Low, CVSS 2.1
uv vulnerable to arbitrary file deletion through RECORD entries
PyPI uv · Upgrade to 0.11.6 or later · <= 0.11.5 · CVE-2026-114110 · GHSA-pjjw-68hj-v9mw · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 963 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,112 in the 30 days before.
- Critical
- 64 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
7901–7925 of 31,057 matching · newest first
- Critical, CVSS 9.1
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
PyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40289 · GHSA-8x8f-54wf-vv92 · amended
- Critical, CVSS 9.8
PraisonAI has critical RCE via
type: jobworkflow YAMLPyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40288 · GHSA-vc46-vw85-3wvm · amended
- High, CVSS 8.4
PraisonAI Vulnerable to RCE via Automatic tools.py Import
PyPI praisonai · Upgrade to 4.5.139 or later · <= 4.5.138 · +1 more package · CVE-2026-40287 · GHSA-g985-wjh9-qxxc · amended
- High, CVSS 8.1
SiYuan: Publish Reader Can Arbitrarily Delete Attribute View Files via
/api/av/removeUnusedAttributeViewGo github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260407035653-2f416e5253f1 (pre-release) or later · < 0.0.0-20260407035653-2f416e5253f1 · CVE-2026-40259 · GHSA-7m5h-w69j-qggg
- Medium, CVSS 6.9
PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
PyPI praisonai · Upgrade to 4.5.133 or later · < 4.5.133 · CVE-2026-40315 · GHSA-x783-xp3g-mqhp · amended
- High, CVSS 7.1
Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble
PyPI bugsink · Upgrade to 2.1.1 or later · >= 2.1.0, <= 2.1.0 · CVE-2026-40162 · GHSA-8hw4-fhww-273g · amended
- Unrated
@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler
npm @saltcorn/data · Upgrade to 1.6.0-beta.4 (pre-release), 1.5.5 or 1.4.5 by release line · < 1.4.5; >= 1.5.0, < 1.5.5; >= 1.6.0-alpha.0, < 1.6.0-beta.4 · GHSA-59xv-588h-2vmm · amended
- High, CVSS 8.2
Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read
npm @saltcorn/server · Upgrade to 1.6.0-beta.4 (pre-release), 1.5.5 or 1.4.5 by release line · < 1.4.5; >= 1.5.0-beta.0, < 1.5.5; >= 1.6.0-alpha.0, < 1.6.0-beta.4 · CVE-2026-40163 · GHSA-32pv-mpqg-h292 · amended
- High, CVSS 7.2
PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40114 · GHSA-8frj-8q3m-xhgm · amended
- Medium, CVSS 5.5
PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands
PyPI praisonaiagents · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-56074 · GHSA-ffp3-3562-8cv3 · amended
- High, CVSS 7.1
PraisonAIAgents: SSRF via unvalidated URL in
web_crawlhttpx fallbackPyPI praisonaiagents · Upgrade to 1.5.128 or later · >= 0.13.23, < 1.5.128 · CVE-2026-40160 · GHSA-qq9r-63f6-v542 · amended
- High, CVSS 8.1
PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
PyPI praisonaiagents · Upgrade to 4.5.128 or later · < 4.5.128 · GHSA-x462-jjpc-q4q4 · amended
- Medium, CVSS 5.5
PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40159 · GHSA-pj2r-f9mw-vrcq · amended
- Critical, CVSS 9.4
PraisonAI vulnerable to arbitrary file write via path traversal in
praisonai recipe unpackPyPI praisonai · Upgrade to 4.5.128 or later · >= 2.7.2, < 4.5.128 · CVE-2026-40157 · GHSA-99g3-w8gr-x37c · amended
- High, CVSS 7.8
PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic
tools.pyLoadingPyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40156 · GHSA-2g3w-cpc4-chr4 · amended
- Medium, CVSS 6.5
PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40148 · GHSA-f2h6-7xfr-xm8w · amended
- Critical, CVSS 9.3
PraisonAI Vulnerable Untrusted Remote Template Code Execution
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40154 · GHSA-pv9q-275h-rh7x · amended
- High, CVSS 8.8
PraisonAI: Hardcoded
approval_mode="auto"in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command ExecutionPyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-56075 · GHSA-qwgj-rrpj-75xm · amended
- High, CVSS 8.6
PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40158 · GHSA-3c4r-6p77-xwr7 · amended
- Medium, CVSS 5.3
PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40152 · GHSA-7j2f-xc8p-fjmq · amended
- High, CVSS 7.4
PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40153 · GHSA-v8g7-9q6v-p3x8 · amended
- Medium, CVSS 5.3
PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40151 · GHSA-pm96-6xpr-978x · amended
- High, CVSS 7.9
PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40149 · GHSA-4wr3-f4p3-5wjh · amended
- High, CVSS 7.7
PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40150 · GHSA-8f4v-xfm9-3244 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.