Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.apache.james:james-server · Upgrade to 3.8.1 or 3.7.5 by release line · <= 3.7.4; >= 3.8.0, < 3.8.1 · CVE-2023-51518 · GHSA-px7w-c9gw-7gj3
Maven org.apache.ambari.contrib.views:ambari-contrib-views · Upgrade to 2.7.8 or later · >= 2.7.0, < 2.7.8 · CVE-2023-50379 · GHSA-rghc-9fhx-h32m
Packagist bagisto/bagisto · Upgrade to 1.3.2 or later · < 1.3.2 · CVE-2023-36237 · GHSA-7p7q-fjfw-v3gf
Maven org.eclipse.jetty.http3:jetty-http3-common · Upgrade to 12.0.6 or later · >= 12.0.0, <= 12.0.5 · +3 more packages · CVE-2024-22201 · GHSA-rggv-cv7r-mw98
npm @nfid/embed · Upgrade to 0.10.1-alpha.6 (pre-release) or later · >= 0.10.0, < 0.10.1-alpha.6 · GHSA-84c3-j8r2-mcm8 · amended
Maven com.linecorp.centraldogma:centraldogma-server-auth-saml · Upgrade to 0.64.3 or later · <= 0.64.2 · GHSA-hx5q-v6pj-533r
Maven com.linecorp.armeria:armeria-saml · Upgrade to 1.27.2 or later · <= 1.27.1 · CVE-2024-1735 · GHSA-4m6j-23p2-8c54
PyPI langchain-experimental · Upgrade to 0.0.52 or later · < 0.0.52 · CVE-2024-27444 · GHSA-v8vj-cv27-hjv8 · amended
PyPI orjson · Upgrade to 3.9.15 or later · < 3.9.15 · CVE-2024-27454 · GHSA-pwr2-4v36-6qpr · amended
PyPI fastecdsa · Upgrade to 2.3.2 or later · < 2.3.2 · CVE-2024-21502 · GHSA-ph86-g9r3-5qw4 · amended
PyPI mlflow · Upgrade to 2.10.0 or later · < 2.10.0 · CVE-2024-27133 · GHSA-3v79-q7ph-j75h · amended
PyPI mlflow · Upgrade to 2.10.0 or later · < 2.10.0 · CVE-2024-27132 · GHSA-6749-m5cp-6cg7 · amended
Maven org.apache.dolphinscheduler:dolphinscheduler-master · Upgrade to 3.2.1 or later · < 3.2.1 · CVE-2024-23320 · GHSA-rc6h-qwj9-2c53
PyPI onnx · Upgrade to 1.16.0 or later · <= 1.15.0 · CVE-2024-27318 · GHSA-whh8-fjgc-qp73 · amended
@backstage/backend-common vulnerable to path traversal through symlinksnpm @backstage/backend-common · Upgrade to 0.21.1, 0.20.2 or 0.19.10 by release line · >= 0.21.0, <= 0.21.0; < 0.19.10; >= 0.20.0, < 0.20.2 · CVE-2024-26150 · GHSA-2fc9-xpp8-2g9h · amended
Maven org.springframework:spring-web · Upgrade to 6.1.4, 6.0.17 or 5.3.32 by release line; some affected versions have no fix yet · >= 6.1.0, < 6.1.4; >= 6.0.0, < 6.0.17; >= 5.3.0, < 5.3.32; <= 5.2.25.RELEASE · CVE-2024-22243 · GHSA-ccgv-vj62-xf9h
Packagist appwrite/server-ce · Upgrade to 0.12.2 or later · >= 0.5.0, < 0.12.2 · CVE-2022-25377 · GHSA-wfm3-gq9h-mrjm
PyPI pypqc · Upgrade to 0.0.6.1 or later · >= 0.0.4, < 0.0.6.1 · GHSA-rc4p-p3j9-6577 · amended
PyPI mjml · Upgrade to 0.11.0 or later · >= 0.10.0, <= 0.10.0 · CVE-2024-26151 · GHSA-578p-fxmm-6229 · amended
Go helm.sh/helm/v3 · Upgrade to 3.14.2 or later · < 3.14.2 · CVE-2024-26147 · GHSA-r53h-jv2g-vpx6
Go github.com/gofiber/fiber/v2 · Upgrade to 2.52.1 or later · < 2.52.1 · CVE-2024-25124 · GHSA-fmg4-x8pw-hjhg
Packagist phenx/php-svg-lib · Upgrade to 0.5.2 or later · < 0.5.2 · GHSA-97m3-52wr-xvv2
Go github.com/apache/incubator-answer · Upgrade to 1.2.5 or later · < 1.2.5 · CVE-2024-22393 · GHSA-rmqp-mvv2-54c6
Maven org.postgresql:postgresql · Upgrade to 42.7.2, 42.6.1, 42.5.5 or 3 more by release line · < 42.2.28; >= 42.3.0, < 42.3.9; >= 42.4.0, < 42.4.4; >= 42.5.0, < 42.5.5; >= 42.6.0, < 42.6.1; >= 42.7.0, < 42.7.2 · CVE-2024-1597 · GHSA-24rp-q3w6-vc56
PyPI cryptography · Upgrade to 42.0.4 or later · >= 38.0.0, < 42.0.4 · CVE-2024-26130 · GHSA-6vqw-3v5j-54x4 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.