Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/opencontainers/runc · Upgrade to 1.4.0-rc.3 (pre-release), 1.3.3 or 1.2.8 by release line · <= 1.2.7; >= 1.3.0-rc.1, <= 1.3.2; >= 1.4.0-rc.1, <= 1.4.0-rc.2 · +1 more package · CVE-2025-52881 · GHSA-cgrx-mc8f-2prm
Go github.com/opencontainers/runc · Upgrade to 1.4.0-rc.3 (pre-release), 1.3.3 or 1.2.8 by release line · >= 1.0.0-rc3, <= 1.2.7; >= 1.3.0-rc.1, <= 1.3.2; >= 1.4.0-rc.1, <= 1.4.0-rc.2 · CVE-2025-52565 · GHSA-qw9x-cqr3-wc7r
Go github.com/opencontainers/runc · Upgrade to 1.4.0-rc.3 (pre-release), 1.3.3 or 1.2.8 by release line · <= 1.2.7; >= 1.3.0-rc.1, <= 1.3.2; >= 1.4.0-rc.1, <= 1.4.0-rc.2 · CVE-2025-31133 · GHSA-9493-h29p-rfm2
PyPI django · Upgrade to 5.2.8, 5.1.14 or 4.2.26 by release line · >= 5.2a1, < 5.2.8; >= 5.0a1, < 5.1.14; < 4.2.26 · CVE-2025-64458 · GHSA-qw25-v68c-qjf3 · amended
PyPI django · Upgrade to 5.2.8, 5.1.14 or 4.2.26 by release line · >= 5.2a1, < 5.2.8; >= 5.0a1, < 5.1.14; < 4.2.26 · CVE-2025-64459 · GHSA-frmv-pr5f-9mcr · amended
Go github.com/3scale-sre/marin3r · Upgrade to 0.13.4 or later · <= 0.13.3 · CVE-2025-64171 · GHSA-gf93-xccm-5g6j
PyPI dosage · Upgrade to 3.2 or later · < 3.2 · CVE-2025-64184 · GHSA-4vcx-3pj3-44m7 · amended
Go github.com/jon4hz/jellysweep · Upgrade to 0.13.0 or later · < 0.13.0 · CVE-2025-64178 · GHSA-xc93-q32j-cpcg
PyPI motioneye · Upgrade to 0.43.1b5 (pre-release) or later · < 0.43.1b5 · CVE-2025-60787 · GHSA-j945-qm58-4gjx · amended
npm @react-native-community/cli +1 · Upgrade all 2 to 20.0.0, 19.1.2 or 18.0.1 by release line · >= 20.0.0-alpha.0, < 20.0.0; >= 19.0.0-alpha.0, < 19.1.2; >= 18.0.0, < 18.0.1 · CVE-2025-11953 · GHSA-399j-vxmf-hjvr · amended
Packagist mantisbt/mantisbt · Upgrade to 2.27.2 or later · < 2.27.2 · CVE-2025-47776 · GHSA-4v8w-gg5j-ph37
PyPI agno · Upgrade to 2.2.2 or later · >= 2.0.0, < 2.2.2 · CVE-2025-64168 · GHSA-vw84-hprm-cxmm · amended
PyPI vtk · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2025-57108
PyPI vtk · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2025-57107
PyPI vtk · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2025-57106
PyPI scrapy · Upgrade to 2.13.4 or later · <= 2.13.3 · +1 more package · CVE-2025-6176 · GHSA-2qfp-q593-8484 · amended
Packagist statamic/cms · Upgrade to 5.22.1 or later · <= 5.22.0 · CVE-2025-64112 · GHSA-g59r-24g3-h7cm
Go github.com/consensys/gnark-crypto · Upgrade to 0.19.2 or 0.18.1 by release line · >= 0.9.1, < 0.18.1; >= 0.19.0, <= 0.19.0 · GHSA-fj2x-735w-74vq
npm n8n · Upgrade to 1.113.0 or later · < 1.113.0 · CVE-2025-62726 · GHSA-xgp7-7qjq-vg47 · amended
Packagist drupal/acquia_dam · Upgrade to 1.1.5 or later · < 1.1.5 · CVE-2025-9954 · GHSA-x957-32v9-m7vg
Packagist drupal/simple_oauth · Upgrade to 6.0.7 or later · >= 6.0.0, < 6.0.7 · CVE-2025-12466 · GHSA-jqmq-fpwv-p925
Packagist drupal/civictheme · Upgrade to 1.12.0 or later · < 1.12.0 · CVE-2025-12082 · GHSA-qxr9-f877-9842
PyPI langgraph-checkpoint-sqlite · Upgrade to 2.0.11 or later · < 2.0.11 · CVE-2025-64104 · GHSA-7p73-8jqx-23r8 · amended
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20251029091250-b284f8474eed (pre-release) or later · < 1.80.0-v2.20.0.20251029091250-b284f8474eed · +1 more package · CVE-2025-64103 · GHSA-cfjq-28r2-4jv5
Go github.com/zitadel/zitadel · Upgrade to 1.80.0-v2.20.0.20251029090735-b8db8cdf9cc8 (pre-release) or later · < 1.80.0-v2.20.0.20251029090735-b8db8cdf9cc8 · +1 more package · CVE-2025-64102 · GHSA-xrw9-r35x-x878
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.