Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
npm signalk-server · Upgrade to 2.19.0 or later · < 2.19.0 · CVE-2025-68272 · GHSA-7rqc-ff8m-7j23 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm signalk-server · Upgrade to 2.19.0 or later · < 2.19.0 · CVE-2025-68272 · GHSA-7rqc-ff8m-7j23 · amended
npm signalk-server · Upgrade to 2.19.0 or later · < 2.19.0 · CVE-2025-66398 · GHSA-w3x5-7c4c-66p9 · amended
PyPI feast · Upgrade to 0.54.0 or later · < 0.54.0 · CVE-2025-11157 · GHSA-34wm-4hw7-qfjv · amended
npm serverless · Upgrade to 4.29.3 or later · >= 4.29.0, < 4.29.3 · CVE-2025-69256 · GHSA-rwc2-f344-q6w6 · amended
crates.io theshit · Upgrade to 0.1.1 or later · < 0.1.1 · CVE-2025-69257 · GHSA-95qg-89c2-w5hj
crates.io rustfs · Upgrade to 1.0.0-alpha.78 (pre-release) or later · >= 1.0.0-alpha.13, <= 1.0.0-alpha.77 · CVE-2025-68926 · GHSA-h956-rh7x-ppgj
Packagist facturascripts/facturascripts · Upgrade to 2025.7; some affected versions have no fix yet · <= 2025.4; >= 2025.11, <= 2025.11; >= 2025.41, <= 2025.41; >= 2025.43, <= 2025.43 · CVE-2025-69210 · GHSA-2267-xqcf-gw2m
npm psitransfer · Upgrade to 2.3.1 or later · < 2.3.1 · GHSA-xphh-5v4r-r3rx · amended
Packagist thorsten/phpmyfaq · Upgrade to 4.0.16; some affected versions have no fix yet · < 4.0.16; >= 4.1.0-alpha, <= 4.1.0-beta.2 · CVE-2025-69200 · GHSA-9cg9-4h4f-j6fg
PyPI picklescan · Upgrade to 0.0.34 or later · < 0.0.34 · CVE-2025-71367 · GHSA-46h3-79wf-xr6c · amended
PyPI picklescan · Upgrade to 0.0.34 or later · < 0.0.34 · CVE-2025-71375 · GHSA-955r-x9j8-7rhh · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71372 · GHSA-rrxm-2pvv-m66x · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71365 · GHSA-3329-ghmp-jmv5 · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71373 · GHSA-x843-g5mx-g377 · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71362 · GHSA-r8g5-cgf2-4m4m · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71322 · GHSA-hgrh-qx5j-jfwx · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · GHSA-vqmv-47xg-9wpr · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71320 · GHSA-84r2-jw7c-4r5q · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71323 · GHSA-4675-36f9-wf6r · amended
PyPI picklescan · Upgrade to 0.0.33 or later · < 0.0.33 · CVE-2025-71321 · GHSA-m273-6v24-x4m4 · amended
npm n8n · Upgrade to 2.0.0 or later · >= 1.2.1, < 2.0.0 · CVE-2025-68697 · GHSA-j4p8-h8mh-rh8q · amended
npm n8n · Upgrade to 2.0.0 or later · >= 1.0.0, < 2.0.0 · CVE-2025-68668 · GHSA-62r4-hw23-cc8v · amended
PyPI lmdeploy · Upgrade to 0.11.1 or later · <= 0.11 · CVE-2025-67729 · GHSA-9pf3-7rrr-x5jh · amended
npm n8n · Upgrade to 1.114.0 or later · < 1.114.0 · CVE-2025-61914 · GHSA-58jc-rcg5-95f3 · amended
Go code.gitea.io/gitea · Upgrade to 1.23.0-rc0 (pre-release) or later · < 1.23.0-rc0 · CVE-2025-68939 · GHSA-263q-5cv3-xq9g · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.