Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/rancher/rancher · Upgrade to 2.8.2, 2.7.10 or 2.6.14 by release line · >= 2.6.0, < 2.6.14; >= 2.7.0, < 2.7.10; >= 2.8.0, < 2.8.2 · CVE-2023-32194 · GHSA-c85r-fwc7-45vc
PyPI kinto-attachment · Upgrade to 6.4.0 or later · <= 6.3.2 · CVE-2024-1314 · GHSA-hvp4-vrv2-8wrq · amended
NuGet panelswwix4.sdk · Upgrade to 5.0.0-psw-wix.0251-40 (pre-release) or later · < 5.0.0-psw-wix.0251-40 · GHSA-8v28-3g86-chj5
NuGet panelsw.custom.wix · Upgrade to 3.15.0-a44 (pre-release) or later · < 3.15.0-a44 · GHSA-259p-rvjx-ffwg
NuGet wix · Upgrade to 4.0.4 or 3.14.0 by release line · >= 4.0.0, < 4.0.4; < 3.14.0 · CVE-2024-24810 · GHSA-7wh2-wxc7-9ph5
PyPI dirac · Upgrade to 8.0.37 or later · >= 8.0.0, < 8.0.37; < 8.0.37 · CVE-2024-24825 · GHSA-59qj-jcjv-662j · amended
Packagist composer/composer · Upgrade to 2.7.0 or 2.2.23 by release line · >= 2.0.0-alpha1, < 2.2.23; >= 2.3.0-rc1, < 2.7.0 · CVE-2024-24821 · GHSA-7c6p-848j-wh5h
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.2 or later · >= 7.2.0, < 7.4.2 · +1 more package · CVE-2024-25148 · GHSA-qwj8-qgpr-8crm
Go github.com/elastic/apm-server · Upgrade to 8.12.1 or later · < 8.12.1 · CVE-2024-23448 · GHSA-8r33-q5j5-rh7g
Maven org.graylog2:graylog2-server · Upgrade to 5.2.4 or 5.1.11 by release line · >= 2.0.0, < 5.1.11; >= 5.2.0-alpha.1, < 5.2.4 · CVE-2024-24824 · GHSA-p6gg-5hf4-4rgj
PyPI products-sqlalchemyda · Upgrade to 2.2 or later · < 2.2 · CVE-2024-24811 · GHSA-r3jc-3qmm-w3pw · amended
PyPI vyper · Upgrade to 0.4.0 or later · < 0.4.0 · CVE-2024-24563 · GHSA-52xq-j7v9-v4v2 · amended
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.3.7 or later · >= 7.2.0, < 7.3.7 · CVE-2024-25143 · GHSA-87m3-6qj3-p3xh
Maven com.liferay.portal:release.portal.bom · Upgrade to 7.4.3.12 or later · < 7.4.3.12 · +1 more package · CVE-2024-25145 · GHSA-9vgq-w5pv-v77q
Maven org.apache.pulsar:pulsar-broker-auth-sasl · Upgrade to 3.1.1, 3.0.2 or 2.11.3 by release line · < 2.11.3; >= 3.0.0, < 3.0.2; >= 3.1.0, < 3.1.1 · CVE-2023-51437 · GHSA-c57v-4vg5-cm2x
PyPI django · Upgrade to 5.0.2, 4.2.10 or 3.2.24 by release line · >= 4.2, < 4.2.10; >= 5.0, < 5.0.2; >= 3.2, < 3.2.24 · CVE-2024-24680 · GHSA-xxj9-f6rv-m3x4 · amended
Maven org.apache.sling:org.apache.sling.servlets.resolver · Upgrade to 2.11.0 or later · < 2.11.0 · CVE-2024-23673 · GHSA-h2rq-qhr7-53gm
npm stimulsoft-dashboards-js · Upgrade to 2024.1.3 or later · < 2024.1.3 · CVE-2024-24398 · GHSA-gfqf-9w98-7jmx · amended
PyPI gradio · Upgrade to 4.9.0 or later · < 4.9.0 · CVE-2024-0964 · GHSA-f3h9-8phc-6gvh · amended
PyPI cryptography · Upgrade to 42.0.0 or later · < 42.0.0 · CVE-2023-50782 · GHSA-3ww4-gg4f-jr7f · amended
Go github.com/hashicorp/boundary · Upgrade to 0.15.0 or later · >= 0.8.0, < 0.15.0 · CVE-2024-1052 · GHSA-vh73-q3rw-qx7w
npm yarn · Upgrade to 1.22.13 or later · < 1.22.13 · CVE-2021-4435 · GHSA-mpwj-fcr6-x34c · amended
NuGet powershell · Upgrade to 7.0.0 or later · < 7.0.0 · GHSA-jcmq-5rrv-j2g4
Go github.com/siderolabs/talos · Upgrade to 1.6.4 or 1.5.6 by release line · >= 1.6.0, < 1.6.4; < 1.5.6 · GHSA-g5p6-327m-3fxx
Maven com.linecorp.centraldogma:centraldogma-server · Upgrade to 0.64.1 or later · < 0.64.1 · CVE-2024-1143 · GHSA-34q3-p352-c7q8
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.