High, CVSS 8.3
PraisonAI Slack app_mention bypasses configured user/channel authorization
PyPI praisonai · Upgrade to 4.6.59 or later · >= 3.11.0, <= 4.6.58 · CVE-2026-56835 · GHSA-qvpf-j64c-jmhr · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 965 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
- Critical
- 66 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
5051–5075 of 30,970 matching · newest first
- High, CVSS 8.2
PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
PyPI praisonai · Upgrade to 4.6.59 or later · >= 4.5.112, <= 4.6.58 · CVE-2026-56836 · GHSA-5qw8-f2g9-ff29 · amended
- High, CVSS 8.3
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
PyPI praisonai · Upgrade to 4.6.59 or later · >= 3.10.0, <= 4.6.58 · +1 more package · CVE-2026-57112 · GHSA-vmf9-xx9w-86wx · amended
- High, CVSS 7.5
PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal
PyPI praisonai · Upgrade to 4.6.59 or later · >= 3.8.1, <= 4.6.58 · CVE-2026-56833 · GHSA-22cj-m4wf-fv2c · amended
- High, CVSS 8.8
PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals
PyPI praisonai · Upgrade to 4.6.59 or later · >= 4.5.2, <= 4.6.58 · CVE-2026-56832 · GHSA-8579-rgg5-ph2m · amended
- Medium, CVSS 4.2
ZITADEL: Missing Token Audience Validation (
aud) in JWT IdP ProviderGo github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260615132747-d184e976fc79 (pre-release) or later · < 1.80.0-v2.20.0.20260615132747-d184e976fc79 · CVE-2026-55669 · GHSA-g5h5-m4hm-xjrr
- Medium, CVSS 4.2
ZITADEL: Missing Token Lifecyle Validation (
expandiat) in JWT IdP ProviderGo github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260615122908-fad02c6d9f45 (pre-release) or later · < 1.80.0-v2.20.0.20260615122908-fad02c6d9f45 · CVE-2026-56664 · GHSA-wxg7-w2v3-w38g
- High, CVSS 7.4
ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260616131956-0973b074b488 (pre-release) or later · < 1.80.0-v2.20.0.20260616131956-0973b074b488 · CVE-2026-55672 · GHSA-xqxv-4jc2-x56x
- Medium, CVSS 4.3
PraisonAI: Unauthenticated Event Injection via SSE
/publishEndpointPyPI praisonaiagents · Upgrade to 1.6.59 or later · <= 1.6.48 · CVE-2026-57128 · GHSA-35w5-pcw4-jx94 · amended
- Low, CVSS 2.3
ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20260615092437-6082e59d47c1 (pre-release) or later · < 1.80.0-v2.20.0.20260615092437-6082e59d47c1 · CVE-2026-55670 · GHSA-6x8v-2fq5-2229
- High, CVSS 7.5
JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56740 · GHSA-47qp-hqvx-6r3f
- High, CVSS 7.5
JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry
Maven org.jline:jline-remote-telnet · Upgrade to 4.2.1, 4.0.16 or 3.30.14 by release line · >= 4.1.0, < 4.2.1; >= 4.0.0, < 4.0.16; < 3.30.14 · CVE-2026-56741 · GHSA-2r2c-cx56-8933
- Medium, CVSS 4.8
TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes
npm tinacms · Upgrade to 3.9.3 or later · < 3.9.3 · +1 more package · CVE-2026-55661 · GHSA-2vcc-5v34-9jc8 · amended
- High, CVSS 8.2
Karate Mock Server RCE via embedded expression evaluation of request-derived data
Maven io.karatelabs:karate-core · Upgrade to 2.1.0 or later · >= 2.0.1, <= 2.0.10 · GHSA-2c85-rfcc-g74j
- Medium, CVSS 6.9
Hydro: Insufficient session expiration when recreating sessions
npm hydrooj · Upgrade to 5.0.2 or later · >= 4.10.4, <= 5.0.1 · CVE-2026-55617 · GHSA-94jp-7776-qj6q · amended
- High, CVSS 7.5
http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in
fixRequestBodynpm http-proxy-middleware · Upgrade to 4.1.1 or 3.0.7 by release line · >= 3.0.4, < 3.0.7; >= 4.0.0, < 4.1.1 · CVE-2026-55603 · GHSA-gcq2-9pq2-cxqm · amended
- Medium, CVSS 6.9
http-proxy-middleware
routerhost+path substring matching allows Host-header-driven backend routing bypassnpm http-proxy-middleware · Upgrade to 4.1.0, 3.0.6 or 2.0.10 by release line · >= 4.0.0, < 4.1.0; >= 3.0.0, < 3.0.6; >= 0.16.0, < 2.0.10 · CVE-2026-55602 · GHSA-64mm-vxmg-q3vj · amended
- Medium, CVSS 4.8
NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
NuGet ncalc.core +1 · Upgrade all 2 to 6.1.1 or later · < 6.1.1 · CVE-2026-55254 · GHSA-3w5p-95mh-gq75
- High, CVSS 8.1
piscina: Prototype Pollution Gadget → RCE via inherited options.filename
npm piscina · Upgrade to 6.0.0-rc.2 (pre-release), 5.2.0 or 4.9.3 by release line · >= 5.0.0-alpha.0, <= 5.1.4; <= 4.9.2; >= 6.0.0-rc.1, < 6.0.0-rc.2 · CVE-2026-55388 · GHSA-x9g3-xrwr-cwfg · amended
- High, CVSS 8.7
Docker MCP Gateway: Argument injection via OCI image label YAML
Go github.com/docker/mcp-gateway · Upgrade to 0.42.2 or later · >= 0.21.0, < 0.42.2 · CVE-2026-55887 · GHSA-r2xf-7jw5-pjg6
- Medium, CVSS 6.9
jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()
npm jodit · Upgrade to 4.12.26 or later · < 4.12.26 · CVE-2026-55886 · GHSA-vpmm-x3fm-qr5c · amended
- High, CVSS 7.5
Gotenberg: SSRF via LibreOffice document processing
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.34.0 or later · < 8.34.0 · CVE-2026-55229 · GHSA-2mrg-35hw-x3x9
- Medium, CVSS 5.4
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
Maven io.strimzi:strimzi · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-55226 · GHSA-r427-j2h7-wv3m
- High, CVSS 8.0
Strimzi: Cross-namespace privilege escalation via
Kafka.spec.entityOperatorMaven io.strimzi:strimzi · Upgrade to 1.0.1 or later · <= 1.0.0 · CVE-2026-55225 · GHSA-mw9r-p8xp-wx96
- Medium, CVSS 6.0
OpenClaw: Tool group policy callers could accept unvalidated group IDs
npm openclaw · Upgrade to 2026.4.25 or later · <= 2026.4.24 · CVE-2026-53863 · GHSA-985f-72mj-8gf7 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.