Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52809 · GHSA-5c3f-6486-3g7g
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
4701–4725 of 30,967 matching · newest first
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52809 · GHSA-5c3f-6486-3g7g
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52808 · GHSA-268j-37xf-pp52
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52807 · GHSA-vcm5-gvmp-78mp · amended
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52806 · GHSA-qf6p-p7ww-cwr9
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52805 · GHSA-g2f5-gjr4-qjvm
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52804 · GHSA-4565-r4x7-hg8j
Go gogs.io/gogs · Upgrade to 0.14.3 or later · <= 0.14.2 · CVE-2026-52802 · GHSA-xxhq-69mf-w8cr
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52801 · GHSA-wv27-2vqp-j7g5
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52800 · GHSA-pwx3-qcgw-vh7h
Go gogs.io/gogs · Upgrade to 0.14.3 or later · <= 0.14.2 · CVE-2026-52799 · GHSA-p9f5-h3rx-j5qw
.ipynb PreviewGo gogs.io/gogs · Upgrade to 0.14.3 or later · <= 0.14.2 · CVE-2026-52798 · GHSA-jq8v-rmf6-65jw
Go gogs.io/gogs · Upgrade to 0.14.3 or later · <= 0.14.2 · CVE-2026-52796 · GHSA-4j89-2c4f-44c6
npm @actual-app/web · Upgrade to 26.6.0 or later · < 26.6.0 · CVE-2026-50179 · GHSA-xqjm-27pc-rvwm · amended
npm @budibase/backend-core · Upgrade to 3.39.9 or later · < 3.39.9 · CVE-2026-54353 · GHSA-gfq7-5x4g-3xhf · amended
npm @budibase/server · Upgrade to 3.39.9 or later · < 3.39.9 · CVE-2026-54352 · GHSA-w7mq-r738-x278 · amended
npm @budibase/server · Upgrade to 3.39.9 or later · < 3.39.9 · CVE-2026-54351 · GHSA-rgvg-3wpc-h44p · amended
npm @actual-app/sync-server · Upgrade to 26.6.0 or later · <= 26.5.2 · CVE-2026-49229 · GHSA-cq9c-6w48-qmfg · amended
npm @budibase/server · Upgrade to 3.39.0 or later · < 3.39.0 · CVE-2026-50137 · GHSA-35c4-rvc8-frhm · amended
PyPI vllm · Upgrade to 0.22.1 or later · < 0.22.1 · CVE-2026-54232 · GHSA-jrf6-vqxq-pjv2
npm @budibase/server · Upgrade to 3.39.2 or later · < 3.39.2 · CVE-2026-50136 · GHSA-jj36-r9w3-3pfh · amended
npm @budibase/server · Upgrade to 3.39.0 or later · < 3.39.0 · CVE-2026-50132 · GHSA-v7j5-vc4m-723w · amended
PyPI zeroconf · Upgrade to 0.149.16 or later · < 0.149.16 · CVE-2026-48487 · GHSA-qc2x-6f54-m6h9 · amended
npm devbridge-autocomplete · Upgrade to 2.0.1 or later · <= 2.0.0 · GHSA-hvqh-jw65-wcpq · amended
npm scim-patch · Upgrade to 0.9.1 or later · <= 0.9.0 · CVE-2026-48170 · GHSA-9m6g-wc8r-q59c · amended
Go github.com/juev/nebula-mesh · Upgrade to 0.3.2 or later · <= 0.3.1 · GHSA-ghmh-jhmj-wcmf
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.