Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 398 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 578 in the 30 days before.
Critical: 64 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

8001–8025 of 14,192 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 7.514 Sep 2023
PocketMine-MP server crash with certain invalid JSON payloads in LoginPacket due to dependency vulnerability (again)
Packagist pocketmine/pocketmine-mp · Upgrade to 5.3.1 or 4.23.1 by release line · >= 5.0.0, <= 5.3.0; <= 4.23.0 · GHSA-92jh-gwch-jq38
14 Sep 2023Evidence →
High, CVSS 7.514 Sep 2023
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Packagist pocketmine/pocketmine-mp · Upgrade to 5.3.1 or later · >= 5.2.0, < 5.3.1 · GHSA-79rc-jjh6-rc89
14 Sep 2023Evidence →
High, CVSS 7.514 Sep 2023
Undertow denial of service vulnerability
Maven io.undertow:undertow-core · Upgrade to 2.3.5.Final or 2.2.24.Final by release line · >= 2.3.0, < 2.3.5.Final; < 2.2.24.Final · CVE-2023-1108 · GHSA-m4mm-pg93-fv78
14 Sep 2023Evidence →
High, CVSS 7.814 Sep 2023
Apache HDFS Provider error message suggested
PyPI apache-airflow-providers-apache-hdfs · Upgrade to 4.1.1 or later · < 4.1.1 · CVE-2023-41267 · GHSA-5hj9-m76g-xrc8 · amended
14 Sep 2023Evidence →
High, CVSS 7.513 Sep 2023
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
RubyGems grpc · Upgrade to 1.56.2, 1.55.3, 1.54.3 or 1.53.2 by release line · >= 1.56.0, < 1.56.2; >= 1.55.0, < 1.55.3; >= 1.54.0, < 1.54.3; >= 1.53.0, < 1.53.2 · +1 more package · CVE-2023-4785 · GHSA-p25m-jpj4-qcrr · amended
13 Sep 2023Evidence →
High, CVSS 7.313 Sep 2023
Strapi Improper Rate Limiting vulnerability
npm @strapi/plugin-users-permissions +1 · Upgrade all 2 to 4.12.1 or later · < 4.12.1 · CVE-2023-38507 · GHSA-24q2-59hm-rh9r · amended
13 Sep 2023Evidence →
Critical, CVSS 10.013 Sep 2023
Craft CMS Remote Code Execution vulnerability
Packagist craftcms/cms · Upgrade to 4.4.15 or later · >= 4.0.0-RC1, <= 4.4.14 · CVE-2023-41892 · GHSA-4w8r-3xrw-v25g
13 Sep 2023Evidence →
Critical, CVSS 9.313 Sep 2023
NLnet Labs’ Routinator vulnerable to path traversal
crates.io routinator · Upgrade to 0.12.2 or later · >= 0.9.0, < 0.12.2 · CVE-2023-39916 · GHSA-5rxf-fqch-7vqp
13 Sep 2023Evidence →
High, CVSS 7.513 Sep 2023
BER/CER/DER decoder panics on invalid input
crates.io bcder · Upgrade to 0.7.3 or later · < 0.7.3 · CVE-2023-39914 · GHSA-6jmw-6mxw-w4jc
13 Sep 2023Evidence →
High, CVSS 8.812 Sep 2023
Keycloak vulnerable to Plaintext Storage of User Password
Maven org.keycloak:keycloak-core · Upgrade to 22.0.3 or later · >= 22.0.2, <= 22.0.2 · CVE-2023-4918 · GHSA-5q66-v53q-pm35
12 Sep 2023Evidence →
High, CVSS 7.812 Sep 2023
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
NuGet microsoft.netcore.app.runtime.win-x86 +2 · Upgrade all 3 to 7.0.11 or 6.0.22 by release line · >= 6.0.0, <= 6.0.21; >= 7.0.0, <= 7.0.10 · CVE-2023-36792 · GHSA-3qf9-qxfj-4whc
12 Sep 2023Evidence →
High, CVSS 7.812 Sep 2023
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
NuGet microsoft.netcore.app.runtime.win-x86 +2 · Upgrade all 3 to 7.0.11 or 6.0.22 by release line · >= 6.0.0, <= 6.0.21; >= 7.0.0, <= 7.0.10 · CVE-2023-36794 · GHSA-38fq-h5hc-gwv8
12 Sep 2023Evidence →
High, CVSS 7.812 Sep 2023
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
NuGet microsoft.netcore.app.runtime.win-x86 +2 · Upgrade all 3 to 7.0.11 or 6.0.22 by release line · >= 7.0.0, <= 7.0.10; >= 6.0.0, <= 6.0.21 · CVE-2023-36793 · GHSA-g4p8-g7mq-wpx4
12 Sep 2023Evidence →
High, CVSS 7.812 Sep 2023
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
NuGet microsoft.netcore.app.runtime.win-x86 +2 · Upgrade all 3 to 7.0.11 or 6.0.22 by release line · >= 6.0.0, <= 6.0.21; >= 7.0.0, <= 7.0.10 · CVE-2023-36796 · GHSA-h7jm-g87p-5935
12 Sep 2023Evidence →
High, CVSS 7.112 Sep 2023
Apache Airflow information exposure vulnerability
PyPI apache-airflow · Upgrade to 2.7.1 or later · < 2.7.1 · CVE-2023-40712 · GHSA-mjqh-v5f2-g2mw · amended
12 Sep 2023Evidence →
High, CVSS 7.512 Sep 2023
Cecil Path Traversal vulnerability
Packagist cecil/cecil · Upgrade to 7.47.1 or later · < 7.47.1 · CVE-2023-4914 · GHSA-q8hr-4w58-985p
