Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
6826–6850 of 30,985 matching · newest first
Maven io.netty:netty-codec-http · Upgrade to 4.2.13.Final or 4.1.133.Final by release line · >= 4.2.0.Alpha1, <= 4.2.12.Final; <= 4.1.132.Final · CVE-2026-42581 · GHSA-xxqh-mfjm-7mv9
Maven io.netty:netty-codec-http · Upgrade to 4.2.13.Final or 4.1.133.Final by release line · >= 4.2.0.Alpha1, <= 4.2.12.Final; <= 4.1.132.Final · CVE-2026-42580 · GHSA-m4cv-j2px-7723
Maven io.netty:netty-codec-dns · Upgrade to 4.2.13.Final or 4.1.133.Final by release line · >= 4.2.0.Alpha1, <= 4.2.12.Final; <= 4.1.132.Final · CVE-2026-42579 · GHSA-cm33-6792-r9fm
Maven io.netty:netty-handler-proxy · Upgrade to 4.2.13.Final or 4.1.133.Final by release line · <= 4.1.132.Final; >= 4.2.0.Alpha1, <= 4.2.12.Final · CVE-2026-42578 · GHSA-45q3-82m4-75jr
Maven org.opensearch.plugin:opensearch-security · Upgrade to 3.3.0.0 or 2.19.4.0 by release line · >= 2.18.0, < 2.19.4.0; >= 3.0.0, < 3.3.0.0 · GHSA-x5hg-x4gv-j98m
crates.io wasmtime · Upgrade to 43.0.2 or 36.0.8 by release line · >= 30.0.0, < 36.0.8; >= 37.0.0, < 43.0.2 · CVE-2026-44216 · GHSA-p8xm-42r7-89xg
Maven org.opensearch.plugin:opensearch-security · Upgrade to 3.2.0.0 or 2.19.4.0 by release line · >= 1.0.0, <= 2.19.3; >= 3.0.0, <= 3.1.0 · GHSA-x83w-23jp-g6pw
Maven org.opensearch.plugin:opensearch-security · Upgrade to 3.2.0.0 or 2.19.4.0 by release line · >= 1.0.0, <= 2.19.3; >= 3.0.0, <= 3.1.0 · GHSA-22vx-2x23-98w6
Maven org.opensearch.plugin:opensearch-security · Upgrade to 2.19.0.0 or later · >= 2.11.0.0, < 2.19.0.0 · GHSA-83x9-vc3c-hghc
Maven io.awspring.cloud:spring-cloud-aws-sns · Upgrade to 4.0.2; some affected versions have no fix yet · >= 4.0.0, < 4.0.2; >= 3.0.0, <= 3.4.2 · CVE-2026-44308 · GHSA-r4w4-wv68-qv85
npm vercel · Upgrade to 52.0.1 or later · >= 50.16.0, <= 52.0.0 · CVE-2026-44479 · GHSA-pgf8-2hgj-grqg · amended
PyPI weblate · Upgrade to 5.17.1 or later · < 5.17.1 · CVE-2026-44264 · GHSA-5cmv-3rc4-7279 · amended
PyPI weblate · Upgrade to 5.17.1 or later · < 5.17.1 · CVE-2026-44263 · GHSA-gcg5-86jr-f7jg · amended
crates.io diesel-async · Upgrade to 0.9.0 or later · >= 0.1.0, < 0.9.0 · GHSA-ff9q-rm55-q7qr
crates.io gix-fs · Upgrade to 0.21.1 or later · <= 0.21.0 · CVE-2026-44471 · GHSA-f89h-2fjh-2r9q
runtime php · Upgrade to 8.5.6 or later · >= 8.5.0, < 8.5.6 · CVE-2026-42371
runtime php · Upgrade to 8.5.6, 8.4.21 or 8.3.32 by release line · >= 8.3.0, < 8.3.32; >= 8.4.0, < 8.4.21; >= 8.5.0, < 8.5.6 · CVE-2026-12184
npm hono · Upgrade to 4.12.16 or later · < 4.12.16 · CVE-2026-44456 · GHSA-9vqf-7f2p-gf9v · amended
npm hono · Upgrade to 4.12.16 or later · < 4.12.16 · CVE-2026-44455 · GHSA-69xw-7hcm-h432 · amended
PyPI playwrightcapture · Upgrade to 1.39.6 or later · < 1.39.6 · CVE-2026-44439 · GHSA-687h-xw6f-q2qw · amended
npm @angular/ssr · Upgrade to 22.0.0-next.7 (pre-release), 21.2.9, 20.3.25 or 19.2.25 by release line · >= 22.0.0-next.0, < 22.0.0-next.7; >= 21.0.0-next.0, < 21.2.9; >= 20.0.0-next.0, < 20.3.25; >= 19.0.0-next.0, < 19.2.25 · CVE-2026-44437 · GHSA-69xr-m8h6-h664 · amended
crates.io ldap3_proto · Upgrade to 0.7.1 or later · < 0.7.1 · GHSA-qcxq-75wr-5cm8
crates.io kanidmd_lib · Upgrade to 1.9.3 or later · < 1.9.3 · GHSA-84jc-3hj2-hwc7
crates.io kanidm_proto +1 · Upgrade all 2 to 1.9.3 or later · <= 1.9.2 · CVE-2026-46689 · GHSA-r5fr-9gmv-jggh
crates.io kanidm · Upgrade to 1.9.3 or later · <= 1.9.2 · GHSA-53hj-r94p-8c8f
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.