Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7026–7050 of 30,985 matching · newest first
crates.io gix · Upgrade to 0.83.0 or later · >= 0.31.0, < 0.83.0 · CVE-2026-40034 · GHSA-f26g-jm89-4g65
crates.io gix · Upgrade to 0.83.0 or later · < 0.83.0 · +1 more package · GHSA-p3hw-mv63-rf9w
crates.io gix-transport · Upgrade to 0.56.0 or later · >= 0.25.4, <= 0.55.0 · GHSA-9857-6mw7-fq2m
PyPI pycti · Upgrade to 6.9.13 or later · >= 6.9.0, < 6.9.13 · CVE-2026-27960 · GHSA-6vvv-vmfr-xhrx
save_generated_slidesPyPI pptagent · Upgrade to 1.1.36 or later · < 1.1.36 · CVE-2026-42080 · GHSA-pxhg-7xr2-w7xg · amended
PyPI pptagent · Upgrade to 1.1.36 or later · < 1.1.36 · CVE-2026-42079 · GHSA-89g2-xw5c-v95p · amended
PyPI pptagent · Upgrade to 1.1.36 or later · < 1.1.36 · CVE-2026-42078 · GHSA-hrcw-xc63-g29m · amended
Go github.com/oxyno-zeta/s3-proxy · Upgrade to 0.0.0-20260424211602-1320e4abd46a (pre-release) or later · < 0.0.0-20260424211602-1320e4abd46a · CVE-2026-42882 · GHSA-rfgq-wgg8-662p
crates.io tough · Upgrade to 0.22.0 or later · >= 0.9.0, < 0.22.0 · +1 more package · CVE-2026-6967 · GHSA-4v58-8p28-2rq3
crates.io tough · Upgrade to 0.22.0 or later · < 0.22.0 · +1 more package · CVE-2026-6966 · GHSA-8m7c-8m39-rv4x
npm openclaw · Upgrade to 2026.4.23 or later · < 2026.4.23 · CVE-2026-45006 · GHSA-cwj3-vqpp-pmxr · amended
npm openclaw · Upgrade to 2026.4.23 or later · < 2026.4.23 · CVE-2026-45004 · GHSA-r39h-4c2p-3jxp · amended
npm openclaw · Upgrade to 2026.4.23 or later · < 2026.4.23 · CVE-2026-45005 · GHSA-q8ff-7ffm-m3r9 · amended
npm @workos/authkit-session · Upgrade to 0.5.1 or later · < 0.5.1 · CVE-2026-42565 · GHSA-vvvv-983w-r7pv · amended
Go github.com/external-secrets/external-secrets · Upgrade to 2.4.0 or later · < 2.4.0 · CVE-2026-42875 · GHSA-wv26-88m5-6h59
PyPI microdot · Upgrade to 2.6.1 or later · < 2.6.1 · CVE-2026-42874 · GHSA-7wc8-wvc4-m498 · amended
PyPI horizon · Upgrade to 25.7.3 or later · >= 25.6, < 25.7.3 · CVE-2026-43002 · GHSA-vxvf-xvm3-p8j5 · amended
PyPI django · Upgrade to 6.0.5 or 5.2.14 by release line · >= 6.0, < 6.0.5; >= 5.2, < 5.2.14 · CVE-2026-6907 · GHSA-5hrc-gvxj-w55p · amended
PyPI django · Upgrade to 6.0.5 or 5.2.14 by release line · >= 6.0, < 6.0.5; >= 5.2, < 5.2.14 · CVE-2026-5766 · GHSA-w26r-rmm8-9c29 · amended
Maven org.eclipse.basyx:basyx.sdk · Upgrade to 2.0.0-milestone-10 (pre-release) or later · < 2.0.0-milestone-10 · CVE-2026-7411 · GHSA-8gpm-h2mh-36qc
Maven org.eclipse.basyx:basyx.sdk · Upgrade to 2.0.0-milestone-10 (pre-release) or later · < 2.0.0-milestone-10 · CVE-2026-7412 · GHSA-gx3v-wxfj-8h24
PyPI django · Upgrade to 6.0.5 or 5.2.14 by release line · >= 6.0, < 6.0.5; >= 5.2, < 5.2.14 · CVE-2026-35192 · GHSA-7h2m-m8vj-598h · amended
PyPI langflow · Upgrade to 1.9.0 or later · <= 1.8.4 · CVE-2026-42048 · GHSA-9whx-c884-c68q · amended
npm @tdurieux/anonymous_github · Upgrade to 2.3.0 or later · >= 2.2.0, <= 2.2.0 · GHSA-g485-8j3v-p6x8 · amended
Maven io.netty:netty-codec-http · Upgrade to 4.2.13.Final or 4.1.133.Final by release line · <= 4.1.132.Final; >= 4.2.0.Alpha1, <= 4.2.12.Final · CVE-2026-41417 · GHSA-v8h7-rr48-vmmv
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.