Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Packagist composer/composer · Upgrade to 2.6.4, 2.2.22 or 1.10.27 by release line · < 1.10.27; >= 2.0.0, < 2.2.22; >= 2.3.0, < 2.6.4 · CVE-2023-43655 · GHSA-jm6m-4632-36hf
Maven org.apache.avro:avro +1 · Upgrade all 2 to 1.11.3 or later · < 1.11.3 · CVE-2023-39410 · GHSA-rhrv-645h-fjfh · amended
PyPI rdiffweb · Upgrade to 2.8.4 or later · < 2.8.4 · CVE-2023-5289 · GHSA-c4rv-2j6x-pq7x · amended
PyPI pretix · Upgrade to 2023.7.2 or later · < 2023.7.2 · CVE-2023-44464 · GHSA-9jvx-p6mq-fw4v · amended
Go github.com/hashicorp/vault · Upgrade to 1.13.0 or later · < 1.13.0 · CVE-2023-5077 · GHSA-86c6-3g63-5w64
npm electron · Upgrade to 27.0.0-beta.8 (pre-release), 26.2.4, 25.8.4 or 2 more by release line · < 22.3.25; >= 24.0.0, < 24.8.5; >= 25.0.0, < 25.8.4; >= 26.0.0, < 26.2.4; >= 27.0.0-alpha.1, < 27.0.0-beta.8 · CVE-2023-5217 · GHSA-qqvq-6xgj-jw8g · amended
PyPI pydash · Upgrade to 6.0.0 or later · < 6.0.0 · CVE-2023-26145 · GHSA-8mjr-6c96-39w8 · amended
npm @napi-rs/image · Upgrade to 1.7.0 or later · < 1.7.0 · GHSA-4vjr-crvh-383h · amended
npm get-func-name · Upgrade to 2.0.1 or later · < 2.0.1 · CVE-2023-43646 · GHSA-4q6p-r6v2-jvc5 · amended
Maven io.undertow:undertow-parent · Upgrade to 2.2.24.Final or later · < 2.2.24.Final · CVE-2023-3223 · GHSA-65h2-wf7m-q2v8
Packagist opencart/opencart · Upgrade to 4.0.2.3 or later · >= 4.0.0.0, < 4.0.2.3 · CVE-2023-2315 · GHSA-v4j2-cwmm-xg89
Go github.com/sagernet/sing-box · Upgrade to 1.5.0-rc.5 (pre-release) or 1.4.5 by release line · < 1.4.5; >= 1.5.0-beta.1, < 1.5.0-rc.5 · +1 more package · CVE-2023-43644 · GHSA-r5hm-mp3j-285g
Maven org.codehaus.plexus:plexus-utils · Upgrade to 3.0.24 or later · < 3.0.24 · CVE-2022-4244 · GHSA-g6ph-x5wf-g337
PyPI searchor · Upgrade to 2.4.2 or later · <= 2.4.1 · CVE-2023-43364 · GHSA-66m2-493m-crh2 · amended
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.4 or later · <= 1.1.10.3 · CVE-2023-43642 · GHSA-55g7-9cwv-5qfv
--exec command injection when using %qPyPI yt-dlp · Upgrade to 2023.9.24 or later · >= 2021.4.11, < 2023.9.24 · CVE-2023-40581 · GHSA-42h4-v29r-42qg · amended
Go golang.org/x/net · Upgrade to 0.0.0-20190125091013-d26f9f9a57f3 (pre-release) or later · < 0.0.0-20190125091013-d26f9f9a57f3 · CVE-2018-17846 · GHSA-vfw5-hrgq-h5wf
PyPI gevent · Upgrade to 23.9.0 or later · < 23.9.0 · CVE-2023-41419 · GHSA-x7m3-jprg-wc5g · amended
PyPI openstack-heat · Upgrade to 20.0.0 or later · < 20.0.0 · CVE-2023-1625 · GHSA-5836-grcc-8j89 · amended
Go github.com/openshift/apiserver-library-go · Upgrade to 0.0.0-20230621 (pre-release) or later · < 0.0.0-20230621 · CVE-2023-1260 · GHSA-92hx-3mh6-hc49
Maven org.jeecgframework.boot:jeecg-boot-common · Upgrade to 3.6.0 or later · <= 3.5.3 · CVE-2023-40989 · GHSA-rwhx-6hx7-pqc8
Go github.com/gomarkdown/markdown · Upgrade to 0.0.0-20230922105210-14b16010c2ee (pre-release) or later · < 0.0.0-20230922105210-14b16010c2ee · CVE-2023-42821 · GHSA-m9xq-6h2j-65r2
PyPI mobsf · Upgrade to 3.9.7 or later · < 3.9.7 · CVE-2023-42261 · GHSA-cc8j-6phr-jv9x
crates.io quinn-proto · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2023-42805 · GHSA-q8wc-j5m9-27w3
npm systeminformation · Upgrade to 5.21.7 or later · >= 5.0.0, < 5.21.7 · CVE-2023-42810 · GHSA-gx6r-qc2v-3p3v · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.