Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.springframework.boot:spring-boot-loader-classic +1 · Upgrade all 2 to 3.3.3, 3.2.9, 3.1.13 or 2 more by release line · >= 2.7.0, <= 2.7.21; >= 3.0.0, <= 3.0.16; >= 3.1.0, <= 3.1.12; >= 3.2.0, <= 3.2.8; >= 3.3.0, <= 3.3.2 · CVE-2024-38807 · GHSA-7cj3-x93g-gj76
import {cls_name}PyPI llama-index +1 · Upgrade all 2 to 0.10.38 or later · < 0.10.38 · CVE-2024-45201 · GHSA-fxc2-8m62-m85x · amended
Go github.com/mattermost/mattermost/server/v8 · Upgrade to 9.10.1, 9.9.2, 9.8.3 or 9.5.8 by release line · >= 9.5.0, < 9.5.8; >= 9.10.0, < 9.10.1; >= 9.9.0, < 9.9.2; >= 9.8.0, < 9.8.3 · CVE-2024-42497 · GHSA-fxq9-6946-34q7
Go github.com/usememos/memos · Upgrade to 0.21.0 or later · < 0.21.0 · CVE-2024-41659 · GHSA-p4fx-qf2h-jpmj
RubyGems rexml · Upgrade to 3.3.6 or later · < 3.3.6 · CVE-2024-43398 · GHSA-vmwr-mc7x-5vc3
Go github.com/CosmWasm/wasmd · Upgrade to 0.53.0 or 0.46.0 by release line · >= 0.50.0, < 0.53.0; < 0.46.0 · GHSA-g8w7-7vgg-x7xg
npm squirrelly · Upgrade to 9.1.0 or later · >= 9.0.0, < 9.1.0 · CVE-2024-40453 · GHSA-w5pw-gmcw-rfc8 · amended
Maven io.undertow:undertow-core · Upgrade to 2.3.17.Final or 2.2.36.Final by release line · < 2.2.36.Final; >= 2.3.0.Alpha1, < 2.3.17.Final · CVE-2024-7885 · GHSA-9623-mqmm-5rcf
Maven org.apache.seatunnel:seatunnel · Upgrade to 1.0.1 or later · >= 1.0.0, <= 1.0.0 · CVE-2023-49198 · GHSA-8m84-h9hh-3cfh
PyPI ekuiper +1 · Upgrade all 2 to 1.14.2 or later · < 1.14.2 · CVE-2024-43406 · GHSA-r5ph-4jxm-6j9p · amended
Go github.com/projectcapsule/capsule · Upgrade to 0.7.1 or later · <= 0.7.0 · CVE-2024-39690 · GHSA-mq69-4j5w-3qwp
Maven org.apache.dolphinscheduler:dolphinscheduler-task-api · Upgrade to 3.2.2 or later · >= 3.1.0, < 3.2.2 · CVE-2024-43202 · GHSA-2fm6-mv57-p2qh
Maven org.xwiki.platform:xwiki-platform-web-templates · Upgrade to 15.10-rc-1 (pre-release) or later · < 15.10-rc-1 · CVE-2024-43401 · GHSA-f963-4cq8-2gw7
Maven org.xwiki.platform:xwiki-platform-oldcore · Upgrade to 16.0.0, 15.10.6, 15.5.5 or 14.10.21 by release line · >= 1.1.2, < 14.10.21; >= 15.0-rc-1, < 15.5.5; >= 15.6-rc-1, < 15.10.6; >= 16.0.0-rc-1, <= 16.0.0-rc-1 · CVE-2024-43400 · GHSA-wcg9-pgqv-xm5v
PyPI mobsf · Upgrade to 4.0.7 or later · <= 4.0.6 · CVE-2024-43399 · GHSA-4hh3-vj32-gr6j · amended
Maven io.github.microcks:microcks-app · Upgrade to 1.10.0 or later · < 1.10.0 · CVE-2024-44076 · GHSA-r6ph-5fp2-3w2v
Access-Control-Allow-Private-Network CORS header to be set to true by defaultPyPI flask-cors · Upgrade to 4.0.2 or later · < 4.0.2 · CVE-2024-6221 · GHSA-hxwh-jpp2-84pm · amended
Go github.com/stashapp/stash · Upgrade to 0.26.0 or later · < 0.26.0 · CVE-2024-32231 · GHSA-75jf-52jg-qqh4
Maven com.xuxueli:xxl-job-core · Upgrade to 2.4.2 or later · <= 2.4.1 · CVE-2024-42681 · GHSA-cpfp-m5qw-c4r3
npm gettext.js · Upgrade to 2.0.3 or later · < 2.0.3 · CVE-2024-43370 · GHSA-vwhg-jwr4-vxgg · amended
crates.io russh · Upgrade to 0.44.1 or later · < 0.44.1 · CVE-2024-43410 · GHSA-vgvv-x7xg-6cqg · amended
ultralytics/actionsGitHub Actions ultralytics/actions · Upgrade to 0.0.3 or later · <= 0.0.2 · GHSA-7x29-qqmq-v6qc
Packagist ibexa/fieldtype-richtext · Upgrade to 4.6.10 or later · >= 4.6.0, < 4.6.10 · CVE-2024-43369 · GHSA-hvcf-6324-cjh7
RubyGems sequenceserver · Upgrade to 3.1.2 or later · < 3.1.2 · CVE-2024-42360 · GHSA-qv32-5wm2-p32h
NuGet microsoft.aspnetcore.app.runtime.win-x86 +3 · Upgrade all 4 to 8.0.8 or later · >= 8.0.0, < 8.0.8 · CVE-2024-38168 · GHSA-7qrv-8f9x-3h32
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.