Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss
crates.io p3-challenger · Upgrade to 0.5.3 or 0.4.3 by release line · < 0.4.3; >= 0.5.0, < 0.5.3 · CVE-2026-46654 · GHSA-vj64-rjf3-w3v7
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
6101–6125 of 30,985 matching · newest first
crates.io p3-challenger · Upgrade to 0.5.3 or 0.4.3 by release line · < 0.4.3; >= 0.5.0, < 0.5.3 · CVE-2026-46654 · GHSA-vj64-rjf3-w3v7
Packagist knplabs/knp-snappy · Upgrade to 1.7.0 or later · <= 1.6.0 · CVE-2026-46683 · GHSA-c5fp-p67m-gq56
Go github.com/fission/fission · Upgrade to 1.23.0 or later · <= 1.22.0 · CVE-2026-46618 · GHSA-7pjr-qpvh-m339
Go github.com/fission/fission · Upgrade to 1.23.0 or later · <= 1.22.0 · CVE-2026-46617 · GHSA-85g2-pmrx-r49q
Go github.com/fission/fission · Upgrade to 1.23.0 or later · <= 1.22.0 · CVE-2026-46614 · GHSA-3g33-6vg6-27m8
Go github.com/fission/fission · Upgrade to 1.23.0 or later · <= 1.22.0 · CVE-2026-46612 · GHSA-chf8-4hv6-8pg6
NuGet umbraco.cms · Upgrade to 17.4.0 or 13.14.0 by release line · < 13.14.0; >= 17.3.0-rc, < 17.4.0 · CVE-2026-46616 · GHSA-2qjj-h6wp-c7h7
PyPI pyload-ng · Upgrade to 0.5.0b3.dev100 (pre-release) or later · < 0.5.0b3.dev100 · CVE-2026-46561 · GHSA-8rp3-xc6w-5qp5 · amended
crates.io nimiq-primitives · Upgrade to 1.5.0 or later · < 1.5.0 · CVE-2026-46545 · GHSA-mw3q-r9wh-h2ff
crates.io nimiq-blockchain · Upgrade to 1.5.0 or later · < 1.5.0 · CVE-2026-46543 · GHSA-vghx-352f-93jm
crates.io nimiq-keys · Upgrade to 1.4.0 or later · < 1.4.0 · CVE-2026-46542 · GHSA-h9cc-w26m-j342
PyPI lmdeploy · Upgrade to 0.13.0 or later · <= 0.12.3 · CVE-2026-46517 · GHSA-9xq9-36w5-q796 · amended
PyPI crawlee · Upgrade to 1.7.0 or later · >= 1.0.0, < 1.7.0 · CVE-2026-46497 · GHSA-3r75-xc34-5f44 · amended
PyPI pyfory · Upgrade to 1.0.0 or later · >= 0.13.0, < 1.0.0 · CVE-2026-48207 · GHSA-m5gw-83w2-7749 · amended
query.batch cross-talknpm @sveltejs/kit · Upgrade to 2.60.1 or later · >= 2.38.0, <= 2.60.0 · CVE-2026-82258 · GHSA-hgv7-v322-mmgr · amended
npm md-fileserver · Upgrade to 1.10.3 or later · < 1.10.3 · CVE-2026-46492 · GHSA-32q2-hhr5-6qvv · amended
PyPI sagemaker · Upgrade to 3.8.0 or 2.257.2 by release line · >= 2.199.0, <= 2.257.1; >= 3.0.0, <= 3.7.1 · CVE-2026-8597 · GHSA-rq6v-x3j8-7qgf · amended
PyPI sagemaker · Upgrade to 3.8.0 or 2.257.2 by release line · >= 2.199.0, <= 2.257.1; >= 3.0.0, <= 3.7.1 · CVE-2026-8596 · GHSA-7hh5-prp2-mfh5 · amended
PyPI lmdeploy · Upgrade to 0.13.0 or later · < 0.13.0 · CVE-2026-46432 · GHSA-m549-qq94-fvhg · amended
npm samlify · Upgrade to 2.13.0 or later · < 2.13.0 · CVE-2026-46490 · GHSA-34r5-q4jw-r36m · amended
Go github.com/mvt-project/androidqf · Upgrade to 1.8.3 or later · <= 1.8.2 · GHSA-763j-3p5v-jfc6
Go github.com/mvt-project/androidqf · Upgrade to 1.8.3 or later · <= 1.8.2 · GHSA-jf2q-463c-6f52
PyPI mvt · Upgrade to 2026.5.12 or later · <= 2026.4.28 · CVE-2026-46486 · GHSA-5h3g-px23-w6vw · amended
Go github.com/klever-io/klever-go · Upgrade to 1.7.17 or later · < 1.7.17 · CVE-2026-46403 · GHSA-jc6w-wmfc-fh33
PyPI windows-mcp · Upgrade to 0.7.5 or later · < 0.7.5 · CVE-2026-48989 · GHSA-vrxg-gm77-7q5g · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.