Medium, CVSS 6.8
Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets
Packagist getgrav/grav · Upgrade to 1.7.53 or later · < 1.7.53 · CVE-2026-55885 · GHSA-2f86-9cp8-6hcf
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 965 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
- Critical
- 66 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
5001–5025 of 30,970 matching · newest first
- Medium, CVSS 6.9
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
npm @bitbonsai/mcpvault · Upgrade to 0.11.4 or later · < 0.11.4 · CVE-2026-57441 · GHSA-j99q-93c9-h869 · amended
- Medium, CVSS 6.9
pypdf: Missing stream length values ignore defined limits
PyPI pypdf · Upgrade to 6.13.3 or later · < 6.13.3 · CVE-2026-57204 · GHSA-jm82-fx9c-mx94 · amended
- High, CVSS 7.4
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
npm undici · Upgrade to 8.5.0 or 7.28.0 by release line · >= 7.23.0, < 7.28.0; >= 8.0.0, < 8.5.0 · CVE-2026-9697 · GHSA-vmh5-mc38-953g · amended
- Medium, CVSS 5.9
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
npm undici · Upgrade to 8.5.0 or 7.28.0 by release line · >= 7.0.0, < 7.28.0; >= 8.0.0, < 8.5.0 · CVE-2026-9678 · GHSA-pr7r-676h-xcf6 · amended
- High, CVSS 7.5
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
npm undici · Upgrade to 8.5.0 or later · >= 8.0.0, < 8.5.0 · CVE-2026-9675 · GHSA-38rv-x7px-6hhq · amended
- High, CVSS 7.1
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
npm nodemailer · Upgrade to 9.0.1 or later · <= 9.0.0 · CVE-2026-82659 · GHSA-p6gq-j5cr-w38f · amended
- Critical, CVSS 9.3
python-statemachine SCXML Eval Injection
PyPI python-statemachine · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2026-47103 · GHSA-v4jc-pm6r-3vj8 · amended
- Medium, CVSS 5.1
DOMPurify: Permanent
ALLOWED_ATTRpollution viasetConfig()bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)npm dompurify · Upgrade to 3.4.11 or later · <= 3.4.10 · CVE-2026-65898 · GHSA-cmwh-pvxp-8882 · amended
- Critical, CVSS 9.8
praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57147 · GHSA-cwj8-7gp2-ggcw · amended
- High, CVSS 8.8
PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.110, < 4.6.61 · CVE-2026-57144 · GHSA-6jcq-6546-qrrw · amended
- High, CVSS 8.2
PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
PyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57132 · GHSA-8ccj-p46r-jwqq · amended
- High, CVSS 8.8
PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
PyPI praisonaiagents · Upgrade to 1.6.61 or later · < 1.6.61 · CVE-2026-57143 · GHSA-4pcv-mg8v-vrgf · amended
- Critical, CVSS 9.8
praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57148 · GHSA-f38v-77qj-h4jq · amended
- Critical, CVSS 9.1
PraisonAI: Arbitrary File Read/Write via
multieditTool Without Path ValidationPyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57145 · GHSA-29w3-p9w9-wc47 · amended
- High, CVSS 7.5
PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.115, < 4.6.61 · CVE-2026-57146 · GHSA-jxcw-qp4h-6jfq · amended
- High, CVSS 7.8
PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.87, < 4.6.61 · CVE-2026-57142 · GHSA-7qw2-w5rc-37x2 · amended
- High, CVSS 8.8
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.1, <= 1.7.1 · CVE-2026-57133 · GHSA-5jv7-2mjm-h6qj · amended
- High, CVSS 8.8
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57137 · GHSA-h2w2-v7j6-xqm4 · amended
- Critical, CVSS 9.8
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.0, <= 1.7.1 · CVE-2026-57139 · GHSA-j4f3-55x4-r6q2 · amended
- Critical, CVSS 9.4
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation
npm praisonai · Upgrade to 1.7.2 or later · >= 1.6.0, <= 1.7.1 · CVE-2026-57140 · GHSA-9752-mhqh-h34f · amended
- Critical, CVSS 9.8
PraisonAI: Remote Code Execution via Sandbox Escape in
codeModeToolnpm praisonai · Upgrade to 1.7.2 or later · <= 1.7.1 · CVE-2026-57141 · GHSA-p69m-4f92-2v84 · amended
- High, CVSS 8.8
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
npm praisonai · Upgrade to 1.7.2 or later · >= 1.2.3, <= 1.7.1 · CVE-2026-57136 · GHSA-vjv9-7m7j-h833 · amended
- Critical, CVSS 9.9
npm PraisonAI codeMode sandbox escape via Function constructor
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57138 · GHSA-vmmj-pfw7-fjwp · amended
- High, CVSS 7.6
npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
npm praisonai · Upgrade to 1.7.2 or later · >= 1.2.3, <= 1.7.1 · CVE-2026-57135 · GHSA-gqmf-56h7-rrpf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.