Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
5601–5625 of 30,985 matching · newest first
FilePerms::WRITE host restrictioncrates.io wasmtime-wasi · Upgrade to 44.0.2, 36.0.10 or 24.0.9 by release line · >= 37.0.0, < 44.0.2; >= 25.0.0, < 36.0.10; < 24.0.9 · CVE-2026-47261 · GHSA-2r75-cxrj-cmph
npm mcp-server-kubernetes · Upgrade to 3.7.0 or later · <= 3.6.2 · CVE-2026-47250 · GHSA-6mx4-4h42-r8vh · amended
npm claude-mem · Upgrade to 12.0.0 or later · < 12.0.0 · CVE-2026-11330 · GHSA-5gvr-v6qv-h5mm · amended
Go github.com/klever-io/klever-go · Upgrade to 1.7.18 or later · < 1.7.18 · CVE-2026-47249 · GHSA-w342-mj6g-v9c4
Go github.com/siderolabs/omni · Upgrade to 1.7.3 or 1.6.6 by release line · >= 1.3.0, < 1.6.6; >= 1.7.0, < 1.7.3 · CVE-2026-45726 · GHSA-wv8c-6mx2-xf4j
talos_version in CreateSchematicGo github.com/siderolabs/omni · Upgrade to 1.7.3 or 1.6.6 by release line · < 1.6.6; >= 1.7.0, < 1.7.3 · CVE-2026-45723 · GHSA-c66c-vq6w-fvh5
Go github.com/siderolabs/omni · Upgrade to 1.7.3 or 1.6.6 by release line · < 1.6.6; >= 1.7.0, < 1.7.3 · CVE-2026-45720 · GHSA-5x9f-6vg5-qg4m
PyPI vantage6 · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2024-27928 · GHSA-4c5c-2vc3-x5w2 · amended
PyPI vantage6 · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2024-24769 · GHSA-5549-c5q7-fj65 · amended
PyPI ansible-core · Upgrade to 2.21.1rc1 (pre-release), 2.20.7rc1 (pre-release), 2.19.11rc1 (pre-release) or 2 more by release line · < 2.16.19rc1; >= 2.17.0b1, < 2.18.18rc1; >= 2.19.0b1, < 2.19.11rc1; >= 2.20.0b1, < 2.20.7rc1; >= 2.21.0b1, < 2.21.1rc1 · CVE-2026-11332 · GHSA-w8p5-mx5w-cpqj · amended
Maven org.keycloak:keycloak-services · Upgrade to 26.7.0 or later · < 26.7.0 · CVE-2026-9088 · GHSA-6g26-7cx5-mrrg
PyPI ironic · Upgrade to 37.0.0 or later · >= 32.0.0, < 37.0.0 · CVE-2026-50589 · GHSA-q3g8-rjrx-59ph · amended
PyPI stata-mcp · Upgrade to 1.17.3 or later · < 1.17.3 · CVE-2026-47708 · GHSA-4p62-hqp5-g644 · amended
Go github.com/AdguardTeam/dnsproxy · Upgrade to 0.81.3 or later · < 0.81.3 · +1 more package · CVE-2026-47703 · GHSA-xgx4-4h9w-53pv
npm @cap-js/openapi · Upgrade to 1.4.2 or later · >= 1.4.1, <= 1.4.1 · GHSA-jpvj-wpmj-h7rv · amended
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or later · >= 6.7.0.0, < 6.7.10.1 · CVE-2026-48013 · GHSA-gq96-5pfx-f4vc
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48015 · GHSA-xvhc-gm7j-mhmc
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48016 · GHSA-9v5m-39wh-5chq
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48014 · GHSA-f8q6-3g5w-jjr6
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or later · >= 6.7.3.0, < 6.7.10.1 · CVE-2026-48012 · GHSA-4x3x-869w-xx3m
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48011 · GHSA-7w52-7jvm-m9vw
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48010 · GHSA-v39m-97p8-gqg7
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48009 · GHSA-8v9p-g828-v98f
Packagist shopware/core +1 · Upgrade all 2 to 6.7.10.1 or 6.6.10.18 by release line · >= 6.7.0.0, < 6.7.10.1; < 6.6.10.18 · CVE-2026-48008 · GHSA-gv8p-48fr-4fxg
RubyGems spree · Upgrade to 5.4.3, 5.3.6 or 5.2.8 by release line · >= 5.2.0, < 5.2.8; >= 5.3.0, < 5.3.6; >= 5.4.0, < 5.4.3 · GHSA-xf4v-w5x5-pv79
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.