Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7101–7125 of 30,988 matching · newest first
DiscoverKeys has a panic on non-rsa jwks key that causes crash during key discoveryGo chainguard.dev/apko · Upgrade to 1.2.7 or later · < 1.2.7 · CVE-2026-42576 · GHSA-m7hm-vm4x-28jf
Go github.com/pelicanplatform/pelican · Upgrade to 0.0.0-20260408120501-7f73b9c3e677 (pre-release) or later · < 0.0.0-20260408120501-7f73b9c3e677 · CVE-2026-42571 · GHSA-rpfr-x88x-xwcw
Packagist nabeel/phpvms · Upgrade to 7.0.6 or later · < 7.0.6 · CVE-2026-42569 · GHSA-fv26-4939-62fh
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-q4ph-8x8g-95f8
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-qff7-q5fm-8p76
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-4fm3-ggg2-c6qx
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · CVE-2026-42606 · GHSA-gv7r-3mr9-h5x8
currentDirectory Parameter that Enables Remote Code Execution via Media UploadPackagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · CVE-2026-42605 · GHSA-vp2f-cqqp-478j
Maven io.quarkiverse.openapi.generator:quarkus-openapi-generator · Upgrade to 2.17.0 or 2.16.0-lts (pre-release) by release line · < 2.16.0-lts; >= 2.16.0, <= 2.16.0 · CVE-2026-42333 · GHSA-fr8f-rwjx-f32v
Maven org.thymeleaf:thymeleaf +2 · Upgrade all 3 to 3.1.5.RELEASE or later · <= 3.1.4.RELEASE · CVE-2026-41901 · GHSA-c9ph-gxww-7744
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44994 · GHSA-93rg-2xm5-2p9v · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44113 · GHSA-5h3g-6xhh-rg6p · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44112 · GHSA-wppj-c6mr-83jj · amended
npm signalk-server · Upgrade to 2.25.0 or later · <= 2.24.0 · CVE-2026-41893 · GHSA-vmfm-ch9h-5c7g · amended
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.8.0 or later · >= 0.26.0, <= 0.31.7.0 · CVE-2026-41891 · GHSA-5hfv-c864-qcq9
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.8.0 or later · >= 0.31.1.0, <= 0.31.7.0 · CVE-2026-41890 · GHSA-vgrf-pr28-vf98
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44115 · GHSA-x3h8-jrgh-p8jx · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44118 · GHSA-r6xh-pqhr-v4xh · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-45003 · GHSA-55cf-xx38-4p9p · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44997 · GHSA-q3jj-46pq-826r · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44116 · GHSA-2hh7-c75g-qj2r · amended
PyPI pillow · Upgrade to 12.2.0 or later · >= 10.3.0, < 12.2.0 · CVE-2026-42311 · GHSA-pwv6-vv43-88gr · amended
PyPI pillow · Upgrade to 12.2.0 or later · >= 4.2.0, < 12.2.0 · CVE-2026-42310 · GHSA-r73j-pqj5-w3x7 · amended
PyPI pillow · Upgrade to 12.2.0 or later · < 12.2.0 · CVE-2026-42308 · GHSA-wjx4-4jcj-g98j · amended
PyPI pillow · Upgrade to 12.2.0 or later · >= 11.2.1, < 12.2.0 · CVE-2026-42309 · GHSA-5xmw-vc9v-4wf2 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.