Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI pymatgen · Upgrade to 2024.2.20 or later · < 2024.2.20 · CVE-2024-23346 · GHSA-vgv8-5cpj-qj2f · amended
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.102 or later · >= 7.4.3.18, <= 7.4.3.101 · +1 more package · CVE-2023-47795 · GHSA-q2cv-7j58-rfmj
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.38 or later · >= 7.2.0, <= 7.4.3.37 · +1 more package · CVE-2024-26269 · GHSA-rwhv-hvj2-qrqm
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.5 or later · <= 7.4.3.4 · +1 more package · CVE-2024-25603 · GHSA-44jg-jgjx-3xg5
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.14 or later · <= 7.4.3.13 · +1 more package · CVE-2024-26266 · GHSA-rwxc-4cmw-7x75
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.98 or later · >= 7.3.3, <= 7.4.3.97 · +1 more package · CVE-2023-42496 · GHSA-54pv-r62j-9qqc
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.98 or later · >= 7.4.3.8, <= 7.4.3.97 · +1 more package · CVE-2023-42498 · GHSA-73x3-8mrg-5r93
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.98 or later · >= 7.4.3.44, <= 7.4.3.97 · +1 more package · CVE-2023-40191 · GHSA-468x-frcm-ghx6
Ed25519KeyIdentity.generatenpm @dfinity/auth-client +1 · Upgrade all 2 to 1.0.1 or later · >= 0.20.0-beta.0, < 1.0.1 · CVE-2024-1631 · GHSA-c9vv-fhgv-cjc3 · amended
Maven com.liferay.portal:release.dxp.bom · Upgrade to 7.2.10.fp11 or later · >= 7.2.0, < 7.2.10.fp11 · +1 more package · CVE-2021-29050 · GHSA-mh9r-9pcx-rx55
npm meshcentral · Upgrade to 1.1.21 or later · < 1.1.21 · CVE-2024-26135 · GHSA-cp68-qrhr-g9h8 · amended
PyPI cbor2 · Upgrade to 5.6.2 or later · >= 5.5.1, < 5.6.2 · CVE-2024-26134 · GHSA-375g-39jq-vq7m · amended
crates.io surrealdb · Upgrade to 1.1.1 or later · < 1.1.1 · GHSA-q3gg-m8hr-h4x4
Packagist pimcore/admin-ui-classic-bundle · Upgrade to 1.3.4 or later · < 1.3.4 · CVE-2024-25625 · GHSA-3qpq-6w89-f7mx
Packagist mantisbt/mantisbt · Upgrade to 2.26.1 or later · < 2.26.1 · CVE-2024-23830 · GHSA-mcqj-7p29-9528
PyPI apache-airflow-providers-mongo · Upgrade to 4.0.0 or later · < 4.0.0 · CVE-2024-25141 · GHSA-x5pm-h33q-cjrw · amended
Maven org.apache.camel:camel-sql · Upgrade to 4.4.0, 4.0.4, 3.22.1 or 3.21.4 by release line · >= 3.0.0, < 3.21.4; >= 3.22.0, < 3.22.1; >= 4.0.0, < 4.0.4; >= 4.1.0, < 4.4.0 · CVE-2024-22369 · GHSA-36xr-4x2f-cfj9
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.13 or later · < 7.4.3.13 · +2 more packages · CVE-2024-25610 · GHSA-vvpf-53qx-cxhh
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.14 or later · < 7.4.3.14 · +2 more packages · CVE-2024-25607 · GHSA-43h9-p3j4-39hm
Maven org.apache.dolphinscheduler:dolphinscheduler · Upgrade to 3.2.1 or later · < 3.2.1 · CVE-2023-51770 · GHSA-ff2w-wm48-jhqj
Maven org.apache.dolphinscheduler:dolphinscheduler · Upgrade to 3.2.1 or later · < 3.2.1 · CVE-2023-49250 · GHSA-37gx-jqx9-fwmg
Maven org.apache.dolphinscheduler:dolphinscheduler · Upgrade to 3.2.1 or later · >= 3.0.0, < 3.2.1 · CVE-2023-49109 · GHSA-qwxx-xww6-8q8m
Maven com.liferay.portal:com.liferay.util.java · Upgrade to 14.0.0 or later · < 14.0.0 · +2 more packages · CVE-2024-25606 · GHSA-869h-qhfx-w939
Maven org.springframework.security:spring-security-core · Upgrade to 6.2.2 or 6.1.7 by release line · >= 6.1.0, < 6.1.7; >= 6.2.0, < 6.2.2 · CVE-2024-22234 · GHSA-w3w6-26f2-p474
Maven io.undertow:undertow-core · Upgrade to 2.3.12.Final or 2.2.31.Final by release line · >= 2.3.0.Final, < 2.3.12.Final; < 2.2.31.Final · CVE-2024-1635 · GHSA-w6qf-42m7-vh68
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.