE-2026-49288 · GHSA-2497-6pwj-pwg7
Packagist pontedilana/php-weasyprint · Upgrade to 2.6.0 or later · <= 2.5.1 · CVE-2026-49359 · GHSA-x8g9-h984-pc36
Packagist pontedilana/php-weasyprint · Upgrade to 2.6.0 or later · <= 2.5.1 · CVE-2026-49358 · GHSA-5g9f-cwwg-4p8g
Packagist pontedilana/php-weasyprint · Upgrade to 2.6.0 or later · <= 2.5.1 · CVE-2026-49286 · GHSA-2fmj-p74r-3wjm
npm line-desktop-mcp · Upgrade to 1.1.2 or later · <= 1.1.1 · CVE-2026-49357 · GHSA-4hf8-5mjm-rfgq · amended
Packagist aimeos/pagible · Upgrade to 0.10.4 or later · < 0.10.4 · CVE-2026-49262 · GHSA-mmj8-wcvw-6789
npm pnpm · Upgrade to 11.0.7 or 10.33.4 by release line · < 10.33.4; >= 11.0.0, < 11.0.7 · CVE-2026-48995 · GHSA-hg3w-7f8c-63hp · amended
crates.io cargo · Upgrade to 0.97.0 or later · < 0.97.0 · CVE-2026-5223 · GHSA-jq42-7mfv-hm57
crates.io cargo · Upgrade to 0.97.0 or later · < 0.97.0 · CVE-2026-5222 · GHSA-p688-r7jv-fm6f
Packagist pontedilana/php-weasyprint · Upgrade to 2.5.1 or later · <= 2.5.0 · CVE-2026-49260 · GHSA-f5gc-qxf8-mh9g
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.4 or later · <= 4.1.3 · GHSA-985r-q3qp-299h
npm @cardano402/mcp-server · Upgrade to 0.1.2 or later · <= 0.1.1 · GHSA-rp72-5v5q-2446 · amended
PyPI mcp-pinot-server · Upgrade to 3.1.0 or later · <= 3.0.1 · CVE-2026-49257 · GHSA-73cv-556c-w3g6 · amended
PyPI mcp-memory-service · Upgrade to 10.65.3 or later · <= 10.65.1 · CVE-2026-49291 · GHSA-2r68-g678-7qr3 · amended
npm @deepstream/server · Upgrade to 10.0.5 or later · < 10.0.5 · CVE-2026-49252 · GHSA-9v98-6g37-x9g6 · amended
PyPI dosage · Upgrade to 3.3 or later · <= 3.2 · GHSA-75mw-h36v-2jv7 · amended
NuGet scriban +1 · Upgrade all 2 to 7.2.1 or later · >= 6.6.0, <= 7.2.0 · GHSA-6q7j-xr26-3h2c
NuGet scriban +1 · Upgrade all 2 to 7.2.1 or later · >= 3.0.0, <= 7.2.0 · GHSA-q6rr-fm2g-g5x8
Go github.com/juev/nebula-mesh · Upgrade to 0.3.4 or later · <= 0.3.3 · GHSA-v2jf-442r-6mjh
Packagist web-auth/webauthn-symfony-bundle · Upgrade to 5.3.4 or later · < 5.3.4 · GHSA-q683-8468-r6h6
Packagist cakephp/cakephp · Upgrade to 5.3.6, 5.2.13, 5.1.7 or 2 more by release line · >= 5.3.0, < 5.3.6; >= 5.2.0, < 5.2.13; >= 5.0.0, < 5.1.7; >= 4.6.0, < 4.6.4; < 4.5.11 · CVE-2026-48820 · GHSA-wpvj-hjcr-h3p2
PyPI joserfc · Upgrade to 1.6.7 or later · >= 1.3.4, < 1.6.7 · CVE-2026-48990 · GHSA-wphv-vfrh-23q5 · amended
npm better-helperjs · Upgrade to 3.0.6 or later · <= 3.0.5 · GHSA-3p34-w4f6-5xh2 · amended
Packagist php-standard-library/php-standard-library +1 · Upgrade all 2 to 6.2.1 or 6.1.2 by release line · >= 6.1.0, < 6.1.2; >= 6.2.0, < 6.2.1 · CVE-2026-48979 · GHSA-pw9p-jvrm-f7rm
npm muhammara · Upgrade to 6.0.5 or later · < 6.0.5 · CVE-2026-125107 · GHSA-fhp4-pr5j-46m5 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.