High, CVSS 8.6
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
PyPI pillow · Upgrade to 12.2.0 or later · >= 10.3.0, < 12.2.0 · CVE-2026-42311 · GHSA-pwv6-vv43-88gr · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 963 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,112 in the 30 days before.
- Critical
- 64 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
7176–7200 of 31,057 matching · newest first
- Medium, CVSS 5.1
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
PyPI pillow · Upgrade to 12.2.0 or later · >= 4.2.0, < 12.2.0 · CVE-2026-42310 · GHSA-r73j-pqj5-w3x7 · amended
- Medium, CVSS 5.1
Pillow has an integer overflow when processing fonts
PyPI pillow · Upgrade to 12.2.0 or later · < 12.2.0 · CVE-2026-42308 · GHSA-wjx4-4jcj-g98j · amended
- Medium, CVSS 5.1
Pillow has a heap buffer overflow with nested list coordinates
PyPI pillow · Upgrade to 12.2.0 or later · >= 11.2.1, < 12.2.0 · CVE-2026-42309 · GHSA-5xmw-vc9v-4wf2 · amended
- High, CVSS 7.8
pyp2spec is Vulnerable to Code Injection
PyPI pyp2spec · Upgrade to 0.14.1 or later · < 0.14.1 · CVE-2026-42301 · GHSA-r35x-v8p8-xvhw · amended
- High, CVSS 8.5
Argo vulnerable to exposure of artifact repository credentials
Go github.com/argoproj/argo-workflows/v4 · Upgrade to 4.0.5 or later · >= 4.0.0, < 4.0.5 · CVE-2026-42295 · GHSA-7vf8-2cr6-54mf
- High, CVSS 8.1
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
Go github.com/argoproj/argo-workflows/v4 · Upgrade to 4.0.5 or later · >= 4.0.0, < 4.0.5 · +1 more package · CVE-2026-42296 · GHSA-3775-99mw-8rp4
- High, CVSS 8.2
Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
Go github.com/argoproj/argo-workflows/v4 · Upgrade to 4.0.5 or later · >= 4.0.0, < 4.0.5 · +1 more package · CVE-2026-42294 · GHSA-jcc8-g2q4-9fxq
- Low, CVSS 2.3
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
Go github.com/argoproj/argo-workflows/v4 · Upgrade to 4.0.5 or later · >= 4.0.0, <= 4.0.4 · CVE-2026-42183 · GHSA-p4gq-3vxj-f4jq
- High, CVSS 8.5
Argo has Missing Authorization in its Sync ConfigMap Provider
Go github.com/argoproj/argo-workflows/v4 · Upgrade to 4.0.5 or later · >= 4.0.0, < 4.0.5 · CVE-2026-42297 · GHSA-xchc-cqwg-g76q
- Medium, CVSS 5.3
Kirby CMS's system API endpoint leaks installed version and license data to authenticated users
Packagist getkirby/cms · Upgrade to 5.4.0 or 4.9.0 by release line · <= 4.8.0; >= 5.0.0, <= 5.3.3 · CVE-2026-42051 · GHSA-x68m-c7jf-2572
- Medium, CVSS 5.3
Kirby CMS doesn't gate user avatar creation, replacement and deletion with user update permissions
Packagist getkirby/cms · Upgrade to 5.4.0 or 4.9.0 by release line · <= 4.8.0; >= 5.0.0, <= 5.3.3 · CVE-2026-42174 · GHSA-39cp-6679-8xv2
- High, CVSS 7.1
Kirby CMS's read access to site, user and role information is not gated by permissions
Packagist getkirby/cms · Upgrade to 5.4.0 or 4.9.0 by release line · <= 4.8.0; >= 5.0.0, <= 5.3.3 · CVE-2026-42069 · GHSA-2h7v-4372-f6x2
- High, CVSS 8.2
Kata Container has CopyFile Policy Subversion via Symlinks
Go github.com/kata-containers/kata-containers · Upgrade to 0.0.0-20260422180503-1b9e49eb2763 (pre-release) or later · < 0.0.0-20260422180503-1b9e49eb2763 · CVE-2026-41326 · GHSA-q49m-57vm-c8cc
- Critical, CVSS 9.1
OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange
Maven org.openmrs.api:openmrs-api · Upgrade to 2.8.6 or 2.7.9 by release line · >= 2.7.0, < 2.7.9; >= 2.8.0, < 2.8.6 · CVE-2026-41258 · GHSA-xj4f-8jjg-vx4q
- High, CVSS 7.1
Incus Vulnerable to Panic via Snapshot Bounds Check
Go github.com/lxc/incus/v6/cmd/incusd · Upgrade to 7.0.0 or later · < 7.0.0 · CVE-2026-40251 · GHSA-4m88-wxj4-9qj6
- Low, CVSS 2.3
Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots
Go github.com/lxc/incus/v6/cmd/incusd · Upgrade to 7.0.0 or later · < 7.0.0 · CVE-2026-40243 · GHSA-c839-4qxr-j4x3
- Critical, CVSS 9.4
Apache Polaris has an Improper Input Validation Issue
Maven org.apache.polaris:polaris-runtime-service · Upgrade to 1.4.1 or later · < 1.4.1 · CVE-2026-42809 · GHSA-8ggj-j522-h5qf
- Critical, CVSS 9.4
Apache Polaris has an Improper Input Validation Issue
Maven org.apache.polaris:polaris-core · Upgrade to 1.4.1 or later · < 1.4.1 · CVE-2026-42810 · GHSA-vxgg-mqx2-3w59
- Critical, CVSS 9.4
Apache Polaris has an Improper Input Validation issue
Maven org.apache.polaris:polaris-runtime-service · Upgrade to 1.4.1 or later · >= 0.9.0, < 1.4.1 · CVE-2026-42812 · GHSA-w76p-3cgp-qfcm
- Critical, CVSS 9.8
Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest
Maven org.apache.opennlp:opennlp-tools · Upgrade to 3.0.0-M3 (pre-release), 2.5.9 or 1.9.5 by release line · >= 3.0.0-M1, < 3.0.0-M3; >= 2.0.0, < 2.5.9; < 1.9.5 · CVE-2026-42027 · GHSA-cx4m-2p55-rw7j
- Critical, CVSS 9.4
Apache Polaris has an Improper Input Validation issue
Maven org.apache.polaris:polaris-core · Upgrade to 1.4.1 or later · < 1.4.1 · CVE-2026-42811 · GHSA-fc3h-c6h7-r83j
- High, CVSS 7.5
Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Maven org.apache.opennlp:opennlp-tools · Upgrade to 3.0.0-M3 (pre-release), 2.5.9 or 1.9.5 by release line · >= 2.0.0, < 2.5.9; >= 3.0.0-M1, < 3.0.0-M3; < 1.9.5 · CVE-2026-42440 · GHSA-659w-93r5-9j6m · amended
- Critical, CVSS 9.1
Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing
Maven org.apache.opennlp:opennlp-tools · Upgrade to 3.0.0-M3 (pre-release), 2.5.9 or 1.9.5 by release line · >= 3.0.0-M1, < 3.0.0-M3; >= 2.0.0, < 2.5.9; < 1.9.5 · CVE-2026-40682 · GHSA-4v8g-86x5-3vrc
- High, CVSS 7.5
GoBGP has an out-of-bounds read in the ParseIP6Extended function
Go github.com/osrg/gobgp/v4 · Upgrade to 4.4.0 or later · < 4.4.0 · CVE-2026-37461 · GHSA-wmvj-f67g-qg4g
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.