Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 965 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
Critical: 66 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

5101–5125 of 30,970 matching · newest first

ExploitedClear filters

Medium, CVSS 5.717 Jun 2026
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
Go github.com/projectcapsule/capsule · Upgrade to 0.13.6 or later · >= 0.13.0, < 0.13.6 · CVE-2026-55636 · GHSA-gwxr-7h77-7777
17 Jun 2026Evidence →
Medium, CVSS 5.317 Jun 2026
webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
npm webpack-dev-server · Upgrade to 5.2.5 or later · < 5.2.5 · CVE-2026-9595 · GHSA-mx8g-39q3-5c79 · amended
17 Jun 2026Evidence →
High, CVSS 7.517 Jun 2026
Multer vulnerable to Denial of Service via deeply nested field names
npm multer · Upgrade to 3.0.0-alpha.2 (pre-release) or 2.2.0 by release line · >= 1.0.0, < 2.2.0; >= 3.0.0-alpha.1, < 3.0.0-alpha.2 · CVE-2026-5079 · GHSA-72gw-mp4g-v24j · amended
17 Jun 2026Evidence →
Medium, CVSS 5.317 Jun 2026
Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
npm multer · Upgrade to 3.0.0-alpha.2 (pre-release) or 2.2.0 by release line · >= 2.0.0-alpha.1, < 2.2.0; >= 3.0.0-alpha.1, < 3.0.0-alpha.2 · CVE-2026-5038 · GHSA-3p4h-7m6x-2hcm · amended
17 Jun 2026Evidence →
Medium, CVSS 5.117 Jun 2026
Gitea: Open Redirect via redirect_to
Go github.com/go-gitea/gitea · Upgrade to 1.26.0 or later · <= 1.25.4 · CVE-2026-25779 · GHSA-j5r2-4c8j-xc3m
17 Jun 2026Evidence →
High, CVSS 8.717 Jun 2026
Gitea: Stored XSS via glTF extensionsRequired in Gitea 3D File Viewer
Go code.gitea.io/gitea · Upgrade to 1.26.0 or later · >= 1.25.0, < 1.26.0 · CVE-2026-28737 · GHSA-9cpj-qc93-vw8v
17 Jun 2026Evidence →
High, CVSS 8.117 Jun 2026
Gitea: Public-only tokens bypass private-resource restrictions on /api/v1/user self routes
Go code.gitea.io/gitea · Upgrade to 1.26.2 or later · >= 1.22.3, <= 1.26.1 · CVE-2026-24791 · GHSA-wrr5-99h5-gq57
17 Jun 2026Evidence →
High, CVSS 8.117 Jun 2026
Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration
Go code.gitea.io/gitea · Upgrade to 1.26.0 or later · < 1.26.0 · CVE-2026-22555 · GHSA-fhx7-m96w-mv29
17 Jun 2026Evidence →
Medium, CVSS 6.517 Jun 2026
Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join
Go github.com/daytonaio/daytona · Upgrade to 0.185.0 or later · <= 0.184.0 · CVE-2026-54324 · GHSA-qwxf-2m7m-2m3x
17 Jun 2026Evidence →
Medium, CVSS 6.017 Jun 2026
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
npm @anthropic-ai/claude-code · Upgrade to 2.1.163 or later · >= 0.2.54, < 2.1.163 · CVE-2026-54316 · GHSA-fg94-h982-f3mm · amended
17 Jun 2026Evidence →
Medium, CVSS 5.317 Jun 2026
Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
PyPI open-webui · Upgrade to 0.8.11 or later · <= 0.8.10 · CVE-2026-54022 · GHSA-8788-j68r-3cgh · amended
17 Jun 2026Evidence →
Medium, CVSS 6.317 Jun 2026
Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54021 · GHSA-9rpj-v7hf-vv2w · amended
17 Jun 2026Evidence →
Medium, CVSS 6.517 Jun 2026
Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54019 · GHSA-p5cp-r7rg-qpxc · amended
17 Jun 2026Evidence →
High, CVSS 7.717 Jun 2026
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54018 · GHSA-jrfp-m64g-pcwv · amended
17 Jun 2026Evidence →
High, CVSS 7.717 Jun 2026
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54017 · GHSA-r2wg-2mcr-66rv · amended
17 Jun 2026Evidence →
High, CVSS 7.117 Jun 2026
OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-53840 · GHSA-rjxq-qqhf-8hwh · amended
17 Jun 2026Evidence →
Medium, CVSS 4.317 Jun 2026
Open WebUI BOLA: search_knowledge_files Allows Unauthorized Knowledge Base File Enumeration
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54016 · GHSA-cx9v-4qj2-jrw6 · amended
17 Jun 2026Evidence →
Medium, CVSS 6.417 Jun 2026
Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54015 · GHSA-4r4w-2wgp-w7cj · amended
17 Jun 2026Evidence →
Medium, CVSS 4.317 Jun 2026
Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54014 · GHSA-j2c8-v969-8r5c · amended
17 Jun 2026Evidence →
High, CVSS 7.617 Jun 2026
Open WebUI: Stored XSS to Account Takeover via Model Profile Images
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54013 · GHSA-v2qm-5wxj-qhj7 · amended
17 Jun 2026Evidence →
High, CVSS 7.117 Jun 2026
Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54012 · GHSA-vjqm-6gcc-62cr · amended
17 Jun 2026Evidence →
High, CVSS 8.717 Jun 2026
Open WebUI: Stored XSS in Mermaid Markdown Preview
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54011 · GHSA-v8qj-hxv7-mgvv · amended
17 Jun 2026Evidence →
High, CVSS 8.317 Jun 2026
Open WebUI: Forged chat-file link allows cross-user file read and deletion
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54010 · GHSA-vrhc-3fr6-pc3c · amended
17 Jun 2026Evidence →
Medium, CVSS 6.517 Jun 2026
Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54009 · GHSA-wch8-mhj5-9frg · amended
17 Jun 2026Evidence →
High, CVSS 8.517 Jun 2026
Open WebUI: Redirect-Bypass SSRF in OAuth _process_picture_url (incomplete-fix sibling of CVE-2026-45401)
PyPI open-webui · Upgrade to 0.9.6 or later · <= 0.9.5 · CVE-2026-54008 · GHSA-226f-f24g-524w · amended
17 Jun 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm12 Nov 2026
Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in teahy-znrpz-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in mock-data-sdk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in fcefi-wdojs-util (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in tailwindcss-hook-forms (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

Multer vulnerable to Denial of Service via deeply nested field names

Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

Gitea: Open Redirect via redirect_to

Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer

Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Open WebUI: Any authenticated user can read other users' private notes via Socket.IO

Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter

Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion

Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}

Open WebUI: Stored XSS to Account Takeover via Model Profile Images

Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

Open WebUI: Stored XSS in Mermaid Markdown Preview

Open WebUI: Forged chat-file link allows cross-user file read and deletion

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence