High, CVSS 8.8
Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)
PyPI headroom-ai · Upgrade to 0.35.0 or later · < 0.35.0 · CVE-2026-71416 · GHSA-h46j-26q3-rggf · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 7.5
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260804015139-bd067a4fe9b2 (pre-release) or later · < 0.0.0-20260804015139-bd067a4fe9b2 · CVE-2026-74904 · GHSA-4vpg-gwqq-w44c · amended
- Critical, CVSS 9.3
@a2ui/web_core:
openUrlpermitsjavascript:URI execution via agent-supplied button actionsnpm @a2ui/web_core · Upgrade to 0.10.2 or later · >= 0.9.0, < 0.10.2 · CVE-2026-10032 · GHSA-72qq-p3r5-f7wq · amended
- High, CVSS 8.7
aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
crates.io aws-smithy-json · Upgrade to 0.62.7 or later · <= 0.62.6 · CVE-2026-18140 · GHSA-8ffr-xgwf-xj56 · amended
- Critical, CVSS 10.0
Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain
PyPI vibe-trading-ai · Upgrade to 0.1.7 or later · >= 0.1.0, < 0.1.7 · CVE-2026-114108 · GHSA-v2f8-6655-7grj · amended
- High, CVSS 7.5
Vibe-Trading file-read tools expose arbitrary server-readable files
PyPI vibe-trading-ai · Upgrade to 0.1.7 or later · >= 0.1.0, < 0.1.7 · CVE-2026-114106 · GHSA-5rmq-chc7-m22f · amended
- Critical, CVSS 10.0
Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
PyPI vibe-trading-ai · Upgrade to 0.1.7 or later · >= 0.1.0, < 0.1.7 · CVE-2026-114107 · GHSA-jqmf-mx4f-hfr6 · amended
- High, CVSS 7.7
Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
npm trigger.dev · Upgrade to 4.5.6 or later · <= 4.5.5 · CVE-2026-114081 · GHSA-9q4r-4842-93vw · amended
- High, CVSS 8.1
Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise
npm trigger.dev · Upgrade to 4.5.6 or later · <= 4.5.5 · CVE-2026-114087 · GHSA-pqxw-g93w-hj9x · amended
- High, CVSS 8.2
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
npm figlet · Upgrade to 1.11.3 or later · < 1.11.3 · CVE-2026-96780 · GHSA-62ch-8vmq-8xm7 · amended
- Critical, CVSS 9.2
Trigger.dev: V1 coordinator default-secret unauth Socket.IO
npm trigger.dev · Upgrade to 4.5.4 or later · < 4.5.4 · CVE-2026-114088 · GHSA-gg6r-gp4c-89hp · amended
- High, CVSS 7.6
Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
Go github.com/xtls/xray-core · Upgrade to 1.260327.1-0.20260710210335-64fada32b5b9 (pre-release) or later · >= 1.260113.0, < 1.260327.1-0.20260710210335-64fada32b5b9 · GHSA-5wf9-h793-w73c · amended
- High, CVSS 7.1
Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)
npm trigger.dev · Upgrade to 4.5.2 or later · <= 4.5.1 · GHSA-pp95-gc86-jq6q · amended
- High, CVSS 7.7
Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL
npm trigger.dev · Upgrade to 4.5.2 or later · < 4.5.2 · CVE-2026-85650 · GHSA-xxv7-2vv3-h682 · amended
- High, CVSS 7.1
Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
npm trigger.dev · Upgrade to 4.5.2 or later · < 4.5.2 · CVE-2026-85651 · GHSA-qxpp-qjg8-x4jv · amended
- High, CVSS 8.8
Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths
PyPI dulwich · Upgrade to 1.2.9 or later · < 1.2.9 · CVE-2026-114094 · GHSA-8mcx-5rqc-vhmf · amended
- High, CVSS 8.6
Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections
PyPI dulwich · Upgrade to 1.2.8 or later · >= 0.24.0, <= 1.2.7 · CVE-2026-114096 · GHSA-8w8g-wq8h-fq33 · amended
- High, CVSS 8.6
Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence
PyPI dulwich · Upgrade to 1.2.8 or later · >= 0.23.1, <= 1.2.7 · CVE-2026-114097 · GHSA-5fqc-mrg8-w798 · amended
- High, CVSS 8.6
Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks
PyPI dulwich · Upgrade to 1.2.8 or later · >= 0.22.5, <= 1.2.7 · CVE-2026-114098 · GHSA-cm62-gvxx-vmxx · amended
- High, CVSS 8.2
Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution
Maven eu.copernik:copernik-xml-factory · Upgrade to 0.1.2 or later · < 0.1.2 · CVE-2026-61586 · GHSA-xm28-xvqc-gxxg · amended
- Critical, CVSS 9.3
Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow
crates.io wasmtime · Upgrade to 49.0.2 or 48.0.4 by release line · >= 39.0.0, < 48.0.4; >= 49.0.0, < 49.0.2 · CVE-2026-115384 · GHSA-32h6-97mm-8q3c · amended
- High, CVSS 8.2
Zod can exhaust memory while validating oversized constrained collections
npm zod · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2023-54404 · GHSA-mrhx-c7xc-m3w5 · amended
- High, CVSS 8.6
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260812083335-251596fc0de2 (pre-release) or later · >= 0.0.0-20260726161145-9b8e8956f997, < 0.0.0-20260812083335-251596fc0de2 · CVE-2026-73608 · GHSA-9cqf-hhrq-7v45 · amended
- Critical, CVSS 9.9
vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
npm vm2 · Upgrade to 3.11.7 or later · >= 3.9.6, <= 3.11.6 · CVE-2026-92948 · GHSA-qhwx-74w5-xhxq · amended
- High, CVSS 8.6
vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
npm vm2 · Upgrade to 3.11.7 or later · <= 3.11.6 · CVE-2026-92950 · GHSA-jxxv-8r27-vm4p · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.