Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
5676–5700 of 30,985 matching · newest first
npm @remix-run/router · Upgrade to 1.23.3 or later · >= 1.3.0, < 1.23.3 · +1 more package · CVE-2026-40181 · GHSA-2j2x-hqr9-3h42 · amended
PyPI aiohttp · Upgrade to 3.14.0 or later · < 3.14.0 · CVE-2026-34993 · GHSA-jg22-mg44-37j8 · amended
npm react-router · Upgrade to 7.13.2 or later · >= 7.7.0, < 7.13.2 · CVE-2026-33245 · GHSA-8646-j5j9-6r62 · amended
npm react-router · Upgrade to 7.13.2 or later · >= 7.5.1, < 7.13.2 · CVE-2026-33244 · GHSA-f22v-gfqf-p8f3 · amended
Packagist backpack/crud · Upgrade to 5.0.13, 4.1.69 or 4.0.63 by release line · >= 5.0.0, < 5.0.13; >= 4.1.0, < 4.1.69; < 4.0.63 · CVE-2022-31114 · GHSA-m8xx-3x29-84h8
PyPI docling · Upgrade to 2.91.0 or later · < 2.91.0 · CVE-2026-44017 · GHSA-cjqg-rq2h-2fvj · amended
Go github.com/osrg/gobgp/v4 · Upgrade to 4.4.0 or later · < 4.4.0 · CVE-2026-37462 · GHSA-pw7p-7fqv-hpj8
npm launch-editor · Upgrade to 2.9.0 or later · <= 2.8.2 · +1 more package · CVE-2024-52011 · GHSA-c27g-q93r-2cwf · amended
PyPI django · Upgrade to 6.0.6 or 5.2.15 by release line · < 5.2.15; >= 6.0.0, < 6.0.6 · CVE-2026-48587 · GHSA-923m-gv2p-w5qp · amended
PyPI transformers · Upgrade to 5.5.0 or later · < 5.5.0 · CVE-2026-5241 · GHSA-fgcw-684q-jj6r · amended
PyPI daphne · Upgrade to 4.2.2 or later · < 4.2.2 · CVE-2026-44546 · GHSA-xh68-hfp5-5x5m · amended
PyPI django · Upgrade to 6.0.6 or 5.2.15 by release line · < 5.2.15; >= 6.0.0, < 6.0.6 · CVE-2026-8404 · GHSA-8cjm-8mp7-r2xf · amended
PyPI django · Upgrade to 6.0.6 or 5.2.15 by release line · < 5.2.15; >= 6.0.0, < 6.0.6 · CVE-2026-6873 · GHSA-h7pc-vwp9-298g · amended
STARTTLS handshakePyPI django · Upgrade to 6.0.6 or 5.2.15 by release line · >= 5.2, < 5.2.15; >= 6.0, < 6.0.6 · CVE-2026-7666 · GHSA-mm6v-q8q9-pgcf · amended
PyPI daphne · Upgrade to 4.2.2 or later · < 4.2.2 · CVE-2026-44545 · GHSA-rrc9-mx66-ffcm · amended
PyPI django · Upgrade to 6.0.6 or 5.2.15 by release line · >= 5.2.0, < 5.2.15; >= 6.0.0, < 6.0.6 · CVE-2026-35193 · GHSA-qpc8-7fxc-cm4p · amended
Maven org.apache.mina:mina-core · Upgrade to 2.2.8, 2.1.13 or 2.0.29 by release line · >= 2.2.0, < 2.2.8; >= 2.1.0, < 2.1.13; < 2.0.29 · CVE-2026-47065 · GHSA-v3pr-hxpr-mfm8
PyPI mlflow · Upgrade to 3.11.0 or later · < 3.11.0 · CVE-2026-4035 · GHSA-g35p-px32-whv6 · amended
npm @wonderwhy-er/desktop-commander · Upgrade to 0.2.39 or later · < 0.2.39 · CVE-2026-10691 · GHSA-r87g-78mx-3wg4 · amended
PyPI code-index-mcp · Upgrade to 2.14.1 or later · < 2.14.1 · CVE-2026-10692 · GHSA-647r-72hf-4vmh · amended
PyPI pycti · Upgrade to 7.260227.0 or later · < 7.260227.0 · CVE-2026-35212 · GHSA-rg6r-x26x-63vq
PyPI openmed · Upgrade to 1.5.2 or later · < 1.5.2 · CVE-2026-47117 · GHSA-m3v4-v5gx-7wf5 · amended
Maven org.apache.calcite:calcite-core · Upgrade to 1.42.0 or later · >= 1.5.0, < 1.42.0 · CVE-2026-46718 · GHSA-c2rv-hwqm-wjpg
PyPI prefect · Upgrade to 3.6.22.dev7 (pre-release) or later · < 3.6.22.dev7 · CVE-2026-3514 · GHSA-c635-393c-hcx2 · amended
PyPI mlflow · Upgrade to 3.11.0rc0 (pre-release) or later · < 3.11.0rc0 · CVE-2026-3198 · GHSA-r5m9-wm49-959f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.