Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.xwiki.platform:xwiki-platform-oldcore · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.19 by release line · >= 6.4-milestone-1, < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31987 · GHSA-cv55-v6rw-7r5v
Maven org.xwiki.platform:xwiki-platform-scheduler-ui · Upgrade to 15.9, 15.5.4 or 14.10.19 by release line · >= 3.1, < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.9 · CVE-2024-31986 · GHSA-37m4-hqxv-w26g
Maven org.xwiki.platform:xwiki-platform-search-solr-ui · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.20 by release line · >= 7.2-rc-1, < 14.10.20; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31984 · GHSA-xm4h-3jxr-m3c6
Maven org.xwiki.platform:xwiki-platform-localization-source-wiki · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.20 by release line · >= 4.3-milestone-2, < 14.10.20; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31983 · GHSA-xxp2-9c9g-7wmj
Maven org.xwiki.platform:xwiki-platform-search-ui · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.20 by release line · >= 2.4-milestone-1, < 14.10.20; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31982 · GHSA-2858-8cfx-69m9
Maven org.xwiki.platform:xwiki-platform-oldcore · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.20 by release line · >= 3.0.1, < 14.10.20; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31981 · GHSA-vxwr-wpjv-qjq7
Maven org.xwiki.platform:xwiki-platform-search-ui · Upgrade to 15.10-rc-1 (pre-release), 15.5.4 or 14.10.20 by release line · >= 5.2-milestone-2, < 14.10.20; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.10-rc-1 · CVE-2024-31465 · GHSA-34fj-r5gq-7395
--exec command injection when using %q in yt-dlp on Windows (Bypass of CVE-2023-40581)PyPI yt-dlp · Upgrade to 2024.4.9 or later · >= 2021.4.11, < 2024.4.9 · CVE-2024-22423 · GHSA-hjq6-52gw-2g7p · amended
Maven org.wildfly.security:wildfly-elytron-http-oidc · Upgrade to 2.2.5.Final or later · < 2.2.5.Final · CVE-2023-6236 · GHSA-jpmx-996v-48fm
Maven org.apache.zeppelin:zeppelin-interpreter · Upgrade to 0.11.1 or later · >= 0.8.2, < 0.11.1 · CVE-2024-31866 · GHSA-86jx-wr74-xr74
Maven org.apache.zeppelin:zeppelin-jdbc · Upgrade to 0.11.1 or later · < 0.11.1 · CVE-2024-31864 · GHSA-66j8-c83m-gj5f
Go github.com/flipped-aurora/gin-vue-admin/server · Upgrade to 0.0.0-20240409100909-b1b7427c6ea6 (pre-release) or later · < 0.0.0-20240409100909-b1b7427c6ea6 · CVE-2024-31457 · GHSA-gv3w-m57p-3wc4
PyPI dirac · Upgrade to 8.0.41 or later · < 8.0.41 · CVE-2024-29905 · GHSA-v6f3-gh5h-mqwx · amended
Packagist contao/core-bundle · Upgrade to 5.3.4 or 4.13.40 by release line · >= 4.9.0, < 4.13.40; >= 5.0.0-RC1, < 5.3.4 · CVE-2024-28235 · GHSA-9jh5-qf84-x6pr
Maven com.google.oauth-client:google-oauth-client · Upgrade to 1.33.3 or later · >= 1.16.0-rc, < 1.33.3 · CVE-2021-22573 · GHSA-hw42-3568-wj87
Go github.com/ollama/ollama · Upgrade to 0.1.29 or later · < 0.1.29 · CVE-2024-28224 · GHSA-5jx5-hqx5-2vrj
Go github.com/grafana/grafana · Upgrade to 10.3.5, 10.2.6, 10.1.9 or 2 more by release line · >= 9.5.0, < 9.5.18; >= 10.0.0, < 10.0.13; >= 10.1.0, < 10.1.9; >= 10.2.0, < 10.2.6; >= 10.3.0, < 10.3.5 · CVE-2024-1313 · GHSA-67rv-qpw2-6qrr
crates.io whoami · Upgrade to 1.5.0 or later · >= 0.5.3, < 1.5.0 · GHSA-w5w5-8vfh-xcjq
crates.io eyre · Upgrade to 0.6.12 or later · >= 0.6.9, < 0.6.12 · GHSA-4v52-7q2x-v4xj
crates.io cassandra-cpp · Upgrade to 3.0.0 or later · < 3.0.0 · CVE-2024-27284 · GHSA-x9xc-63hg-vcfq
Go github.com/mattermost/mattermost/server/v8 · Upgrade to 9.5.2, 9.4.4, 9.3.3 or 8.1.11 by release line · >= 8.1.0, < 8.1.11; >= 9.5.0, < 9.5.2; >= 9.4.0, < 9.4.4; >= 9.3.0, < 9.3.3 · CVE-2024-2447 · GHSA-wp43-vprh-c3w5
Maven io.quarkus:quarkus-core · Upgrade to 3.9.2, 3.8.4 or 3.2.12.Final by release line · >= 3.9.0.CR1, <= 3.9.1; >= 3.3.0.CR1, <= 3.8.3; < 3.2.12.Final · CVE-2024-2700 · GHSA-f8h5-v2vg-46rr
PyPI pgadmin4 · Upgrade to 8.5 or later · < 8.5 · CVE-2024-3116 · GHSA-27jx-ffw8-xrqv · amended
npm dectalk-tts · Upgrade to 1.0.1 or later · >= 1.0.0, <= 1.0.0 · CVE-2024-31206 · GHSA-6cf6-8hvr-r68w · amended
Packagist amphp/http-client · Upgrade to 4.1.0-rc1 (pre-release) or later · >= 4.0.0-rc10, <= 4.0.0 · GHSA-w8gf-g2vq-j2f4
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.