DOMPurify USE_PROFILES prototype pollution allows event handlers
npm dompurify · Upgrade to 3.3.2 or later · <= 3.3.1 · CVE-2026-65913 · GHSA-cj63-jhhr-wcxv · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
8276–8300 of 31,057 matching · newest first
npm dompurify · Upgrade to 3.3.2 or later · <= 3.3.1 · CVE-2026-65913 · GHSA-cj63-jhhr-wcxv · amended
PyPI dtale · Upgrade to 3.22.0 or later · < 3.22.0 · CVE-2026-35052 · GHSA-436g-fhfc-9g5w · amended
Packagist auth0/symfony · Upgrade to 5.8.0 or later · >= 5.0.0, <= 5.7.0 · GHSA-ghc5-95c2-vwcv
Packagist auth0/wordpress · Upgrade to 5.6.0 or later · >= 5.0.0-BETA0, <= 5.5.0 · GHSA-vfpx-q664-h93m
Packagist auth0/login · Upgrade to 7.21.0 or later · >= 7.0.0, <= 7.20.0 · GHSA-fmg6-246m-9g2v
Go github.com/lin-snow/ech0 · Upgrade to 1.4.8-0.20260401031029-4ca56fea5ba4 (pre-release) or later · < 1.4.8-0.20260401031029-4ca56fea5ba4 · CVE-2026-35037 · GHSA-cqgf-f4x7-g6wc
Go github.com/lin-snow/ech0 · Upgrade to 1.4.8-0.20260401031029-4ca56fea5ba4 (pre-release) or later · < 1.4.8-0.20260401031029-4ca56fea5ba4 · CVE-2026-35036 · GHSA-wc4h-2348-jc3p
npm better-auth · Upgrade to 1.4.9 or later · < 1.4.9 · CVE-2026-67337 · GHSA-xg6x-h9c9-2m83 · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41382 · GHSA-x2m8-53h4-6hch · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41341 · GHSA-6336-qqw9-v6x6 · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41300 · GHSA-9f4w-67g7-mqwv · amended
allowRemoteViewer is disablednpm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41403 · GHSA-3xv9-89fm-7h4r · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41348 · GHSA-rvvf-6vh3-9j43 · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41393 · GHSA-q9w8-cf67-r238 · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41340 · GHSA-f693-58pc-2gfr · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41388 · GHSA-3pm9-5j7m-59vc · amended
npm openclaw · Upgrade to 2026.3.22 or later · <= 2026.3.13-1 · CVE-2026-41386 · GHSA-gg9v-mgcp-v6m7 · amended
allowProfiles bypass through persistent profile mutation and runtime profile selectionnpm openclaw · Upgrade to 2026.3.22 or later · <= 2026.3.13-1 · CVE-2026-41353 · GHSA-h5hg-h7rr-gpf3 · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41381 · GHSA-cqgw-44wg-44rf · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41331 · GHSA-m6fx-m8hc-572m · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41378 · GHSA-gjm7-hw8f-73rq · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41296 · GHSA-9p3r-hh9g-5cmg · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41400 · GHSA-2w79-r9g8-wmcr · amended
device.token.rotate does not terminate active WebSocket sessions after credential rotationnpm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41356 · GHSA-rfqg-qgf8-xr9x · amended
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41333 · GHSA-6p8r-6m93-557f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.