go-git: Credential leak via cross-host redirect in smart HTTP transport
Go github.com/go-git/go-git/v6 · Upgrade to 6.0.0-alpha.2 (pre-release) or later · <= 6.0.0-alpha.1 · +1 more package · CVE-2026-41506 · GHSA-3xc5-wrhm-f963
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7576–7600 of 31,057 matching · newest first
Go github.com/go-git/go-git/v6 · Upgrade to 6.0.0-alpha.2 (pre-release) or later · <= 6.0.0-alpha.1 · +1 more package · CVE-2026-41506 · GHSA-3xc5-wrhm-f963
Packagist kimai/kimai · Upgrade to 2.54.0 or later · <= 2.53.0 · GHSA-jrc6-fmhw-fpq2
table_prefix in 9 conversation store backends (incomplete fix for CVE-2026-40315)PyPI praisonai · Upgrade to 4.5.149 or later · <= 4.5.148 · +1 more package · CVE-2026-41496 · GHSA-rg3h-x3jw-7jm5 · amended
PyPI praisonai · Upgrade to 4.5.149 or later · <= 4.5.148 · CVE-2026-41497 · GHSA-9qhq-v63v-fv3j · amended
Go go.opentelemetry.io/obi · Upgrade to 0.8.0 or later · >= 0.4.0, < 0.8.0 · CVE-2026-41433 · GHSA-8gmg-3w2q-65f4
RubyGems yard · Upgrade to 0.9.42 or later · < 0.9.42 · CVE-2026-41493 · GHSA-3jfp-46x4-xgfj
Go github.com/dapr/dapr · Upgrade to 1.17.5, 1.16.14 or 1.15.14 by release line · >= 1.17.0-rc.1, < 1.17.5; >= 1.16.0-rc.1, < 1.16.14; >= 1.3.0, < 1.15.14 · CVE-2026-41491 · GHSA-85gx-3qv6-4463
npm @anthropic-ai/claude-code · Upgrade to 2.1.75 or later · < 2.1.75 · CVE-2026-35603 · GHSA-5cwg-9f6j-9jvx · amended
npm openclaw · Upgrade to 2026.4.5 or later · < 2026.4.5 · CVE-2026-43576 · GHSA-f7fh-qg34-x2xh · amended
npm openclaw · Upgrade to 2026.4.10 or later · >= 2026.4.9, < 2026.4.10 · CVE-2026-42438 · GHSA-jhpv-5j76-m56h · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43533 · GHSA-66r7-m7xm-v49h · amended
npm openclaw · Upgrade to 2026.4.12 or later · >= 2026.2.23, < 2026.4.12 · CVE-2026-43530 · GHSA-2cq5-mf3v-mx44 · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-42433 · GHSA-7jp6-r74r-995q · amended
npm openclaw · Upgrade to 2026.4.10 or later · >= 2026.4.5, < 2026.4.10 · CVE-2026-42434 · GHSA-736r-jwj6-4w23 · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43580 · GHSA-536q-mj95-h29h · amended
npm openclaw · Upgrade to 2026.4.9 or later · < 2026.4.9 · CVE-2026-43577 · GHSA-qmwg-qprg-3j38 · amended
npm openclaw · Upgrade to 2026.4.9 or later · < 2026.4.9 · CVE-2026-43569 · GHSA-939r-rj45-g2rj · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43573 · GHSA-527m-976r-jf79 · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-42439 · GHSA-rj2p-j66c-mgqh · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43579 · GHSA-f3h5-h452-vp3j · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43581 · GHSA-525j-hqq2-66r4 · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43571 · GHSA-82qx-6vj7-p8m2 · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43567 · GHSA-jf25-7968-h2h5 · amended
npm openclaw · Upgrade to 2026.4.14 or later · < 2026.4.14 · CVE-2026-43527 · GHSA-53vx-pmqw-863c · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43582 · GHSA-xq94-r468-qwgj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.