Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 934 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,115 in the 30 days before.
Critical: 62 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

8001–8025 of 31,057 matching · newest first

ExploitedClear filters

Medium, CVSS 5.99 Apr 2026
OpenClaw Host-Exec Environment Variable Injection
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · GHSA-w9j9-w4cp-6wgr · amended
9 Apr 2026Evidence →
Medium, CVSS 6.99 Apr 2026
OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42430 · GHSA-w8g9-x8gx-crmm · amended
9 Apr 2026Evidence →
Low, CVSS 2.09 Apr 2026
OpenClaw: Gateway plugin HTTP auth: gateway widens identity-bearing operator.read requests into runtime operator.write
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42429 · GHSA-4f8g-77mw-3rxc · amended
9 Apr 2026Evidence →
Medium, CVSS 6.99 Apr 2026
OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-41912 · GHSA-vr5g-mmx7-h897 · amended
9 Apr 2026Evidence →
Medium, CVSS 6.99 Apr 2026
OpenClaw node.pair.approve placed in operator.write scope instead of operator.pairing allows unprivileged pairing approval
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42426 · GHSA-67mf-f936-ppxf · amended
9 Apr 2026Evidence →
Low, CVSS 2.19 Apr 2026
OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-41911 · GHSA-5fc7-f62m-8983 · amended
9 Apr 2026Evidence →
Medium, CVSS 5.99 Apr 2026
OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-41914 · GHSA-3fv3-6p2v-gxwj · amended
9 Apr 2026Evidence →
Medium, CVSS 5.99 Apr 2026
OpenClaw: Existing WS sessions survive shared gateway token rotation
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42421 · GHSA-5h3f-885m-v22w · amended
9 Apr 2026Evidence →
Low, CVSS 2.19 Apr 2026
OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths
npm openclaw · Upgrade to 2026.4.4 or later · < 2026.4.4 · CVE-2026-41913 · GHSA-25wv-8phj-8p7r · amended
9 Apr 2026Evidence →
High, CVSS 7.39 Apr 2026
OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42432 · GHSA-5wj5-87vq-39xm · amended
9 Apr 2026Evidence →
Medium, CVSS 4.89 Apr 2026
OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-41910 · GHSA-vc32-h5mq-453v · amended
9 Apr 2026Evidence →
Medium, CVSS 5.19 Apr 2026
OpenClaw: resolvedAuth closure becomes stale after config reload
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-41916 · GHSA-68x5-xx89-w9mm · amended
9 Apr 2026Evidence →
Medium, CVSS 5.99 Apr 2026
OpenClaw node.invoke(browser.proxy) bypasses browser.request persistent profile-mutation guard
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42431 · GHSA-cmfr-9m2r-xwhq · amended
9 Apr 2026Evidence →
Medium, CVSS 5.99 Apr 2026
OpenClaw device.token.rotate mints tokens for unapproved roles, bypassing device role-upgrade pairing
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42422 · GHSA-whf9-3hcx-gq54 · amended
9 Apr 2026Evidence →
Medium, CVSS 5.19 Apr 2026
OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42424 · GHSA-qqq7-4hxc-x63c · amended
9 Apr 2026Evidence →
Medium, CVSS 5.99 Apr 2026
OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42423 · GHSA-q2gc-xjqw-qp89 · amended
9 Apr 2026Evidence →
Medium, CVSS 6.39 Apr 2026
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
npm axios · Upgrade to 1.15.0 or 0.31.0 by release line · >= 1.0.0, < 1.15.0; < 0.31.0 · CVE-2025-62718 · GHSA-3p68-rc4w-qgx5 · amended
9 Apr 2026Evidence →
Medium, CVSS 4.29 Apr 2026
fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification
npm fast-jwt · Upgrade to 6.2.1 or later · >= 5.0.0, <= 6.2.0 · CVE-2026-35041 · GHSA-cjw9-ghj4-fwxf · amended
9 Apr 2026Evidence →
Medium, CVSS 5.39 Apr 2026
fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)
npm fast-jwt · Upgrade to 6.2.1 or later · < 6.2.1 · CVE-2026-35040 · GHSA-3j8v-cgw4-2g6q · amended
9 Apr 2026Evidence →
High, CVSS 7.59 Apr 2026
HashiCorp's go-getter library may allow arbitrary file reads
Go github.com/hashicorp/go-getter · Upgrade to 1.8.6 or later · < 1.8.6 · CVE-2026-4660 · GHSA-92mm-2pjq-r785
9 Apr 2026Evidence →
High, CVSS 8.69 Apr 2026
OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)
npm openclaw · Upgrade to 2026.4.8 or later · < 2026.4.8 · CVE-2026-42427 · GHSA-7437-7hg8-frrw · amended
9 Apr 2026Evidence →
High, CVSS 8.59 Apr 2026
OpenClaw: Authenticated /hooks/wake and mapped wake payloads are promoted into the trusted System: prompt channel
npm openclaw · Upgrade to 2026.4.8 or later · <= 2026.4.2 · GHSA-jf56-mccx-5f3f · amended
9 Apr 2026Evidence →
High, CVSS 7.39 Apr 2026
OpenClaw: Lower-trust background runtime output is injected into trusted System: events, and local async exec completion misses the intended exec-event downgrade
npm openclaw · Upgrade to 2026.4.8 or later · <= 2026.4.2 · GHSA-gfmx-pph7-g46x · amended
9 Apr 2026Evidence →
Low, CVSS 3.79 Apr 2026
Mattermost MS Teams plugin doesn't limit the request body size on the /lifecycle webhook endpoint
Go github.com/mattermost/mattermost-plugin-msteams · Upgrade to 1.15.1-0.20260213190728-6fe4d295592e (pre-release) or later · < 1.15.1-0.20260213190728-6fe4d295592e · CVE-2026-21388 · GHSA-x274-8qfc-hrgf
9 Apr 2026Evidence →
Critical, CVSS 9.19 Apr 2026
Apache Airflow: JWT token still valid after logout
PyPI apache-airflow · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2025-57735 · GHSA-c92r-g8j5-vhcx · amended
9 Apr 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV13 Nov 2026
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
NewsExploited · CISA KEV13 Nov 2026
UnrealIRCd Improper Neutralization of Delimiters Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-win32-x64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-win32-arm64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in zread_cli (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-darwin-x64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in @zread/cli-darwin-arm64 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

OpenClaw Host-Exec Environment Variable Injection

OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable

OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`

OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval

OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)

OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths

OpenClaw: Existing WS sessions survive shared gateway token rotation

OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths

OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement

OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes

OpenClaw: resolvedAuth closure becomes stale after config reload

OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing

OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration

OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

HashiCorp's go-getter library may allow arbitrary file reads

OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)

OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade

Mattermost MS Teams plugin doesn't limit the request body size on the /lifecycle webhook endpoint

Apache Airflow: JWT token still valid after logout

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence