Medium, CVSS 6.2
PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
PyPI praisonaiagents · Upgrade to 1.5.128 or later · < 1.5.128 · CVE-2026-40117 · GHSA-grrg-5cg9-58pf · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 963 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,112 in the 30 days before.
- Critical
- 64 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
7926–7950 of 31,057 matching · newest first
- Medium, CVSS 6.2
PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40115 · GHSA-2xgv-5cv2-47vv · amended
- High, CVSS 7.5
PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40116 · GHSA-q5r4-47m9-5mc7 · amended
- High, CVSS 8.4
PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40113 · GHSA-fvxx-ggmx-3cjg · amended
- Medium, CVSS 5.4
PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
PyPI praisonai · Upgrade to 4.5.128 or later · < 4.5.128 · CVE-2026-40112 · GHSA-cfg2-mxfj-j6pw · amended
- Critical, CVSS 9.3
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
PyPI praisonaiagents · Upgrade to 1.5.128 or later · <= 1.5.126 · CVE-2026-40111 · GHSA-v7px-3835-7gjx · amended
- High, CVSS 8.7
SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260407035653-2f416e5253f1 (pre-release) or later · < 0.0.0-20260407035653-2f416e5253f1 · CVE-2026-40107 · GHSA-w95v-4h65-j455
- Unrated
justhtml includes multiple security fixes
PyPI justhtml · Upgrade to 1.15.0 or later · <= 1.14.0 · CVE-2026-5388 · GHSA-c9vm-hv86-f23r · amended
- Medium, CVSS 6.9
Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters
Maven org.apache.logging.log4j:log4j-core · Upgrade to 2.25.4; some affected versions have no fix yet · >= 2.7, < 2.25.4; >= 3.0.0-beta1, <= 3.0.0-beta2 · CVE-2026-34479 · GHSA-h383-gmxw-35v2 · amended
- Medium, CVSS 6.3
Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout
Maven org.apache.logging.log4j:log4j-layout-template-json · Upgrade to 2.25.4; some affected versions have no fix yet · >= 2.14.0, < 2.25.4; >= 3.0.0-alpha1, <= 3.0.0-beta3 · CVE-2026-34481 · GHSA-w35j-pv5h-q9q9
- Medium, CVSS 6.3
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
NuGet log4net · Upgrade to 3.3.0 or later · < 3.3.0 · CVE-2026-40021 · GHSA-4f7c-pmjv-c25w
- Medium, CVSS 6.9
Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters
Maven org.apache.logging.log4j:log4j-core · Upgrade to 2.25.4; some affected versions have no fix yet · >= 2.0-alpha1, < 2.25.4; >= 3.0.0-alpha1, <= 3.0.0-beta3 · CVE-2026-34480 · GHSA-3pxv-7cmr-fjr4
- Medium, CVSS 6.3
Apache Log4j Core:
verifyHostNameattribute silently ignored in TLS configurationMaven org.apache.logging.log4j:log4j-core · Upgrade to 2.25.4; some affected versions have no fix yet · >= 2.12.0, < 2.25.4; >= 3.0.0-alpha1, <= 3.0.0-beta3 · CVE-2026-34477 · GHSA-6hg6-v5c8-fphq
- Medium, CVSS 6.9
Apache Log4j Core: log injection in
Rfc5424Layoutdue to silent configuration incompatibilityMaven org.apache.logging.log4j:log4j-core · Upgrade to 2.25.4; some affected versions have no fix yet · >= 2.21.0, < 2.25.4; >= 3.0.0-beta1, <= 3.0.0-beta3 · CVE-2026-34478 · GHSA-445c-vh5m-36rj
- Low, CVSS 3.5
Beszel has an IDOR in hub API endpoints that read system ID from URL parameter
Go github.com/henrygd/beszel · Upgrade to 0.18.7 or later · <= 0.18.6 · CVE-2026-40077 · GHSA-5f5r-95pg-xrpm
- Medium, CVSS 6.3
@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service
npm @sveltejs/kit · Upgrade to 2.57.1 or later · <= 2.57.0 · CVE-2026-40074 · GHSA-3f6h-2hrp-w5wx · amended
- High, CVSS 8.2
@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass
npm @sveltejs/kit · Upgrade to 2.57.1 or later · <= 2.57.0 · CVE-2026-40073 · GHSA-2crg-3p73-43xp · amended
- Medium, CVSS 6.8
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
Go github.com/aiven/aiven-operator · Upgrade to 0.37.0 or later · >= 0.31.0, < 0.37.0 · CVE-2026-39961 · GHSA-99j8-wv67-4c72
- Medium, CVSS 5.4
Vikunja: Scoped API tokens with projects.background permission can delete project backgrounds
Go code.vikunja.io/api · Upgrade to 2.3.0 or later · < 2.3.0 · CVE-2026-40103 · GHSA-v479-vf79-mg83
- High, CVSS 7.5
@vitejs/plugin-rsc has a Denial of Service with React Server Components
npm @vitejs/plugin-rsc · Upgrade to 0.5.23 or later · <= 0.5.22 · GHSA-v457-wxvj-p9w9 · amended
- High, CVSS 7.5
Next.js has a Denial of Service with Server Components
npm next · Upgrade to 16.2.3 or 15.5.15 by release line · >= 13.0.0, < 15.5.15; >= 16.0.0-beta.0, < 16.2.3 · GHSA-q4gf-8mx6-v5v3 · amended
- High, CVSS 7.5
React Server Components have a Denial of Service Vulnerability
npm react-server-dom-turbopack +2 · Upgrade all 3 to 19.2.5, 19.1.6 or 19.0.5 by release line · >= 19.0.0, < 19.0.5; >= 19.1.0, < 19.1.6; >= 19.2.0, < 19.2.5 · CVE-2026-23869 · GHSA-479c-33wc-g2pg · amended
- Medium, CVSS 5.4
Vikunja has File Size Limit Bypass via Vikunja Import
Go code.vikunja.io/api · Upgrade to 2.3.0 or later · <= 2.2.2 · CVE-2026-35602 · GHSA-qh78-rvg3-cv54
- Medium, CVSS 4.1
Vikunja has iCalendar Property Injection via CRLF in CalDAV Task Output
Go code.vikunja.io/api · Upgrade to 2.3.0 or later · <= 2.2.2 · CVE-2026-35601 · GHSA-2g7h-7rqr-9p4r
- Medium, CVSS 5.4
Vikunja has HTML Injection via Task Titles in Overdue Email Notifications
Go code.vikunja.io/api · Upgrade to 2.3.0 or later · <= 2.2.2 · CVE-2026-35600 · GHSA-45q4-x4r9-8fqj
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.