Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 965 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
Critical: 66 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

4976–5000 of 30,970 matching · newest first

ExploitedClear filters

Medium, CVSS 6.518 Jun 2026
NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)
Maven nl.nl-portal:documenten-api · Upgrade to 3.0.3 or later · < 3.0.3 · CVE-2026-54683 · GHSA-jr45-52cw-69h5
18 Jun 2026Evidence →
Medium, CVSS 4.218 Jun 2026
Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape
Go github.com/daytonaio/daytona · Upgrade to 0.186.0 or later · <= 0.185.0 · CVE-2026-54319 · GHSA-fjv8-j4p5-cr9m
18 Jun 2026Evidence →
High, CVSS 8.618 Jun 2026
MCP Toolbox for Databases: authenticated authorization bypass
Go github.com/googleapis/mcp-toolbox · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-11719 · GHSA-5gf6-gc35-xjpc
18 Jun 2026Evidence →
Critical, CVSS 9.318 Jun 2026
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
Go github.com/googleapis/mcp-toolbox · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-11718 · GHSA-wcpr-6g7x-p44r
18 Jun 2026Evidence →
Critical, CVSS 9.318 Jun 2026
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
Go github.com/googleapis/mcp-toolbox · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-11717 · GHSA-8fcc-w5hv-4gxv
18 Jun 2026Evidence →
Low, CVSS 2.118 Jun 2026
OpenFGA Improper Policy Enforcement
Go github.com/openfga/openfga · Upgrade to 1.18.0 or later · < 1.18.0 · CVE-2026-55170 · GHSA-cf98-j28v-49v6
18 Jun 2026Evidence →
Medium, CVSS 6.118 Jun 2026
tract-nnef: integer overflow in NNEF .dat tensor parser yields an out-of-bounds read on model load
crates.io tract-nnef · Upgrade to 0.23.1, 0.22.2 or 0.21.16 by release line · >= 0.23.0, < 0.23.1; >= 0.22.0, < 0.22.2; < 0.21.16 · CVE-2026-55093 · GHSA-x5mv-8wgw-29hg
18 Jun 2026Evidence →
High, CVSS 7.518 Jun 2026
Pipecat: Telephony WebSocket /ws Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
PyPI pipecat-ai · Upgrade to 1.4.0 or later · >= 0.0.77, < 1.4.0 · CVE-2026-54695 · GHSA-j8cv-x86q-rj85 · amended
18 Jun 2026Evidence →
Medium, CVSS 6.918 Jun 2026
opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication
Go github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver · Upgrade to 0.151.0 or later · <= 0.150.0 · CVE-2026-55701 · GHSA-w5cv-pw74-4rxc
18 Jun 2026Evidence →
High, CVSS 7.118 Jun 2026
Kirby: pages.access permission is not checked in the site/find REST API route
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54005 · GHSA-r3w8-2c5r-h9j9
18 Jun 2026Evidence →
Medium, CVSS 6.318 Jun 2026
Kirby: Access to files of top-level drafts is not protected by permissions
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54004 · GHSA-89cp-7p28-jffg
18 Jun 2026Evidence →
Critical, CVSS 9.118 Jun 2026
Kirby: External Initialization of the Panel on reverse proxy setups with the Forwarded header
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54003 · GHSA-whxw-24jc-cwmv
18 Jun 2026Evidence →
High, CVSS 8.518 Jun 2026
Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in Dom::sanitize()
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54002 · GHSA-wr9h-4r83-f4v6
18 Jun 2026Evidence →
Medium, CVSS 6.918 Jun 2026
Kirby: Request header injection in Http\Remote
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-50188 · GHSA-4v4h-m2qq-ppgw
18 Jun 2026Evidence →
High, CVSS 7.418 Jun 2026
Kirby: Self cross-site scripting (self-XSS) in the writer field
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-49276 · GHSA-rhj6-r49h-5932
18 Jun 2026Evidence →
Medium, CVSS 5.318 Jun 2026
Kirby: pages.access permission is not checked in the pages picker for parent pages
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-49274 · GHSA-23q2-54qv-rq5x
18 Jun 2026Evidence →
Medium, CVSS 5.318 Jun 2026
opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token
Go github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter · Upgrade to 0.154.0 or later · < 0.154.0 · CVE-2026-47256 · GHSA-4jvg-4jfx-fmhc
18 Jun 2026Evidence →
Critical, CVSS 9.318 Jun 2026
Jupyter Server: Stored XSS in NbconvertFileHandler / NbconvertPostHandler via missing sandbox CSP
PyPI jupyter-server · Upgrade to 2.20.0 or later · <= 2.19.0 · CVE-2026-44727 · GHSA-fcw5-x6j4-ccmp · amended
18 Jun 2026Evidence →
Low, CVSS 2.218 Jun 2026
BBOT: Symlink-Following Arbitrary Write via github_workflows Module
PyPI bbot · Upgrade to 2.8.5 or later · >= 2.0.0, <= 2.8.4 · CVE-2026-12567 · GHSA-rvp7-w75q-9fv2 · amended
18 Jun 2026Evidence →
Medium, CVSS 6.518 Jun 2026
BBOT: Arbitrary File Write in postman_download Module
PyPI bbot · Upgrade to 2.8.6 or later · >= 2.1.0, <= 2.8.5 · CVE-2026-12568 · GHSA-m54h-vhf9-3w3m · amended
18 Jun 2026Evidence →
Low, CVSS 3.118 Jun 2026
BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing
PyPI bbot · Upgrade to 2.8.5 or later · >= 2.0.0, <= 2.8.4 · CVE-2026-12566 · GHSA-3mp7-vp6j-2mxx · amended
18 Jun 2026Evidence →
Medium, CVSS 5.318 Jun 2026
BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284
PyPI bbot · Upgrade to 2.8.5 or later · >= 2.3.1, <= 2.8.4 · CVE-2026-12565 · GHSA-3vgw-585j-4m45 · amended
18 Jun 2026Evidence →
Medium, CVSS 6.618 Jun 2026
OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags
npm openclaw · Upgrade to 2026.5.6 or later · <= 2026.5.5 · CVE-2026-53861 · GHSA-c226-q6fx-6j6c · amended
18 Jun 2026Evidence →
Medium, CVSS 4.818 Jun 2026
Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr
Packagist getgrav/grav · Upgrade to 2.0.0-rc.9 (pre-release) or later · <= 2.0.0-rc.8 · CVE-2026-55890 · GHSA-pmf8-g7c8-7v54
18 Jun 2026Evidence →
Medium, CVSS 4.318 Jun 2026
praisonai-platform: Authorization Bypass Through User-Controlled Key
PyPI praisonai-platform · Upgrade to 0.1.8 or later · < 0.1.8 · CVE-2026-58653 · GHSA-2fjj-qqg8-fg7x · amended
18 Jun 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

MCP Toolbox for Databases: authenticated authorization bypass

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

OpenFGA Improper Policy Enforcement

tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication

Kirby: `pages.access` permission is not checked in the `site/find` REST API route

Kirby: Access to files of top-level drafts is not protected by permissions

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

Kirby: Request header injection in `Http\Remote`

Kirby: Self cross-site scripting (self-XSS) in the writer field

Kirby: `pages.access` permission is not checked in the pages picker for parent pages

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

BBOT: Symlink-Following Arbitrary Write via github_workflows Module

BBOT: Arbitrary File Write in postman_download Module

BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags

Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

praisonai-platform: Authorization Bypass Through User-Controlled Key

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence