Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
8201–8225 of 31,057 matching · newest first
Maven org.keycloak:keycloak-services · Upgrade to 26.6.3 or 26.4.13 by release line · < 26.4.13; >= 26.5.0, < 26.6.3 · CVE-2026-37977 · GHSA-5v8v-xvjv-57x7
PyPI web3 · Upgrade to 8.0.0b2 (pre-release) or 7.15.0 by release line · >= 6.0.0b3, < 7.15.0; >= 8.0.0b1, <= 8.0.0b1 · CVE-2026-111171 · GHSA-5hr4-253g-cpx2 · amended
crates.io libp2p-rendezvous · Upgrade to 0.17.1 or later · < 0.17.1 · CVE-2026-35457 · GHSA-v5hw-cv9c-rpg7 · amended
crates.io libp2p-rendezvous · Upgrade to 0.17.1 or later · < 0.17.1 · CVE-2026-35405 · GHSA-cqfx-gf56-8x59 · amended
npm openclaw · Upgrade to 2026.4.2 or later · <= 2026.4.1 · CVE-2026-34511 · GHSA-9jpj-g8vv-j5mf · amended
Go github.com/coder/code-marketplace · Upgrade to 1.2.3-0.20260402184705-988440dee05f (pre-release) or later · < 1.2.3-0.20260402184705-988440dee05f · CVE-2026-35454 · GHSA-8x9r-hvwg-c55h
__proto__ key in defaults argumentnpm defu · Upgrade to 6.1.5 or later · <= 6.1.4 · CVE-2026-35209 · GHSA-737v-mqg7-c878 · amended
PyPI lightrag-hku · Upgrade to 1.4.13 or later · <= 1.4.12 · CVE-2026-30762 · GHSA-mcww-4hxq-hfr3 · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · CVE-2026-35442 · GHSA-38hg-ww64-rrwc · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · GHSA-6q22-g298-grjh · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · CVE-2026-35441 · GHSA-ph52-67fq-75wj · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · CVE-2026-39943 · GHSA-mvv8-v4jj-g47j · amended
npm directus · Upgrade to 11.16.1 or later · < 11.16.1 · CVE-2026-35412 · GHSA-qqmv-5p3g-px89 · amended
npm directus · Upgrade to 11.16.0 or later · < 11.16.0 · CVE-2026-35409 · GHSA-wv3h-5fx7-966h · amended
npm directus · Upgrade to 11.16.1 or later · < 11.16.1 · CVE-2026-35413 · GHSA-wxwm-3fxv-mrvx · amended
npm directus · Upgrade to 11.16.1 or later · < 11.16.1 · CVE-2026-35410 · GHSA-cf45-hxwj-4cfj · amended
npm directus · Upgrade to 11.16.1 or later · < 11.16.1 · CVE-2026-35411 · GHSA-q75c-4gmv-mg9x · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · CVE-2026-39942 · GHSA-393c-p46r-7c95 · amended
npm directus · Upgrade to 11.17.0 or later · < 11.17.0 · CVE-2026-35408 · GHSA-8m32-p958-jg99 · amended
npm @budibase/server · Upgrade to 3.33.4 or later · < 3.33.4 · CVE-2026-35216 · GHSA-fcm4-4pj2-m5hf · amended
npm @budibase/server · Upgrade to 3.33.4 or later · < 3.33.4 · CVE-2026-35214 · GHSA-2wfh-rcwf-wh23 · amended
GitHub Actions tiryoh/actions-mkdocs · Upgrade to 0.25.0 or later · <= 0.24.0 · GHSA-6p2j-742g-835f
npm @mobilenext/mobile-mcp · Upgrade to 0.0.50 or later · < 0.0.50 · CVE-2026-35394 · GHSA-5qhv-x9j4-c3vm · amended
npm @stablelib/cbor · Upgrade to 2.0.3 or later · < 2.0.3 · CVE-2026-106447 · GHSA-5jg4-p4qw-cgfr · amended
__proto__ map keys in CBOR decodingnpm @stablelib/cbor · Upgrade to 2.0.3 or later · < 2.0.3 · CVE-2026-106448 · GHSA-w48f-fwg7-ww6p · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.