Jenkins has a stored XSS vulnerability in node offline cause description
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.551 or 2.541.2 by release line · >= 2.542, < 2.551; >= 2.483, < 2.541.2 · CVE-2026-27099 · GHSA-85h6-5m3v-gx37
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.551 or 2.541.2 by release line · >= 2.542, < 2.551; >= 2.483, < 2.541.2 · CVE-2026-27099 · GHSA-85h6-5m3v-gx37
PyPI nemo-toolkit · Upgrade to 2.6.1 or later · < 2.6.1 · CVE-2025-33253 · GHSA-hvjw-vp7g-39h5 · amended
PyPI nemo-toolkit · Upgrade to 2.6.1 or later · < 2.6.1 · CVE-2025-33245 · GHSA-9379-mwvr-7wxx · amended
Go github.com/open-policy-agent/opa-envoy-plugin · Upgrade to 1.13.2-envoy-2 (pre-release) or later · <= 1.13.1-envoy · CVE-2026-26205 · GHSA-9f29-v6mm-pw6w
PyPI admesh · Upgrade to 0.98.6 or later · < 0.98.6 · CVE-2026-2653
npm openclaw · Upgrade to 2026.2.14 or later · >= 2026.1.5, < 2026.2.14 · CVE-2026-28456 · GHSA-v6c6-vqqg-w888 · amended
npm openclaw · Upgrade to 2026.2.12 or later · < 2026.2.12 · CVE-2026-28482 · GHSA-5xfq-5mr7-426q · amended
npm tar · Upgrade to 7.5.8 or later · < 7.5.8 · CVE-2026-26960 · GHSA-83g3-92jg-28cx · amended
npm openclaw · Upgrade to 2026.2.13 or later · < 2026.2.13 · GHSA-w5c7-9qqw-6645 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-29610 · GHSA-jqpq-mgvm-f9r6 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-29609 · GHSA-j27p-hq53-9wgc · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-28392 · GHSA-v773-r54f-q32w · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-28463 · GHSA-xvhf-x56f-2hpp · amended
npm openclaw · Upgrade to 2026.2.14 or later · >= 2026.1.8, < 2026.2.14 · CVE-2026-26323 · GHSA-m7x8-2w3w-pr42 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26329 · GHSA-cv7m-c9jx-vg7q · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26327 · GHSA-pv58-549p-qh99 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26325 · GHSA-h3f9-mjwj-w476 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26324 · GHSA-jrvc-8ff5-2f9f · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26322 · GHSA-g6q9-8fvw-f7rf · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26321 · GHSA-8jpq-5h99-ff5r · amended
npm openclaw · Upgrade to 2026.2.14 or later · >= 2026.2.6-0, < 2026.2.14 · CVE-2026-26320 · GHSA-7q2j-c4q5-rm27 · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-26319 · GHSA-4hg8-92x6-h2f3 · amended
npm openclaw · Upgrade to 2026.2.1 or later · >= 2026.1.20, < 2026.2.1 · CVE-2026-28447 · GHSA-qrq5-wjgg-rvqw · amended
npm openclaw · Upgrade to 2026.2.2 or later · < 2026.2.2 · CVE-2026-28473 · GHSA-mqpw-46fh-299h · amended
npm openclaw · Upgrade to 2026.2.1 or later · >= 2026.1.29, < 2026.2.1 · CVE-2026-28448 · GHSA-33rq-m5x2-fvgf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.