Voilà Local file inclusion
PyPI voila · Upgrade to 0.5.6, 0.4.4, 0.3.8 or 0.2.17 by release line · >= 0.0.2, < 0.2.17; >= 0.3.0a0, < 0.3.8; >= 0.4.0a0, < 0.4.4; >= 0.5.0a0, < 0.5.6 · CVE-2024-30265 · GHSA-2q59-h24c-w6fg · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI voila · Upgrade to 0.5.6, 0.4.4, 0.3.8 or 0.2.17 by release line · >= 0.0.2, < 0.2.17; >= 0.3.0a0, < 0.3.8; >= 0.4.0a0, < 0.4.4; >= 0.5.0a0, < 0.5.6 · CVE-2024-30265 · GHSA-2q59-h24c-w6fg · amended
PyPI pillow · Upgrade to 10.3.0 or later · < 10.3.0 · CVE-2024-28219 · GHSA-44wm-f244-xhp3 · amended
Go github.com/quic-go/quic-go · Upgrade to 0.42.0 or later · < 0.42.0 · CVE-2024-22189 · GHSA-c33x-xqrf-c478
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-0637 · GHSA-22v7-v3mj-pm8r
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-23116 · GHSA-j4pc-vqvc-4p9x
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-23119 · GHSA-626r-cj47-p49g
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-23117 · GHSA-j8hg-v5qv-9m28
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-23115 · GHSA-qjvm-p5vg-437c
Packagist centreon/centreon · Upgrade to 22.10.15 or later · < 22.10.15 · CVE-2024-23118 · GHSA-2j4g-v4fv-rhwg
integrity attribute to injected code allows to bypass the allow-listsnpm @kindspells/astro-shield · Upgrade to 1.3.2 or later · >= 1.2.0, < 1.3.2 · CVE-2024-30250 · GHSA-c4gr-q97g-ppwc · amended
PyPI piccolo-admin · Upgrade to 1.3.2 or later · >= 1.2.0, < 1.3.2 · CVE-2024-30248 · GHSA-pmww-v6c9-7p83 · amended
npm @electron/packager · Upgrade to 18.3.1 or later · >= 18.3.0, <= 18.3.0 · CVE-2024-29900 · GHSA-34h3-8mw4-qw57 · amended
npm @kindspells/astro-shield · Upgrade to 1.3.0 or later · >= 1.2.0, <= 1.2.0 · CVE-2024-29896 · GHSA-w387-5qqw-7g8m · amended
Packagist codeigniter4/framework · Upgrade to 4.4.7 or later · < 4.4.7 · CVE-2024-29904 · GHSA-39fp-mqmm-gxj6
Go github.com/cilium/cilium · Upgrade to 1.15.3, 1.14.9 or 1.13.14 by release line · >= 1.4.0, <= 1.13.13; >= 1.14.0, <= 1.14.7; >= 1.15.0, <= 1.15.2 · CVE-2024-28860 · GHSA-pwqm-x5x6-5586
PyPI jupyterhub · Upgrade to 4.1.0 or later · < 4.1.0 · CVE-2024-28233 · GHSA-7r3h-4ph8-w38g · amended
Go github.com/zitadel/zitadel · Upgrade to 2.48.3, 2.47.8, 2.46.5 or 4 more by release line · < 2.42.17; >= 2.43.0, < 2.43.11; >= 2.44.0, < 2.44.7; >= 2.45.0, < 2.45.5; >= 2.46.0, < 2.46.5; >= 2.47.0, < 2.47.8; >= 2.48.0, < 2.48.3 · CVE-2024-29891 · GHSA-hr5w-cwwq-2v4m
Go github.com/zitadel/zitadel · Upgrade to 2.48.3, 2.47.8, 2.46.5 or 4 more by release line · < 2.42.17; >= 2.43.0, < 2.43.11; >= 2.44.0, < 2.44.7; >= 2.45.0, < 2.45.5; >= 2.46.0, < 2.46.5; >= 2.47.0, < 2.47.8; >= 2.48.0, < 2.48.3 · CVE-2024-29892 · GHSA-gp8g-f42f-95q2
npm web3-utils · Upgrade to 4.2.1 or later · >= 4.0.1, < 4.2.1 · CVE-2024-21505 · GHSA-2g4c-8fpm-c46v · amended
PyPI lektor · Upgrade to 3.4.0b11 (pre-release) or 3.3.11 by release line · < 3.3.11; >= 3.4.0b1, < 3.4.0b11 · CVE-2024-28335 · GHSA-wv28-7fpw-fj49 · amended
PyPI gradio · Upgrade to 4.18.0 or later · < 4.18.0 · CVE-2024-2206 · GHSA-r364-m2j9-mf4h · amended
Maven org.igniterealtime.openfire:xmppserver · Upgrade to 4.8.1 or later · < 4.8.1 · CVE-2024-25420 · GHSA-5xvc-rwv8-86p7
Packagist phpmyfaq/phpmyfaq · Upgrade to 3.2.6 or later · >= 3.2.5, <= 3.2.5 · CVE-2024-28105 · GHSA-pwh2-fpfr-x5gf
Packagist phpmyfaq/phpmyfaq · Upgrade to 3.2.6 or later · >= 3.2.5, <= 3.2.5 · CVE-2024-28107 · GHSA-2grw-mc9r-822r
Packagist phpmyfaq/phpmyfaq · Upgrade to 3.2.6 or later · >= 3.2.5, <= 3.2.5 · CVE-2024-27299 · GHSA-qgxx-4xv5-6hcw
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.