Jupyter Server Proxy has a reflected XSS issue in host parameter
PyPI jupyter-server-proxy · Upgrade to 4.2.0 or 3.2.4 by release line · >= 3.0.0, < 3.2.4; >= 4.0.0, < 4.2.0 · CVE-2024-35225 · GHSA-fvcq-4x64-hqxr · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI jupyter-server-proxy · Upgrade to 4.2.0 or 3.2.4 by release line · >= 3.0.0, < 3.2.4; >= 4.0.0, < 4.2.0 · CVE-2024-35225 · GHSA-fvcq-4x64-hqxr · amended
PyPI document-merge-service · Upgrade to 6.5.2 or later · < 6.5.2 · CVE-2024-37301 · GHSA-v5gf-r78h-55q6 · amended
Maven org.keycloak:keycloak-services · Upgrade to 24.0.5 or later · < 24.0.5 · CVE-2024-3656 · GHSA-2cww-fgmg-4jqc
NuGet microsoft.azure.storage.datamovement · Upgrade to 2.0.5 or later · < 2.0.5 · CVE-2024-35252 · GHSA-32f8-hmr3-7vxg
npm ghtml · Upgrade to 2.0.0 or later · < 2.0.0 · CVE-2024-37166 · GHSA-vvhj-v88f-5gxr · amended
Packagist composer/composer · Upgrade to 2.7.7 or 2.2.24 by release line · >= 2.0, < 2.2.24; >= 2.3, < 2.7.7 · CVE-2024-35241 · GHSA-47f6-5gq3-vx9c
Packagist composer/composer · Upgrade to 2.7.7 or 2.2.24 by release line · >= 2.0, < 2.2.24; >= 2.3, < 2.7.7 · CVE-2024-35242 · GHSA-v9qv-c7wm-wgmf
PyPI langflow · Upgrade to 1.0.15 or later · < 1.0.15 · CVE-2024-37014 · GHSA-qg33-x2c5-6p44 · amended
Maven org.keycloak:keycloak-services · Upgrade to 24.0.5 or later · < 24.0.5 · CVE-2024-4540 · GHSA-69fp-7c8p-crjr
Go github.com/mostynb/go-grpc-compression · Upgrade to 1.2.3 or later · >= 1.1.4, < 1.2.3 · GHSA-87m9-rv8p-rgmg
PyPI authlib · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2024-37568 · GHSA-5357-c2jx-v7qh · amended
Packagist zfr/zfr-oauth2-server-module · Upgrade to 0.1.2 or later · < 0.1.2 · GHSA-rcm4-jv5g-wccm
Packagist zendframework/zendopenid · Upgrade to 2.0.2 or later · >= 2.0.0, < 2.0.2 · GHSA-3x57-m5p4-rgh4
Packagist zendframework/zendframework1 · Upgrade to 1.12.20 or later · < 1.12.20 · GHSA-6fqw-j3vm-7f66
Packagist zendframework/zendframework1 · Upgrade to 1.12.17 or later · >= 1.12.0, < 1.12.17 · GHSA-848f-mph5-9pm9
Packagist zendframework/zendframework1 · Upgrade to 1.12.18 or later · >= 1.12.0, < 1.12.18 · GHSA-8xhv-gqm4-3w99
Packagist zendframework/zendframework1 · Upgrade to 1.12.16 or later · >= 1.12.0, < 1.12.16 · GHSA-v42g-7q2x-cw32
Packagist zendframework/zend-captcha · Upgrade to 2.5.2 or 2.4.9 by release line · >= 2.0.0, < 2.4.9; >= 2.5.0, < 2.5.2 · GHSA-mg4x-prh7-g4mx
Packagist zendframework/zendframework1 · Upgrade to 1.12.7 or later · >= 1.12.0, < 1.12.7 · GHSA-2x36-qhx3-7m5f
Packagist zendframework/zendframework1 · Upgrade to 1.12.4 or later · >= 1.12.0, < 1.12.4 · GHSA-9v78-h226-2rmq
Packagist willdurand/js-translation-bundle · Upgrade to 2.1.1 or later · < 2.1.1 · GHSA-x86x-qhf8-f37w
Packagist vrana/adminer · Upgrade to 4.6.3 or later · >= 4.3.1, < 4.6.3 · GHSA-97h7-mf38-g9mf
Packagist zendframework/zend-navigation · Upgrade to 2.3.1 or 2.2.7 by release line · >= 2.0.0, < 2.2.7; >= 2.3.0, < 2.3.1 · GHSA-6v7p-5qcq-268c
Packagist zendframework/zend-feed · Upgrade to 2.10.3 or later · >= 1.0.0, < 2.10.3 · GHSA-jmmp-vh96-78rm
Packagist zendframework/zend-http · Upgrade to 2.8.1 or later · >= 1.0.0, < 2.8.1 · GHSA-cg8w-5jrc-675g
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.