Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
8026–8050 of 31,057 matching · newest first
Go github.com/mattermost/mattermost-plugin-msteams · Upgrade to 1.15.1-0.20260213190728-6fe4d295592e (pre-release) or later · < 1.15.1-0.20260213190728-6fe4d295592e · CVE-2026-24661 · GHSA-5rfv-h47g-xj42
Maven org.apache.dolphinscheduler:dolphinscheduler · Upgrade to 3.2.0 or later · >= 3.1.0, < 3.2.0 · CVE-2025-62188 · GHSA-3cjc-vhfm-ffp2
PyPI apache-airflow · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2026-34538 · GHSA-r7vr-m4jw-r794 · amended
npm 9router · Upgrade to 0.3.75 or later · < 0.3.75 · CVE-2026-5842 · GHSA-xrrh-p7f2-27vm · amended
npm taskflow-ai · Upgrade to 2.1.9 or later · < 2.1.9 · CVE-2026-5831 · GHSA-3xp3-pr8x-f755 · amended
PyPI praisonai · Upgrade to 4.5.121 or later · < 4.5.121 · CVE-2026-40088 · GHSA-2763-cj5r-c79m · amended
Go github.com/openfga/openfga · Upgrade to 1.14.0 or later · >= 0.1.4, <= 1.13.1 · CVE-2026-40293 · GHSA-68m9-983m-f3v5
PyPI langchain-core · Upgrade to 1.2.28 or 0.3.84 by release line · < 0.3.84; >= 1.0.0a1, < 1.2.28 · CVE-2026-40087 · GHSA-926x-3r5x-gfhw
PyPI marimo · Upgrade to 0.23.0 or later · < 0.23.0 · CVE-2026-39987 · GHSA-2679-6mx9-h9xc · amended
npm @chenglou/pretext · Upgrade to 0.0.5 or later · <= 0.0.4 · GHSA-5478-66c3-rhxr · amended
npm basic-ftp · Upgrade to 5.2.1 or later · >= 5.2.0, <= 5.2.0 · CVE-2026-39983 · GHSA-chqc-8p9q-pq6q · amended
PyPI agixt · Upgrade to 1.9.2 or later · <= 1.9.1 · CVE-2026-39981 · GHSA-5gfj-64gh-mgmw · amended
Packagist laravel/passport · Upgrade to 13.7.1 or later · >= 13.0.0, < 13.7.1 · CVE-2026-39976 · GHSA-349c-2h2f-mxf6
npm n8n-mcp · Upgrade to 2.47.4 or later · <= 2.47.3 · CVE-2026-39974 · GHSA-4ggg-h7ph-26qr · amended
Go github.com/dunglas/mercure · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-39972 · GHSA-hwr4-mq23-wcv5
NuGet tmds.dbus · Upgrade to 0.92.0 or later · < 0.92.0 · +1 more package · CVE-2026-39959 · GHSA-xrw6-gwf8-vvr9
PyPI cryptography · Upgrade to 46.0.7 or later · >= 45.0.0, < 46.0.7 · CVE-2026-39892 · GHSA-p423-j2cm-9vmq · amended
Go github.com/monetr/monetr · Upgrade to 1.12.3 or later · <= 1.12.2 · CVE-2026-39901 · GHSA-hqxq-hwqf-wg83
npm mcp-from-openapi · Upgrade to 2.3.0 or later · <= 2.1.2 · +2 more packages · CVE-2026-39885 · GHSA-v6ph-xcq9-qxxj · amended
Go go.opentelemetry.io/otel/sdk · Upgrade to 1.43.0 or later · >= 1.15.0, <= 1.42.0 · CVE-2026-39883 · GHSA-hfvc-g4fc-pqhx
Go go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp · Upgrade to 1.43.0 or later · < 1.43.0 · +2 more packages · CVE-2026-39882 · GHSA-w8rr-5gcm-pp58
PyPI praisonaiagents · Upgrade to 1.5.115 or later · <= 1.5.114 · CVE-2026-56078 · GHSA-766v-q9x3-g744 · amended
PyPI praisonai · Upgrade to 4.5.115 or later · <= 4.5.114 · CVE-2026-39891 · GHSA-hwg5-x759-7wjg · amended
PyPI praisonai · Upgrade to 4.5.115 or later · <= 4.5.114 · CVE-2026-39889 · GHSA-f292-66h9-fpmf · amended
execute_code (subprocess mode)PyPI praisonaiagents · Upgrade to 1.5.115 or later · <= 1.5.114 · CVE-2026-39888 · GHSA-qf73-2hrx-xprp · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.