Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

551–575 of 30,910 matching · newest first

ExploitedClear filters

Medium, CVSS 6.523 Oct 2026
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
PyPI mlflow +1 · Upgrade all 2 to 3.17.0 or later · >= 3.12.0rc0, < 3.17.0 · CVE-2026-115886 · GHSA-2wqp-q3c6-ccj5 · amended
23 Oct 2026Evidence →
Medium, CVSS 6.023 Oct 2026
LangGraph: Namespace labels containing . reach other namespaces in Postgres and SQLite stores
PyPI langgraph-checkpoint-postgres · Upgrade to 3.1.3 or later · < 3.1.3 · +1 more package · CVE-2026-115883 · GHSA-6hmw-9432-67qq · amended
23 Oct 2026Evidence →
High, CVSS 8.823 Oct 2026
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
npm happy-dom · Upgrade to 21.0.4 or later · >= 17.0.0, <= 21.0.3 · CVE-2026-115895 · GHSA-834v-8h66-3h79 · amended
23 Oct 2026Evidence →
Medium, CVSS 4.723 Oct 2026
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
PyPI filelock · Upgrade to 4.2.1 or later · >= 4.1.0, <= 4.2.0 · CVE-2026-112906 · GHSA-2g95-wg33-c5x2 · amended
23 Oct 2026Evidence →
Medium, CVSS 5.323 Oct 2026
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
PyPI filelock · Upgrade to 4.2.1 or later · >= 4.1.0, <= 4.2.0 · CVE-2026-112914 · GHSA-crv4-6mhj-j5jh · amended
23 Oct 2026Evidence →
High, CVSS 7.123 Oct 2026
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
PyPI filelock · Upgrade to 4.2.1 or later · >= 3.20.4, <= 4.2.0 · CVE-2026-112940 · GHSA-v4x8-3wr5-3wq8 · amended
23 Oct 2026Evidence →
Low, CVSS 3.323 Oct 2026
Fallow: A .* glob segment let an analyzed repository make Fallow test paths in the parent of the project root
npm fallow +4 · Upgrade all 5 to 3.34.0 or later · < 3.34.0 · GHSA-h4fr-cmh5-qr62 · amended
23 Oct 2026Evidence →
Low, CVSS 3.323 Oct 2026
Fallow: Jest and Vitest projects entries let an analyzed repository make Fallow read files outside the project root
npm fallow +3 · Upgrade all 4 to 3.34.0 or later · >= 2.68.0, < 3.34.0 · CVE-2026-115569 · GHSA-jfwm-3p3c-6hx5 · amended
23 Oct 2026Evidence →
Critical, CVSS 9.223 Oct 2026
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
Bitnami pillow +1 · Upgrade all 2 to 13.0.0 or later · < 13.0.0 · CVE-2026-112398 · GHSA-5x8w-8jj5-q52h · amended
23 Oct 2026Evidence →
High, CVSS 7.523 Oct 2026
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words
npm postal-mime · Upgrade to 4.0.8 or later · >= 3.0.0, < 4.0.8 · GHSA-f2hq-32vh-53cc · amended
23 Oct 2026Evidence →
Medium, CVSS 6.323 Oct 2026
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
Bitnami pillow +1 · Upgrade all 2 to 13.0.0 or later · >= 11.2.1, < 13.0.0 · CVE-2026-114501 · GHSA-654x-cwwv-5j9c · amended
23 Oct 2026Evidence →
Medium, CVSS 6.523 Oct 2026
Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient
npm nodemailer · Upgrade to 10.1.4 or later · >= 3.0.0, < 10.1.4 · CVE-2026-121424 · GHSA-8c8m-p3m8-cjg8 · amended
23 Oct 2026Evidence →
Medium, CVSS 6.523 Oct 2026
Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient
npm nodemailer · Upgrade to 10.1.4 or later · >= 3.0.0, < 10.1.4 · CVE-2026-121425 · GHSA-m943-m63m-w62w · amended
23 Oct 2026Evidence →
Medium, CVSS 6.523 Oct 2026
Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name
npm nodemailer · Upgrade to 10.1.4 or later · >= 3.0.0, < 10.1.4 · CVE-2026-121426 · GHSA-85x2-q946-cp5h · amended
23 Oct 2026Evidence →
Critical, CVSS 9.223 Oct 2026
Laravel TokenGuard authentication bypass through non-string API credentials
