Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
8076–8100 of 31,057 matching · newest first
Maven org.xwiki.platform:xwiki-platform-oldcore +1 · Upgrade all 2 to 17.10.1 or 17.4.8 by release line · >= 17.0.0-rc-1, < 17.4.8; >= 17.5.0-rc-1, < 17.10.1 · CVE-2026-33229 · GHSA-h259-74h5-4rh9
Go github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream · Upgrade to 1.7.8 or later · < 1.7.8 · +11 more packages · GHSA-xmrv-pmrh-hhx2
PyPI emmett · Upgrade to 2.8.1 or later · >= 2.5.0, < 2.8.1 · CVE-2026-39847 · GHSA-pr46-2v3c-5356 · amended
PyPI pyload-ng · Upgrade to 0.5.0b3.dev97 (pre-release) or later · < 0.5.0b3.dev97 · CVE-2026-40071 · GHSA-rfgh-63mg-8pwm · amended
PyPI lightrag-hku · Upgrade to 1.4.14 or later · <= 1.4.13 · CVE-2026-39413 · GHSA-8ffj-4hx4-9pgf · amended
npm hono · Upgrade to 4.12.12 or later · < 4.12.12 · CVE-2026-39410 · GHSA-r5rp-j6wh-rvv4 · amended
npm hono · Upgrade to 4.12.12 or later · < 4.12.12 · CVE-2026-39409 · GHSA-xpcf-pg52-r92g · amended
npm hono · Upgrade to 4.12.12 or later · < 4.12.12 · CVE-2026-56762 · GHSA-26pp-8wgv-hjvm · amended
npm hono · Upgrade to 4.12.12 or later · >= 4.0.0, <= 4.12.11 · CVE-2026-39408 · GHSA-xf4j-xp2r-rqqx · amended
npm hono · Upgrade to 4.12.12 or later · < 4.12.12 · CVE-2026-39407 · GHSA-wmmm-f939-6g9c · amended
npm @hono/node-server · Upgrade to 1.19.13 or later · < 1.19.13 · CVE-2026-39406 · GHSA-92pp-h63x-v22m · amended
PyPI jwcrypto · Upgrade to 1.5.7 or later · <= 1.5.6 · CVE-2026-39373 · GHSA-fjrm-76x2-c4q4 · amended
--allowed-tools "" does not restrict available toolsnpm openclaw-claude-bridge · Upgrade to 2.0.0 or later · <= 1.1.1 · CVE-2026-39398 · GHSA-7853-gqqm-vcwx · amended
npm @delmaredigital/payload-puck · Upgrade to 0.6.23 or later · < 0.6.23 · CVE-2026-39397 · GHSA-65w6-pf7x-5g85 · amended
RubyGems rack-session · Upgrade to 2.1.2 or later · >= 2.0.0, < 2.1.2 · CVE-2026-39324 · GHSA-33qg-7wpp-89cq
npm drizzle-orm · Upgrade to 1.0.0-beta.20 (pre-release) or 0.45.2 by release line · < 0.45.2; >= 1.0.0-beta.2, < 1.0.0-beta.20 · CVE-2026-39356 · GHSA-gpj5-g38j-94v9 · amended
/sessions/me bypasses _Session protectedFieldsnpm parse-server · Upgrade to 9.8.0-alpha.7 (pre-release) or 8.6.75 by release line · >= 9.0.0, < 9.8.0-alpha.7; >= 7.0.0, < 8.6.75 · CVE-2026-39381 · GHSA-g4v2-qx3q-4p64 · amended
Maven gov.nsa.emissary:emissary · Upgrade to 8.39.0 or later · < 8.39.0 · CVE-2026-35583 · GHSA-hxf2-gm22-7vcm
Maven gov.nsa.emissary:emissary · Upgrade to 8.39.0 or later · < 8.39.0 · CVE-2026-35581 · GHSA-6c37-7w4p-jg9v · amended
Maven gov.nsa.emissary:emissary · Upgrade to 8.39.0 or later · < 8.39.0 · CVE-2026-35580 · GHSA-3g6g-gq4r-xjm9
PyPI fastfeedparser · Upgrade to 0.5.10 or later · <= 0.5.9 · CVE-2026-39376 · GHSA-4gx2-pc4f-wq37 · amended
npm rwsdk · Upgrade to 1.0.6 or later · >= 1.0.0-beta.50, <= 1.0.5 · CVE-2026-39371 · GHSA-x8rx-789c-2pxq · amended
npm skilleton · Upgrade to 0.3.1 or later · < 0.3.1 · GHSA-5g3j-89fr-r2vp · amended
npm parse-server · Upgrade to 9.8.0-alpha.6 (pre-release) or 8.6.74 by release line · >= 9.0.0, < 9.8.0-alpha.6; < 8.6.74 · CVE-2026-39321 · GHSA-mmpq-5hcv-hf2v · amended
PyPI justhtml · Upgrade to 1.14.0 or later · >= 1.13.0, < 1.14.0 · CVE-2026-5751 · GHSA-r758-8hxw-4845 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.