Medium, CVSS 6.9
OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41379 · GHSA-3q42-xmxv-9vfr · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 934 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,115 in the 30 days before.
- Critical
- 62 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
8151–8175 of 31,057 matching · newest first
- High, CVSS 8.7
OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config
npm openclaw · Upgrade to 2026.3.24 or later · <= 2026.3.23-2 · CVE-2026-41384 · GHSA-vfw7-6rhc-6xxg · amended
- Medium, CVSS 6.9
OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41297 · GHSA-vjx8-8p7h-82gr · amended
- Medium, CVSS 6.3
OpenClaw: Tlon media downloads can bypass core safety limits and exhaust disk
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41408 · GHSA-4g5x-2jfc-xm98 · amended
- Medium, CVSS 6.9
OpenClaw:
/phone arm//phone disarmBypassesoperator.adminScope Check for External Channelsnpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41375 · GHSA-h2v7-xc88-xx8c · amended
- Medium, CVSS 5.0
OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision
Go github.com/openfga/openfga · Upgrade to 1.14.0 or later · >= 1.8.0, <= 1.13.1 · CVE-2026-34972 · GHSA-jwvj-g8pc-cx45
- High, CVSS 7.5
Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution
npm @fedify/fedify · Upgrade to 2.1.1, 2.0.8, 1.10.5 or 1.9.6 by release line · < 1.9.6; >= 1.10.0, < 1.10.5; >= 2.0.0, < 2.0.8; >= 2.1.0, <= 2.1.0 · +1 more package · CVE-2026-34148 · GHSA-gm9m-gwc4-hwgp · amended
- Low, CVSS 2.8
Electron: Crash in clipboard.readImage() on malformed clipboard image data
npm electron · Upgrade to 42.0.0-alpha.5 (pre-release), 41.1.0, 40.8.5 or 39.8.5 by release line · < 39.8.5; >= 40.0.0-alpha.1, < 40.8.5; >= 41.0.0-alpha.1, < 41.1.0; >= 42.0.0-alpha.1, < 42.0.0-alpha.5 · CVE-2026-34781 · GHSA-f37v-82c4-4x64 · amended
- Medium, CVSS 6.0
Electron: Named window.open targets not scoped to the opener's browsing context
npm electron · Upgrade to 42.0.0-alpha.5 (pre-release), 41.1.0, 40.8.5 or 39.8.5 by release line · < 39.8.5; >= 40.0.0-alpha.1, < 40.8.5; >= 41.0.0-alpha.1, < 41.1.0; >= 42.0.0-alpha.1, < 42.0.0-alpha.5 · CVE-2026-34765 · GHSA-f3pv-wv63-48x8 · amended
- Critical, CVSS 9.3
OpenIdentityPlatform OpenAM: Pre-Authentication Remote Code Execution via
jato.clientSessionDeserialization in OpenAMMaven org.openidentityplatform.openam:openam · Upgrade to 16.0.6 or later · <= 16.0.5 · CVE-2026-33439 · GHSA-2cqq-rpvq-g5qj
- High, CVSS 8.2
Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation
Go open-cluster-management.io/ocm · Upgrade to 1.2.1 or later · < 1.2.1 · CVE-2026-4740 · GHSA-q4gv-pjmh-c735
- Low, CVSS 2.7
Django vulnerable to privilege abuse in ModelAdmin.list_editable
PyPI django · Upgrade to 6.0.4, 5.2.13 or 4.2.30 by release line · >= 6.0, < 6.0.4; >= 5.2, < 5.2.13; >= 4.2, < 4.2.30 · CVE-2026-4292 · GHSA-mmwr-2jhp-mc7j · amended
- High, CVSS 7.5
Django vulnerable to ASGI header spoofing via underscore/hyphen conflation
PyPI django · Upgrade to 6.0.4, 5.2.13 or 4.2.30 by release line · >= 6.0, < 6.0.4; >= 5.2, < 5.2.13; >= 4.2, < 4.2.30 · CVE-2026-3902 · GHSA-mvfq-ggxm-9mc5 · amended
- Low, CVSS 2.3
Django vulnerable to privilege abuse in GenericInlineModelAdmin
PyPI django · Upgrade to 6.0.4, 5.2.13 or 4.2.30 by release line · >= 6.0, < 6.0.4; >= 5.2, < 5.2.13; >= 4.2, < 4.2.30 · CVE-2026-4277 · GHSA-pwjp-ccjc-ghwg · amended
- High, CVSS 7.5
Django: SGI requests with a missing or understated
Content-Lengthheader could bypass theDATA_UPLOAD_MAX_MEMORY_SIZElimitPyPI django · Upgrade to 6.0.4, 5.2.13 or 4.2.30 by release line · >= 6.0, < 6.0.4; >= 5.2, < 5.2.13; >= 4.2, < 4.2.30 · CVE-2026-33034 · GHSA-933h-hp56-hf7m · amended
- Medium, CVSS 6.5
Django has potential DoS via MultiPartParser through crafted multipart uploads
PyPI django · Upgrade to 6.0.4, 5.2.13 or 4.2.30 by release line · >= 6.0, < 6.0.4; >= 5.2, < 5.2.13; >= 4.2, < 4.2.30 · CVE-2026-33033 · GHSA-5mf9-h53q-7mhq · amended
- Medium, CVSS 5.1
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface
PyPI mlflow · Upgrade to 3.11.1 or later · <= 3.10.1 · CVE-2026-33865 · GHSA-fh64-r2vc-xvhr · amended
- Medium, CVSS 5.3
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint
PyPI mlflow · Upgrade to 3.11.0rc0 (pre-release) or later · <= 3.10.1 · CVE-2026-33866 · GHSA-46r5-x6jq-v8g6 · amended
- High, CVSS 8.7
Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition
Maven org.apache.kafka:kafka-clients · Upgrade to 4.1.2, 4.0.2 or 3.9.2 by release line · >= 2.8.0, < 3.9.2; >= 4.0.0, < 4.0.2; >= 4.1.0, < 4.1.2 · CVE-2026-35554 · GHSA-5qcv-4rpc-jp93
- Medium, CVSS 4.3
Apache ActiveMQ: Improper validation and restriction of a classpath path name
Maven org.apache.activemq:activemq-broker +3 · Upgrade all 4 to 6.2.2 or 5.19.3 by release line · < 5.19.3; >= 6.0.0, < 6.2.2 · CVE-2026-33227 · GHSA-h2h4-5m64-m273
- High, CVSS 8.8Exploited · CISA KEV
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
Maven org.apache.activemq:activemq-broker +1 · Upgrade all 2 to 6.2.3 or 5.19.5 by release line · < 5.19.5; >= 6.0.0, < 6.2.3 · CVE-2026-34197 · GHSA-rxpj-7qvf-xv32
- Critical, CVSS 9.8
LoLLMs is vulnerable to Improper Access Control through weak secret key
PyPI lollms · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2026-1114 · GHSA-9296-v3fr-j92j · amended
- Medium, CVSS 6.5
HuggingFace Transformers allows for arbitrary code execution in the
TrainerclassPyPI transformers · Upgrade to 5.0.0rc3 (pre-release) or later · < 5.0.0rc3 · CVE-2026-1839 · GHSA-69w3-r845-3855 · amended
- Critical, CVSS 9.2
PraisonAI Has Path Traversal in FileTools
PyPI praisonai · Upgrade to 1.5.113 or later · <= 1.5.112 · CVE-2026-35615 · GHSA-693f-pf34-72c5 · amended
- High, CVSS 7.1
PraisonAI recipe registry publish path traversal allows out-of-root file write
PyPI praisonai · Upgrade to 4.5.113 or later · <= 4.5.112 · CVE-2026-39308 · GHSA-r9x3-wx45-2v7f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.