Snappy PHAR deserialization vulnerability
Packagist knplabs/knp-snappy · Upgrade to 1.4.3 or later · <= 1.4.2 · CVE-2023-41330 · GHSA-92rv-4j2h-8mjj
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Packagist knplabs/knp-snappy · Upgrade to 1.4.3 or later · <= 1.4.2 · CVE-2023-41330 · GHSA-92rv-4j2h-8mjj
PyPI ethyca-fides · Upgrade to 2.19.0 or later · >= 2.11.0, < 2.19.0 · CVE-2023-41319 · GHSA-p6p2-qq95-vq5h · amended
Go github.com/answerdev/answer · Upgrade to 1.1.3 or later · < 1.1.3 · CVE-2023-4815 · GHSA-pj2h-85jq-g5vg
Go github.com/ethereum/go-ethereum · Upgrade to 1.12.1-stable (pre-release) or later · < 1.12.1-stable · CVE-2023-40591 · GHSA-ppjg-v974-84cm
Go github.com/minio/minio · Upgrade to 0.0.0-202303200735 (pre-release) or later · < 0.0.0-202303200735 · CVE-2023-28433 · GHSA-w23q-4hw3-2pp6
npm electron · Upgrade to 23.0.0-alpha.2 (pre-release) or 22.0.1 by release line · >= 22.0.0-beta.1, < 22.0.1; >= 23.0.0-alpha.1, < 23.0.0-alpha.2 · CVE-2023-23623 · GHSA-gxh7-wv9q-fwfr · amended
Maven org.jenkins-ci.plugins:ssh2easy · Upgrade to 1.6 or later · < 1.6 · CVE-2023-41939 · GHSA-4gh2-m88h-8cj8
Maven org.jenkins-ci.plugins:google-login · Upgrade to 1.8 or later · <= 1.7 · CVE-2023-41936 · GHSA-g58x-57fv-86jh
Maven io.jenkins.plugins:bitbucket-push-and-pull-request · Upgrade to 2.8.4 or later · >= 2.4.0, <= 2.8.3 · CVE-2023-41937 · GHSA-vrpg-c7c4-8mpx
Maven org.jenkins-ci.plugins:azure-ad · Upgrade to 397.v907382dd9b (pre-release) or 378.vd6e2874a (pre-release) by release line · >= 378.380.v545b, <= 396.v86ce29279947; < 378.vd6e2874a · CVE-2023-41935 · GHSA-hj7p-h74j-6gxj
PyPI keylime · Upgrade to 7.5.0 or later · < 7.5.0 · CVE-2023-38201 · GHSA-f4r5-q63f-gcww · amended
Go github.com/minio/minio · Upgrade to 0.0.0-202303200415 (pre-release) or later · < 0.0.0-202303200415 · CVE-2023-28434 · GHSA-2pxw-r47w-4p8c
beforeFind not invoked in internal query pipeline when fetching pointernpm parse-server · Upgrade to 6.2.2 or 5.5.5 by release line · >= 1.0.0, < 5.5.5; >= 6.0.0, < 6.2.2 · CVE-2023-41058 · GHSA-fcv6-fg5r-jm9q · amended
npm @dcl/single-sign-on-client · Upgrade to 0.1.0 or later · < 0.1.0 · CVE-2023-41049 · GHSA-vp4f-wxgw-7x8x · amended
PyPI numexpr · Upgrade to 2.8.5 or later · < 2.8.5 · +1 more package · CVE-2023-39631 · GHSA-f73w-4m7g-ch9x · amended
Maven org.hjson:hjson · Upgrade to 3.0.1 or later · < 3.0.1 · CVE-2023-39685 · GHSA-94w5-rf69-2h6c
Go github.com/usememos/memos · Upgrade to 0.13.2 or later · < 0.13.2 · CVE-2023-4697 · GHSA-5j6p-59cj-j6cp
Go github.com/usememos/memos · Upgrade to 0.13.2 or later · < 0.13.2 · CVE-2023-4696 · GHSA-j2gj-g3p9-7mrr
PyPI restrictedpython · Upgrade to 6.2 or 5.4 by release line · <= 5.3; >= 6.0, <= 6.1 · CVE-2023-41039 · GHSA-xjw2-6jm9-rf67 · amended
npm find-exec · Upgrade to 1.0.3 or later · < 1.0.3 · CVE-2023-40582 · GHSA-95rp-6gqp-6622 · amended
PyPI gitpython · Upgrade to 3.1.33 or later · <= 3.1.32 · CVE-2023-40590 · GHSA-wfm5-v35h-vwf4 · amended
PyPI apache-airflow-providers-apache-sqoop · Upgrade to 4.0.0 or later · < 4.0.0 · CVE-2023-27604 · GHSA-g3m9-pr5m-4cvp · amended
PyPI apache-airflow-providers-apache-spark · Upgrade to 4.1.3 or later · < 4.1.3 · CVE-2023-40195 · GHSA-8q28-pw9g-w82c · amended
Go github.com/gravitl/netmaker · Upgrade to 0.18.6 or 0.17.1 by release line · < 0.17.1; >= 0.18.0, < 0.18.6 · CVE-2023-32079 · GHSA-826j-8wp2-4x6q
Go github.com/gravitl/netmaker · Upgrade to 0.18.6 or 0.17.1 by release line · < 0.17.1; >= 0.18.0, < 0.18.6 · CVE-2023-32078 · GHSA-256m-j5qw-38f4
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.