Packagist laravel/framework · Upgrade to 13.27.0, 12.68.0, 11.56.1 or 10.50.4 by release line · >= 13.0.0, < 13.27.0; >= 12.0.0, < 12.68.0; >= 11.0.0, < 11.56.1; < 10.50.4 · CVE-2026-114509 · GHSA-f9x3-7vq9-cph6 · amended
23 Oct 2026Evidence →
Medium, CVSS 6.523 Oct 2026
Laravel relationship inclusion can trigger unauthorized data destruction
Packagist laravel/framework · Upgrade to 13.27.0 or 12.68.0 by release line · >= 12.45.0, < 12.68.0; >= 13.0.0, < 13.27.0 · CVE-2026-114508 · GHSA-5wcm-3v2w-8362 · amended
23 Oct 2026Evidence →
Low, CVSS 1.023 Oct 2026
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
PyPI setuptools · Upgrade to 84.1.0 or later · >= 38.2.2, < 84.1.0 · GHSA-xmj3-9gf7-h52w · amended
23 Oct 2026Evidence →
Medium, CVSS 6.123 Oct 2026
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding
npm fast-uri · Upgrade to 4.2.3, 3.1.9 or 2.4.8 by release line · < 2.4.8; >= 3.0.0, < 3.1.9; >= 4.0.0, < 4.2.3 · CVE-2026-110306 · GHSA-w74x-v6f9-j3xg · amended
23 Oct 2026Evidence →
Low, CVSS 3.723 Oct 2026
fast-uri vulnerable to improper path equivalence in relative reference normalization
npm fast-uri · Upgrade to 4.2.3, 3.1.9 or 2.4.8 by release line · < 2.4.8; >= 3.0.0, < 3.1.9; >= 4.0.0, < 4.2.3 · CVE-2026-110095 · GHSA-xhq7-xmqj-769h · amended
23 Oct 2026Evidence →
Medium, CVSS 4.823 Oct 2026
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
npm fast-uri · Upgrade to 4.2.3, 3.1.9 or 2.4.8 by release line · >= 2.4.2, < 2.4.8; >= 3.1.3, < 3.1.9; >= 4.0.1, < 4.2.3 · CVE-2026-110180 · GHSA-wjr9-j795-jxcr · amended
23 Oct 2026Evidence →
Low, CVSS 3.723 Oct 2026
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
npm fast-uri · Upgrade to 4.2.3, 3.1.9 or 2.4.8 by release line · < 2.4.8; >= 3.0.0, < 3.1.9; >= 4.0.0, < 4.2.3 · CVE-2026-110725 · GHSA-333x-w4r6-6crp · amended
23 Oct 2026Evidence →
Medium, CVSS 6.823 Oct 2026
FastMCP: Post-transform component authorization is skipped on direct calls
PyPI fastmcp +1 · Upgrade all 2 to 4.1.2 or 3.4.10 by release line · >= 3.0.0, < 3.4.10; >= 4.0.0, < 4.1.2 · GHSA-7xgj-8392-5q4r · amended
23 Oct 2026Evidence →
Medium, CVSS 5.923 Oct 2026
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
PyPI fastmcp +1 · Upgrade all 2 to 4.1.2 or later · >= 4.0.0a1, < 4.1.2 · GHSA-vqqp-x5qm-5qp4 · amended
23 Oct 2026Evidence →
High, CVSS 7.523 Oct 2026
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)
PyPI vllm · Upgrade to 0.31.0 or later · >= 0.7.3, < 0.31.0 · CVE-2026-114055 · GHSA-gx7p-2j49-hfq4 · amended
23 Oct 2026Evidence →
Low, CVSS 2.123 Oct 2026
SvelteKit: URL redirection to untrusted site via enhanced form submission
npm @sveltejs/kit · Upgrade to 3.0.0 or later · < 3.0.0 · CVE-2026-114060 · GHSA-pfhg-q3qv-9q6r · amended
23 Oct 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution

filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient

Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Laravel TokenGuard authentication bypass through non-string API credentials

Laravel relationship inclusion can trigger unauthorized data destruction

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

fast-uri vulnerable to improper path equivalence in relative reference normalization

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

FastMCP: Post-transform component authorization is skipped on direct calls

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)

SvelteKit: URL redirection to untrusted site via enhanced form submission

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence