Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7676–7700 of 31,057 matching · newest first
npm @clerk/nuxt · Upgrade to 2.2.2 or 1.13.28 by release line · >= 1.1.0, < 1.13.28; >= 2.0.0, < 2.2.2 · +3 more packages · CVE-2026-41248 · GHSA-vqx2-fgx2-5wq9 · amended
Packagist statamic/cms · Upgrade to 6.13.0 or 5.73.20 by release line · < 5.73.20; >= 6.0.0-alpha.1, < 6.13.0 · CVE-2026-41175 · GHSA-4jjr-vmv7-wh4w
npm electerm · Upgrade to 3.3.8 or later · < 3.3.8 · CVE-2026-41500 · GHSA-wxw2-rwmh-vr8f · amended
npm flowise +1 · Upgrade all 2 to 3.1.0 or later · <= 3.0.13 · CVE-2026-56275 · GHSA-9hrv-gvrv-6gf2 · amended
npm flowise +1 · Upgrade all 2 to 3.1.0 or later · <= 3.0.13 · CVE-2026-43995 · GHSA-qqvm-66q4-vf5c · amended
npm flowise +1 · Upgrade all 2 to 3.1.0 or later · <= 3.0.13 · CVE-2026-56273 · GHSA-w6v6-49gh-mc9w · amended
npm flowise · Upgrade to 3.1.0 or later · <= 3.0.13 · CVE-2026-56269 · GHSA-m7mq-85xj-9x33 · amended
npm flowise · Upgrade to 3.1.0 or later · <= 3.0.13 · CVE-2026-56278 · GHSA-2qqc-p94c-hxwh · amended
npm flowise · Upgrade to 3.1.0 or later · <= 3.0.13 · CVE-2026-56271 · GHSA-cc4f-hjpj-g9p8 · amended
npm flowise · Upgrade to 3.1.0 or later · <= 3.0.13 · CVE-2026-56270 · GHSA-6pcv-j4jx-m4vx · amended
npm openclaw · Upgrade to 2026.4.10 or later · < 2026.4.10 · CVE-2026-43529 · GHSA-gj9q-8w99-mp8j · amended
npm flowise +1 · Upgrade all 2 to 3.1.0 or later · <= 3.0.13 · CVE-2026-40933 · GHSA-c9gw-hvqq-f33r · amended
crates.io rustls-webpki · Upgrade to 0.104.0-alpha.6 (pre-release) or 0.103.12 by release line · >= 0.101.0, < 0.103.12; >= 0.104.0-alpha.1, < 0.104.0-alpha.6 · GHSA-xgp8-3hg3-c2mh
PyPI mako · Upgrade to 1.3.11 or later · <= 1.3.10 · CVE-2026-41205 · GHSA-v92g-xgxw-vvmm · amended
crates.io rustls-webpki · Upgrade to 0.104.0-alpha.6 (pre-release) or 0.103.12 by release line · >= 0.101.0, < 0.103.12; >= 0.104.0-alpha.1, < 0.104.0-alpha.6 · GHSA-965h-392x-2mh5
Maven com.github.junrar:junrar · Upgrade to 7.5.10 or later · < 7.5.10 · CVE-2026-41245 · GHSA-hf5p-q87m-crj7
config. .js and lead to code execution on restartnpm psitransfer · Upgrade to 2.4.3 or later · < 2.4.3 · CVE-2026-41180 · GHSA-533q-w4g6-5586 · amended
npm mojic · Upgrade to 2.1.4 or later · <= 2.1.3 · CVE-2026-41244 · GHSA-wqq3-wfmp-v85g · amended
npm @node-oauth/oauth2-server · Upgrade to 5.3.0 or later · <= 5.2.1 · CVE-2026-41213 · GHSA-jhm7-29pj-4xvf · amended
NuGet hotchocolate.language · Upgrade to 15.1.14, 14.3.1, 13.9.16 or 12.22.7 by release line · < 12.22.7; >= 13.0.0, < 13.9.16; >= 14.0.0, < 14.3.1; >= 15.0.0, < 15.1.14 · CVE-2026-40324 · GHSA-qr3m-xw4c-jqw3
PyPI weblate · Upgrade to 5.17 or later · < 5.17 · CVE-2026-40256 · GHSA-ffgh-3jrf-8wvh · amended
npm sanitize-html · Upgrade to 2.17.3 or later · >= 2.17.2, < 2.17.3 · CVE-2026-40186 · GHSA-9mrh-v2v3-xpfm · amended
npm apostrophe · Upgrade to 4.29.0 or later · <= 4.28.0 · CVE-2026-39857 · GHSA-c276-fj82-f2pq · amended
PyPI weblate · Upgrade to 5.17 or later · < 5.17 · CVE-2026-39845 · GHSA-f8hv-g549-hwg2 · amended
Go istio.io/istio · Upgrade to 0.0.0-20260403004500-692e460c342d (pre-release) or later · >= 0.0.0-20241024090207-0bf27d49ba4b, < 0.0.0-20260403004500-692e460c342d · CVE-2026-39350 · GHSA-9gcg-w975-3rjh
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.