Decidim amendments can be accepted or rejected by anyone
RubyGems decidim-core · Upgrade to 0.31.1 or 0.30.5 by release line · >= 0.31.0.rc1, < 0.31.1; >= 0.19.0, < 0.30.5 · CVE-2026-40869 · GHSA-w5xj-99cg-rccm
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
7801–7825 of 31,057 matching · newest first
RubyGems decidim-core · Upgrade to 0.31.1 or 0.30.5 by release line · >= 0.31.0.rc1, < 0.31.1; >= 0.19.0, < 0.30.5 · CVE-2026-40869 · GHSA-w5xj-99cg-rccm
PyPI keystone · Upgrade to 28.0.1 or later · < 28.0.1 · CVE-2026-40683 · GHSA-pfx2-9x9m-7ghx · amended
Go github.com/kyverno/kyverno · Upgrade to 1.17.0 or later · < 1.17.0 · CVE-2026-40868 · GHSA-q93q-v844-jrqp
Go github.com/kyverno/kyverno · Upgrade to 1.16.2 or later · < 1.16.2 · GHSA-fmqp-4wfc-w3v7
PyPI justhtml · Upgrade to 1.16.0 or later · <= 1.15.0 · CVE-2026-7808 · GHSA-4p64-v8f5-r2gx · amended
Packagist composer/composer · Upgrade to 2.9.6 or 2.2.27 by release line · >= 2.3.0, < 2.9.6; >= 1.0.0, < 2.2.27 · CVE-2026-40176 · GHSA-wg36-wvj6-r67p · amended
Packagist october/system · Upgrade to 4.1.10 or 3.7.14 by release line · >= 4.0.0, <= 4.1.9; <= 3.7.13 · CVE-2026-24907 · GHSA-j4j5-9x6g-rgxc
Packagist october/system · Upgrade to 4.1.10 or 3.7.14 by release line · >= 4.0.0, <= 4.1.9; <= 3.7.13 · CVE-2026-24906 · GHSA-6qmh-j78v-ffp7
Packagist october/rain · Upgrade to 4.1.5 or 3.7.13 by release line · >= 4.0.0, <= 4.1.4; <= 3.7.12 · CVE-2026-22692 · GHSA-m5qg-jc75-4jp6
Packagist composer/composer · Upgrade to 2.9.6 or 2.2.27 by release line · >= 2.3.0, < 2.9.6; >= 1.0.0, < 2.2.27 · CVE-2026-40261 · GHSA-gqw4-4w2p-838q
npm @adonisjs/http-server · Upgrade to 8.2.0 or 7.8.1 by release line · >= 8.0.0-next.0, < 8.2.0; < 7.8.1 · +1 more package · CVE-2026-40255 · GHSA-6qvv-pj99-48qm · amended
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-40312 · GHSA-5xg3-585r-9jh5
NuGet magick.net-q8-arm64 +15 · Upgrade all 16 to 14.12.0 or later · < 14.12.0 · CVE-2026-40311 · GHSA-r83h-crwp-3vm7
NuGet magick.net-q8-arm64 +15 · Upgrade all 16 to 14.12.0 or later · < 14.12.0 · CVE-2026-40310 · GHSA-pwg5-6jfc-crvh
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-40183 · GHSA-jvgr-9ph5-m8v4
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-40169 · GHSA-5592-p365-24xh
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-33905 · GHSA-pcvx-ph33-r5vv
NuGet magick.net-q8-arm64 +16 · Upgrade all 17 to 14.12.0 or later · < 14.12.0 · CVE-2026-33902 · GHSA-f4qm-vj5j-9xpw
npm @samanhappy/mcphub · Upgrade to 0.11.0 or later · < 0.11.0 · CVE-2025-13822 · GHSA-9vq7-9h42-j88h · amended
Maven org.apache.pdfbox:pdfbox-examples · Upgrade to 3.0.8 or 2.0.37 by release line · >= 2.0.24, <= 2.0.36; >= 3.0.0, <= 3.0.7 · CVE-2026-33929 · GHSA-gcj8-76p4-g2fq
PyPI gdown · Upgrade to 5.2.2 or later · <= 5.2.1 · CVE-2026-40491 · GHSA-76hw-p97h-883f · amended
npm follow-redirects · Upgrade to 1.16.0 or later · < 1.16.0 · CVE-2026-40895 · GHSA-r4q5-vmmm-2653 · amended
PyPI mitmproxy · Upgrade to 12.2.2 or later · <= 12.2.1 · CVE-2026-40606 · GHSA-527g-3w9m-29hv · amended
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.9 or 2.14.5 by release line · >= 3.0.0.Beta1, < 3.0.9; >= 2.0.0, < 2.14.5 · CVE-2026-40490 · GHSA-cmxv-58fp-fm3g
RubyGems fat_free_crm · Upgrade to 0.26.0 or later · < 0.26.0 · GHSA-9pm8-vwc5-w2hm
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.