Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20240126104956-d70e37c8575e (pre-release) or later · < 1.9.10-0.20240126104956-d70e37c8575e · CVE-2024-23828 · GHSA-qcjq-7f7v-pvc8
Go github.com/0xJacky/Nginx-UI · Upgrade to 1.9.10-0.20240128060047-8581bdd3c6f4 (pre-release) or later · < 1.9.10-0.20240128060047-8581bdd3c6f4 · CVE-2024-23827 · GHSA-xvq9-4vpv-227m
npm meshcentral · Upgrade to 1.1.17 or later · < 1.1.17 · CVE-2023-51842 · GHSA-wpxw-5xfm-x22v · amended
Maven org.apache.kylin:kylin-core-common · Upgrade to 4.0.4 or later · >= 2.0.0, < 4.0.4 · CVE-2023-29055 · GHSA-3vvc-v8c2-43r7
Go github.com/dexidp/dex · Upgrade to 2.38.0 or 0.0.0-20240125115555-5bbdb4420254 (pre-release) by release line · >= 2.37.0, <= 2.37.0; < 0.0.0-20240125115555-5bbdb4420254 · CVE-2024-23656 · GHSA-gr79-9v6v-gc9r
Maven io.quarkus.resteasy.reactive:resteasy-reactive · Upgrade to 3.2.9.Final or 2.13.9.Final by release line · < 2.13.9.Final; >= 3.0.0.Final, < 3.2.9.Final · CVE-2023-6267 · GHSA-8j3x-w35r-rw4r
crates.io lemmy_server · Upgrade to 0.19.1 or later · >= 0.17.0, < 0.19.1 · CVE-2024-23649 · GHSA-r64r-5h43-26qv
Packagist pimcore/admin-ui-classic-bundle · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2024-23648 · GHSA-mrqg-mwh7-q94j
Packagist pimcore/admin-ui-classic-bundle · Upgrade to 1.3.2 or later · >= 1.0.0, < 1.3.2 · CVE-2024-23646 · GHSA-cwx6-4wmf-c6xv
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.442, 2.440.1 or 2.426.3 by release line · >= 1.606, <= 2.426.2; >= 2.441, <= 2.441; >= 2.427, < 2.440.1 · CVE-2024-23897 · GHSA-6f9g-cxwr-q5jr
Maven io.jenkins.plugins:redhat-dependency-analytics · Upgrade to 0.9.0 or later · < 0.9.0 · CVE-2024-23905 · GHSA-x22x-5pp9-8v7f
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.442 or 2.426.3 by release line; some affected versions have no fix yet · >= 2.217, <= 2.426.2; >= 2.427, <= 2.440; >= 2.441, <= 2.441 · CVE-2024-23898 · GHSA-53ph-2r2x-vqw8
Maven org.jenkins-ci.plugins:git-server · Upgrade to 99.101.v720e86326c09 or later · < 99.101.v720e86326c09 · CVE-2024-23899 · GHSA-vph5-2q33-7r9h
PyPI apache-airflow · Upgrade to 2.8.1rc1 (pre-release) or later · < 2.8.1rc1 · CVE-2023-50943 · GHSA-c3c6-f2ww-xfr2 · amended
PyPI apache-airflow · Upgrade to 2.8.1rc1 (pre-release) or later · < 2.8.1rc1 · CVE-2023-50944 · GHSA-vm5m-qmrx-fw8w · amended
npm @sveltejs/kit · Upgrade to 2.4.3 or later · >= 2.0.0, < 2.4.3 · +1 more package · CVE-2024-23641 · GHSA-g5m6-hxpp-fc49 · amended
PyPI label-studio · Upgrade to 1.9.2 or later · < 1.9.2 · CVE-2023-47115 · GHSA-q68h-xwq5-mm7x · amended
Maven com.alipay.sofa:rpc-sofa-boot-starter · Upgrade to 5.12.0 or later · < 5.12.0 · CVE-2024-23636 · GHSA-7q8p-9953-pxvr
PyPI apache-superset · Upgrade to 3.0.3 or later · < 3.0.3 · CVE-2023-49657 · GHSA-rwhh-6x83-84v6 · amended
PyPI nautobot · Upgrade to 2.1.2 or 1.6.10 by release line · >= 2.0.0, < 2.1.2; < 1.6.10 · CVE-2024-23345 · GHSA-v4xv-795h-rv4h · amended
Maven org.springframework:spring-core · Upgrade to 6.1.3 or 6.0.16 by release line · >= 6.1.2, <= 6.1.2; >= 6.0.15, <= 6.0.15 · CVE-2024-22233 · GHSA-r4q3-7g4q-x89m
Maven org.clojure:clojure · Upgrade to 1.9.0 or later · < 1.9.0 · CVE-2017-20189 · GHSA-jgxc-8mwq-9xqw
PyPI embedchain · Upgrade to 0.1.57 or later · < 0.1.57 · CVE-2024-23731 · GHSA-rhhj-5436-95vf · amended
PyPI llama-hub · Upgrade to 0.0.67 or later · < 0.0.67 · CVE-2024-23730 · GHSA-297x-2qf3-jrj3 · amended
PyPI paddlepaddle · Upgrade to 2.6.0 or later · < 2.6.0 · CVE-2024-0521 · GHSA-chj7-w3f6-cvfj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.