Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/clidey/whodb/core · Upgrade to 0.0.0-20250127202645-8d67b767e005 (pre-release) or later · < 0.0.0-20250127202645-8d67b767e005 · CVE-2025-24787 · GHSA-c7w4-9wv8-7x7c
Go github.com/clidey/whodb/core · Upgrade to 0.0.0-20250127172032-547336ac73c8 (pre-release) or later · < 0.0.0-20250127172032-547336ac73c8 · CVE-2025-24786 · GHSA-9r4c-jwx3-3j76
npm @nuxtjs/mdc · Upgrade to 0.13.3 or later · <= 0.13.2 · CVE-2025-24981 · GHSA-j82m-pc2v-2484 · amended
PyPI mitmproxy · Upgrade to 11.1.2 or later · < 11.1.2 · CVE-2025-23217 · GHSA-wg33-5h85-7q5p · amended
Maven org.apache.james.protocols:protocols-imap · Upgrade to 3.8.2 or 3.7.6 by release line · < 3.7.6; >= 3.8.0, < 3.8.2 · CVE-2024-37358 · GHSA-56jp-w6vw-j3jw
Maven org.apache.james:james-server-jmap-draft · Upgrade to 3.8.2 or 3.7.6 by release line · >= 3.8.0, < 3.8.2; < 3.7.6 · CVE-2024-45626 · GHSA-57m2-h3fw-rxhw
Maven net.minidev:json-smart · Upgrade to 2.5.2 or later · >= 2.5.0, < 2.5.2 · CVE-2024-57699 · GHSA-pq2g-wx69-c263
npm @zag-js/core · Upgrade to 0.82.2 or later · < 0.82.2 · CVE-2024-57079 · GHSA-fg4m-w35q-vfg2 · amended
npm @stryker-mutator/util · Upgrade to 8.7.1 or later · < 8.7.1 · CVE-2024-57085 · GHSA-9j5q-479x-43g2 · amended
npm eazy-logger · Upgrade to 4.1.0 or later · <= 4.0.1 · CVE-2024-57075 · GHSA-r7jx-5m6m-cpg9 · amended
npm @rpldy/uploader · Upgrade to 1.9.1 or later · < 1.9.1 · CVE-2024-57082 · GHSA-pc47-g7gv-4gpw · amended
npm node-opcua-alarm-condition · Upgrade to 2.137.0 or later · < 2.137.0 · CVE-2024-57086 · GHSA-gvwq-6fmx-28xm · amended
npm @tanstack/form-core · Upgrade to 0.42.1 or later · < 0.42.1 · CVE-2024-57068 · GHSA-ggv3-vmgw-xv2q · amended
Go github.com/edgelesssys/contrast · Upgrade to 1.4.1 or later · <= 1.4.0 · GHSA-vqv5-385r-2hf8
PyPI mobsf · Upgrade to 4.3.1 or later · <= 4.3.0 · CVE-2025-24805 · GHSA-79f6-p65j-3m2m · amended
PyPI mobsf · Upgrade to 4.3.1 or later · <= 4.3.0 · CVE-2025-24804 · GHSA-jrm8-xgf3-fwqr · amended
PyPI mobsf · Upgrade to 4.3.1 or later · <= 4.3.0 · CVE-2025-24803 · GHSA-cxqq-w3x5-7ph3 · amended
PyPI ckan · Upgrade to 2.11.2 or 2.10.7 by release line · < 2.10.7; >= 2.11.0, < 2.11.2 · CVE-2025-24372 · GHSA-7pq5-qcp6-mcww · amended
Maven org.geotools:gt-app-schema +2 · Upgrade all 3 to 31.2, 30.4, 29.6 or 28.6 by release line · >= 30.0, < 30.4; >= 31.0, < 31.2; >= 29.0, < 29.6; < 28.6 · CVE-2024-36404 · GHSA-w3pj-wh35-fq8w
Packagist cockpit-hq/cockpit · Upgrade to 2.4.1 or later · < 2.4.1 · CVE-2025-1025 · GHSA-wp68-xrfg-xvq4
Packagist spatie/browsershot · Upgrade to 5.0.5 or later · < 5.0.5 · CVE-2025-1022 · GHSA-j2gw-r24m-j2qw
Go github.com/edgelesssys/marblerun · Upgrade to 1.7.0 or later · < 1.7.0 · GHSA-w7wm-2425-7p2h
npm vitest · Upgrade to 3.0.5, 2.1.9 or 1.6.1 by release line; some affected versions have no fix yet · >= 1.0.0, < 1.6.1; >= 2.0.0, < 2.1.9; >= 3.0.0, < 3.0.5; <= 0.0.125 · CVE-2025-24964 · GHSA-9crc-q9x8-hgqq · amended
Maven org.apache.cassandra:cassandra-all · Upgrade to 5.0.3, 4.1.8, 4.0.16 or 2 more by release line · >= 5.0-alpha1, < 5.0.3; >= 4.1-alpha1, < 4.1.8; >= 4.0-alpha1, < 4.0.16; >= 3.1, < 3.11.18; < 3.0.31 · CVE-2025-23015 · GHSA-wmcc-9vch-jmx4
PyPI django-unicorn · Upgrade to 0.62.0 or later · < 0.62.0 · CVE-2025-24370 · GHSA-g9wf-5777-gq43 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.