High, CVSS 8.3
Open WebUI has a CORS misconfiguration and session validation issue
PyPI open-webui · Upgrade to 0.3.33 or later · < 0.3.33 · CVE-2026-56400 · GHSA-6xcp-7mpr-m7wm · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 972 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
- Critical
- 67 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
6626–6650 of 30,985 matching · newest first
- High, CVSS 8.7
PraisonAI's symlink-extraction bypass of
_safe_extractallwrites outsidedest_dirPyPI praisonai · Upgrade to 4.6.37 or later · <= 4.6.36 · CVE-2026-44340 · GHSA-9q28-ghcr-c4x3 · amended
- High, CVSS 8.6
PraisonAI has unsafe tool resolution in
ToolExecutionMixin.execute_tool: undeclared__main__callables executePyPI praisonai · Upgrade to 4.6.37 or later · <= 4.6.36 · +1 more package · CVE-2026-44339 · GHSA-gmjg-hv98-qggq · amended
- Critical, CVSS 9.4
PraisonAI MCP
tools/callpath-traversal => RCE via Python.pthinjectionPyPI praisonai · Upgrade to 4.6.34 or later · <= 4.6.33 · CVE-2026-44336 · GHSA-9mqq-jqxf-grvw · amended
- Medium, CVSS 6.3
PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
PyPI praisonai · Upgrade to 4.6.34 or later · >= 2.4.1, <= 4.6.33 · CVE-2026-44337 · GHSA-3643-7v76-5cj2 · amended
- High, CVSS 7.3
PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
PyPI praisonai · Upgrade to 4.6.34 or later · >= 2.5.6, <= 4.6.33 · CVE-2026-44338 · GHSA-6rmh-7xcm-cpxj · amended
- High, CVSS 8.6
Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass
Go github.com/gotenberg/gotenberg/v8 · Upgrade to 8.32.0 or later · < 8.32.0 · CVE-2026-42595 · GHSA-chwh-f6gm-r836
- Medium, CVSS 6.5
Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL
PyPI apache-airflow-providers-opensearch · Upgrade to 1.9.1 or later · < 1.9.1 · CVE-2026-43826 · GHSA-xccp-97wp-3gjg · amended
- Medium, CVSS 6.5
Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL
PyPI apache-airflow-providers-elasticsearch · Upgrade to 6.5.3 or later · < 6.5.3 · CVE-2026-41018 · GHSA-g3jr-4jrm-jvqv · amended
- Low, CVSS 2.9
bettercap Has an Integer Coercion Error in modules/mysql_server/mysql_server.go
Go github.com/bettercap/bettercap/v2 · Upgrade to 2.41.7 or later · < 2.41.7 · CVE-2026-8276 · GHSA-jcqv-2g3v-gm88
- Low, CVSS 2.9
bettercap Has an Integer Coercion Error in the ippReadChunkedBody Function
Go github.com/bettercap/bettercap/v2 · Upgrade to 2.41.7 or later · < 2.41.7 · CVE-2026-8275 · GHSA-322p-rrj6-j44g
- High, CVSS 8.7
Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter
PyPI sentry · Upgrade to 8.2.2 or 8.1.4 by release line · < 8.1.4; >= 8.2.0, < 8.2.2 · CVE-2021-47935 · GHSA-444r-2whx-3685 · amended
- Low, CVSS 1.9
OSGeo gdal has a heap-based buffer overflow
PyPI gdal · Upgrade to 3.13.0rc1 (pre-release) or later · < 3.13.0rc1 · CVE-2026-8212 · GHSA-r5m4-5vww-w9f5
- Medium, CVSS 5.5
PYSEC-2026-2157
PyPI gdal · Upgrade to 3.13.0 or later · < 3.13.0 · CVE-2026-8213
- High, CVSS 8.6
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
Maven org.springframework.ai:spring-ai-milvus-store +1 · Upgrade all 2 to 1.1.6 or 1.0.7 by release line · >= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6 · CVE-2026-41705 · GHSA-v632-2m87-7469
- Medium, CVSS 4.3
Hono has CSS Declaration Injection via Style Object Values in JSX SSR
npm hono · Upgrade to 4.12.18 or later · < 4.12.18 · CVE-2026-44458 · GHSA-qp7p-654g-cw7p · amended
- Low, CVSS 3.8
Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()
npm hono · Upgrade to 4.12.18 or later · < 4.12.18 · CVE-2026-44459 · GHSA-hm8q-7f3q-5f36 · amended
- Medium, CVSS 6.9
Vert.x has a DoS via unbounded server-side SNI SslContext cache growth
Maven io.vertx:vertx-core · Upgrade to 5.0.12 or 4.5.27 by release line; some affected versions have no fix yet · >= 4.3.4, <= 4.3.8; >= 4.4.0, <= 4.4.9; >= 4.5.0, <= 4.5.26; >= 5.0.0, <= 5.0.11 · CVE-2026-6860 · GHSA-3g76-f9xq-8vp6
- Medium, CVSS 5.3
Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage
npm hono · Upgrade to 4.12.18 or later · < 4.12.18 · CVE-2026-44457 · GHSA-p77w-8qqv-26rm · amended
- Medium, CVSS 6.1
Mistune Heading ID Attribute has Injection XSS
PyPI mistune · Upgrade to 3.2.1 or later · <= 3.2.0 · CVE-2026-44897 · GHSA-v87v-83h2-53w7 · amended
- High, CVSS 8.8
@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools
npm @yoda.digital/gitlab-mcp-server · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-44895 · GHSA-8jr5-6gvj-rfpf · amended
- Medium, CVSS 5.9
SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)
NuGet sharpcompress · Upgrade to 0.48.0 or later · < 0.48.0 · CVE-2026-44788 · GHSA-6c8g-7p36-r338
- High, CVSS 8.1
epa4all-client has a VAU Signature bypass
Maven com.oviva.telematik:epa4all-client · Upgrade to 1.2.1 or later · <= 1.2.0 · CVE-2026-44900 · GHSA-g8r3-5hwf-qp96
- Medium, CVSS 5.3
Mistune has XSS via unescaped figclass/figwidth in Figure directive
PyPI mistune · Upgrade to 3.2.1 or later · <= 3.2.0 · CVE-2026-44896 · GHSA-58cw-g322-p94v · amended
- Medium, CVSS 5.9
view_component: System Test Entry Point Path Check Allows Sibling Directory Escape
RubyGems view_component · Upgrade to 4.9.0 or later · >= 3.0.0, < 4.9.0 · CVE-2026-44837 · GHSA-hg3h-g7xc-f7vp
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.