Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/tiagorlampert/CHAOS · Upgrade to 0.0.0-20220716132853-b47438d36e3a (pre-release) or later · < 0.0.0-20220716132853-b47438d36e3a · CVE-2024-33434 · GHSA-xfjj-f699-rc79
Go github.com/stacklok/minder · Upgrade to 0.0.48 or later · < 0.0.48 · CVE-2024-34084 · GHSA-9c5w-9q3f-3hv7
npm pdfjs-dist · Upgrade to 4.2.67 or later · <= 4.1.392 · CVE-2024-4367 · GHSA-wgrm-67xf-hhpq · amended
PyPI werkzeug · Upgrade to 3.0.3 or later · < 3.0.3 · CVE-2024-34069 · GHSA-2g68-c3qc-8985 · amended
PyPI litestar · Upgrade to 2.8.3, 2.7.2 or 2.6.4 by release line · >= 2.8.0, < 2.8.3; >= 2.7.0, < 2.7.2; >= 2.0.0, < 2.6.4 · +1 more package · CVE-2024-32982 · GHSA-83pv-qr33-2vcf · amended
Go github.com/ethereum/go-ethereum · Upgrade to 1.13.15 or later · < 1.13.15 · CVE-2024-32972 · GHSA-4xc9-8hmq-j652
Packagist spatie/image-optimizer · Upgrade to 1.7.3 or later · < 1.7.3 · CVE-2024-34515 · GHSA-6pjm-hmvf-h4rr
PyPI gradio · Upgrade to 4.20.0 or later · < 4.20.0 · CVE-2024-34510 · GHSA-rvfh-h6c7-fc3c · amended
Packagist tribalsystems/zenario · Upgrade to 9.5.60437 or later · < 9.5.60437 · CVE-2024-34461 · GHSA-hr2r-w6wc-25pv
Go github.com/pterodactyl/wings · Upgrade to 1.11.12 or later · < 1.11.12 · CVE-2024-34066 · GHSA-gqmf-jqgv-v8fw
PyPI sagemaker · Upgrade to 2.214.3 or later · < 2.214.3 · CVE-2024-34073 · GHSA-7pc3-pr3q-58vg · amended
PyPI sagemaker · Upgrade to 2.218.0 or later · < 2.218.0 · CVE-2024-34072 · GHSA-wjvx-jhpj-r54r · amended
Go github.com/jub0bs/fcors · Upgrade to 0.9.0 or later · <= 0.8.0 · GHSA-v84h-653v-4pq9
Go github.com/jub0bs/cors · Upgrade to 0.1.3 or later · < 0.1.3 · GHSA-vhxv-fg4m-p2w8
PyPI aiohttp · Upgrade to 3.9.4 or later · < 3.9.4 · CVE-2024-30251 · GHSA-5m98-qgg9-wh84 · amended
PyPI pgadmin4 · Upgrade to 8.6 or later · <= 8.5 · CVE-2024-4216 · GHSA-xv64-8p4r-94gq · amended
Maven org.jenkins-ci.plugins:script-security · Upgrade to 1336.vf33a (pre-release) or later · < 1336.vf33a · CVE-2024-34145 · GHSA-2g4q-9vm9-9fw4
Maven org.jenkins-ci.plugins:script-security · Upgrade to 1336.vf33a (pre-release) or later · < 1336.vf33a · CVE-2024-34144 · GHSA-v63g-v339-2673
PyPI cbpi4 · Upgrade to 4.4.1a1 (pre-release) or later · >= 4.0.0.58, < 4.4.1a1 · CVE-2024-3955 · GHSA-4f92-w438-f484 · amended
Maven org.apache.activemq:apache-activemq · Upgrade to 6.1.2 or later · >= 6.0.0, < 6.1.2 · CVE-2024-32114 · GHSA-gj5m-m88j-v7c3
crates.io apollo-router · Upgrade to 1.45.1 or later · >= 1.44.0, < 1.45.1 · CVE-2024-32971 · GHSA-q9p4-hw9m-fj2v
npm xml-crypto · Upgrade to 6.0.0 or later · >= 4.0.0, < 6.0.0 · CVE-2024-32962 · GHSA-2xp3-57p7-qf4v · amended
crates.io yamux · Upgrade to 0.13.2 or later · >= 0.13.0, < 0.13.2 · CVE-2024-32984 · GHSA-3999-5ffv-wp2r
RubyGems phlex · Upgrade to 1.10.2 or 1.9.3 by release line · < 1.9.3; >= 1.10.0, < 1.10.2 · CVE-2024-32970 · GHSA-9p57-h987-4vgx
npm uptime-kuma · Upgrade to 1.22.1 or later · <= 1.22.0 · CVE-2023-36821 · GHSA-7grx-f945-mj96 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.