12 Sep 2023Evidence →
High, CVSS 8.8Exploited · CISA KEV12 Sep 2023
libwebp: OOB write in BuildHuffmanTable
NuGet skiasharp · Upgrade to 2.88.6 or later · >= 2.0.0, < 2.88.6 · +12 more packages · CVE-2023-4863 · GHSA-j7hp-h8jx-5ppr · amended
12 Sep 2023Evidence →
Critical, CVSS 9.812 Sep 2023
OpenRefine Remote Code execution in project import with mysql jdbc url attack
Maven org.openrefine:database · Upgrade to 3.7.5 or later · <= 3.7.4 · CVE-2023-41887 · GHSA-p3r5-x3hr-gpg5
12 Sep 2023Evidence →
High, CVSS 7.512 Sep 2023
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Maven org.openrefine:database · Upgrade to 3.7.5 or later · <= 3.7.4 · CVE-2023-41886 · GHSA-qqh2-wvmv-h72m
12 Sep 2023Evidence →
High, CVSS 7.511 Sep 2023
Magento LTS's guest order "protect code" can be brute-forced too easily
Packagist openmage/magento-lts · Upgrade to 20.1.1 or 19.5.1 by release line · <= 19.5.0; >= 20.0.0, <= 20.1.0 · CVE-2023-41879 · GHSA-9358-cpvx-c2qp
11 Sep 2023Evidence →
High, CVSS 7.511 Sep 2023
RKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
Go github.com/rancher/rke2 · Upgrade to 1.28.1, 1.27.5, 1.26.8 or 2 more by release line · < 1.24.17; >= 1.25.0, < 1.25.13; >= 1.26.0, < 1.26.8; >= 1.27.0, < 1.27.5; >= 1.28.0, < 1.28.1 · CVE-2023-32186 · GHSA-p45j-vfv5-wprq
11 Sep 2023Evidence →
High, CVSS 7.511 Sep 2023
K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
Go github.com/k3s-io/k3s · Upgrade to 1.28.1, 1.27.5, 1.26.8 or 2 more by release line · < 1.24.17; >= 1.25.0, < 1.25.13; >= 1.26.0, < 1.26.8; >= 1.27.0, < 1.27.5; >= 1.28.0, < 1.28.1 · CVE-2023-32187 · GHSA-m4hf-6vgr-75r2
11 Sep 2023Evidence →
Critical, CVSS 9.911 Sep 2023
Argo CD cluster secret might leak in cluster details page
Go github.com/argoproj/argo-cd/v2 · Upgrade to 2.8.3, 2.7.14 or 2.6.15 by release line · >= 2.2.0, < 2.6.15; >= 2.7.0, < 2.7.14; >= 2.8.0, < 2.8.3 · CVE-2023-40029 · GHSA-fwr2-64vr-xv9m
11 Sep 2023Evidence →
High, CVSS 7.59 Sep 2023
hutool Buffer Overflow vulnerability
Maven cn.hutool:hutool-json +1 · Upgrade all 2 to 5.8.22 or later · < 5.8.22 · CVE-2023-42278 · GHSA-rr66-qh5m-w6mx
9 Sep 2023Evidence →
High, CVSS 7.58 Sep 2023
Hexo include_code has a path traversal
npm hexo · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2023-39584 · GHSA-x2jc-989c-47q4 · amended
8 Sep 2023Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV13 Nov 2026
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
NewsExploited · CISA KEV13 Nov 2026
UnrealIRCd Improper Neutralization of Delimiters Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-win32-x64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-win32-arm64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in zread_cli (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-darwin-x64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-darwin-arm64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)

PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey

Undertow denial of service vulnerability

Apache HDFS Provider error message suggested

Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

Strapi Improper Rate Limiting vulnerability

Craft CMS Remote Code Execution vulnerability

NLnet Labs’ Routinator vulnerable to path traversal

BER/CER/DER decoder panics on invalid input

Keycloak vulnerable to Plaintext Storage of User Password

Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability

Apache Airflow information exposure vulnerability

Cecil Path Traversal vulnerability

libwebp: OOB write in BuildHuffmanTable

OpenRefine Remote Code execution in project import with mysql jdbc url attack

OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack

Magento LTS's guest order "protect code" can be brute-forced too easily

RKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack

K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack

Argo CD cluster secret might leak in cluster details page

hutool Buffer Overflow vulnerability

Hexo `include_code` has a path traversal

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence