Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7151–7175 of 31,057 matching · newest first
RubyGems net-imap · Upgrade to 0.6.4, 0.5.14, 0.4.24 or 0.3.10 by release line · >= 0.6.0, <= 0.6.3; >= 0.5.0, <= 0.5.13; >= 0.4.0, <= 0.4.23; <= 0.3.9 · CVE-2026-42246 · GHSA-vcgp-9326-pqcp
PyPI rdiffweb · Upgrade to 2.10.6 or later · < 2.10.6 · CVE-2025-67796 · GHSA-v4gp-hf5j-4566 · amended
Go chainguard.dev/apko · Upgrade to 1.2.7 or later · < 1.2.7 · CVE-2026-42575 · GHSA-hcwr-pq9g-rq3m
Go chainguard.dev/apko · Upgrade to 1.2.5 or later · >= 0.14.8, < 1.2.5 · CVE-2026-42574 · GHSA-qq3r-w4hj-gjp6
DiscoverKeys has a panic on non-rsa jwks key that causes crash during key discoveryGo chainguard.dev/apko · Upgrade to 1.2.7 or later · < 1.2.7 · CVE-2026-42576 · GHSA-m7hm-vm4x-28jf
Go github.com/pelicanplatform/pelican · Upgrade to 0.0.0-20260408120501-7f73b9c3e677 (pre-release) or later · < 0.0.0-20260408120501-7f73b9c3e677 · CVE-2026-42571 · GHSA-rpfr-x88x-xwcw
Packagist nabeel/phpvms · Upgrade to 7.0.6 or later · < 7.0.6 · CVE-2026-42569 · GHSA-fv26-4939-62fh
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-q4ph-8x8g-95f8
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-qff7-q5fm-8p76
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · GHSA-4fm3-ggg2-c6qx
Packagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · CVE-2026-42606 · GHSA-gv7r-3mr9-h5x8
currentDirectory Parameter that Enables Remote Code Execution via Media UploadPackagist azuracast/azuracast · Upgrade to 0.23.6 or later · <= 0.23.5 · CVE-2026-42605 · GHSA-vp2f-cqqp-478j
Maven io.quarkiverse.openapi.generator:quarkus-openapi-generator · Upgrade to 2.17.0 or 2.16.0-lts (pre-release) by release line · < 2.16.0-lts; >= 2.16.0, <= 2.16.0 · CVE-2026-42333 · GHSA-fr8f-rwjx-f32v
Maven org.thymeleaf:thymeleaf +2 · Upgrade all 3 to 3.1.5.RELEASE or later · <= 3.1.4.RELEASE · CVE-2026-41901 · GHSA-c9ph-gxww-7744
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44994 · GHSA-93rg-2xm5-2p9v · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44113 · GHSA-5h3g-6xhh-rg6p · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44112 · GHSA-wppj-c6mr-83jj · amended
npm signalk-server · Upgrade to 2.25.0 or later · <= 2.24.0 · CVE-2026-41893 · GHSA-vmfm-ch9h-5c7g · amended
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.8.0 or later · >= 0.26.0, <= 0.31.7.0 · CVE-2026-41891 · GHSA-5hfv-c864-qcq9
Packagist ci4-cms-erp/ci4ms · Upgrade to 0.31.8.0 or later · >= 0.31.1.0, <= 0.31.7.0 · CVE-2026-41890 · GHSA-vgrf-pr28-vf98
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44115 · GHSA-x3h8-jrgh-p8jx · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44118 · GHSA-r6xh-pqhr-v4xh · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-45003 · GHSA-55cf-xx38-4p9p · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44997 · GHSA-q3jj-46pq-826r · amended
npm openclaw · Upgrade to 2026.4.22 or later · <= 2026.4.21 · CVE-2026-44116 · GHSA-2hh7-c75g-qj2r · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.