Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.xwiki.platform:xwiki-platform-rest-server · Upgrade to 15.1, 14.10.6 or 14.4.8 by release line · >= 7.3-milestone-1, < 14.4.8; >= 14.5, < 14.10.6; >= 15.0-rc-1, < 15.1 · CVE-2023-35151 · GHSA-8g9c-c9cm-9c56
Maven org.xwiki.platform:xwiki-platform-invitation-ui · Upgrade to 15.0, 14.10.4 or 14.4.8 by release line · >= 2.4-m-2, < 14.4.8; >= 14.5, < 14.10.4; >= 15.0-rc-1, < 15.0 · CVE-2023-35150 · GHSA-6mf5-36v9-3h2w
Maven org.xwiki.platform:xwiki-platform-livetable-ui · Upgrade to 14.10.4 or 14.4.8 by release line · >= 3.5-milestone-1, < 14.4.8; >= 14.5, < 14.10.4 · CVE-2023-34467 · GHSA-7vr7-cghh-ch63
Maven org.xwiki.platform:xwiki-platform-mail-send-default · Upgrade to 15.1, 14.10.6 or 14.4.8 by release line · >= 11.8-rc-1, < 14.4.8; >= 14.5, < 14.10.6; >= 15.0-rc-1, < 15.1 · CVE-2023-34465 · GHSA-g75c-cjr6-39mc
Maven org.xwiki.platform:xwiki-platform-web · Upgrade to 14.4.8 or later · >= 2.2.1, < 14.4.8 · +1 more package · CVE-2023-34464 · GHSA-fp7h-f9f5-x4q7
Packagist feehi/cms · Upgrade to 2.0.8.1 or later · < 2.0.8.1 · CVE-2020-21489 · GHSA-6vf2-mfmr-qqqw
PyPI langchain · Upgrade to 0.0.247 or later · < 0.0.247 · CVE-2023-34541 · GHSA-6643-h7h5-x9wh · amended
Packagist feehi/cms · Upgrade to 2.0.8.1 or later · < 2.0.8.1 · CVE-2020-21174 · GHSA-q3q5-qvh5-cmw5
PyPI apache-airflow · Upgrade to 2.6.2rc1 (pre-release) or later · >= 2.5.0, < 2.6.2rc1 · CVE-2023-35005 · GHSA-mjff-wv85-hmcj · amended
Maven org.noear:solon · Upgrade to 2.3.3 or later · < 2.3.3 · CVE-2023-35839 · GHSA-7q8c-49f4-4c8q
Packagist getgrav/grav · Upgrade to 1.7.42 or later · < 1.7.42 · CVE-2023-34448 · GHSA-whr7-m3f8-mpm8
Packagist getgrav/grav · Upgrade to 1.7.42 or later · < 1.7.42 · CVE-2023-34253 · GHSA-j3v8-v77f-fvgm
Packagist getgrav/grav · Upgrade to 1.7.42 or later · < 1.7.42 · CVE-2023-34252 · GHSA-96xv-rmwj-6p9w
Packagist getgrav/grav · Upgrade to 1.7.42 or later · < 1.7.42 · CVE-2023-34251 · GHSA-f9jf-4cp4-4fq5
Packagist in2code/ipandlanguageredirect · Upgrade to 5.1.2 or later · < 5.1.2 · CVE-2023-35782 · GHSA-4xf2-7qfv-mgfx
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.1 or later · <= 1.1.10.0 · CVE-2023-34455 · GHSA-qcwq-55hx-v3vh
NuGet microsoft.netcore.app.runtime.win-x86 +3 · Upgrade all 4 to 7.0.7 or 6.0.18 by release line · >= 6.0.0, <= 6.0.16; >= 7.0.0, <= 7.0.5 · CVE-2023-33126 · GHSA-gh24-9qjj-mr67
NuGet microsoft.netcore.app.runtime.win-x86 +11 · Upgrade all 12 to 7.0.7 or later · >= 7.0.0, <= 7.0.5 · CVE-2023-33128 · GHSA-x469-cv7m-77r9
NuGet microsoft.netcore.app.runtime.win-x86 · Upgrade to 7.0.7 or 6.0.18 by release line · >= 7.0.0, <= 7.0.5; >= 6.0.0, <= 6.0.16 · +13 more packages · CVE-2023-29331 · GHSA-555c-2p6r-68mm
NuGet microsoft.netcore.app.runtime.win-x86 +11 · Upgrade all 12 to 7.0.7 or 6.0.18 by release line · >= 7.0.0, <= 7.0.5; >= 6.0.0, <= 6.0.16 · CVE-2023-24936 · GHSA-jx7q-xxmw-44vf
NuGet microsoft.windowsdesktop.app.runtime.win-x86 +2 · Upgrade all 3 to 7.0.7 or 6.0.18 by release line · >= 7.0.0, <= 7.0.5; >= 6.0.0, <= 6.0.16 · CVE-2023-24895 · GHSA-jh2h-qcrw-ghg7
NuGet microsoft.netcore.app.runtime.win-x86 +3 · Upgrade all 4 to 7.0.7 or 6.0.18 by release line · >= 7.0.0, <= 7.0.5; >= 6.0.0, <= 6.0.16 · CVE-2023-24897 · GHSA-88q2-h5g3-p4pg
Packagist studio-42/elfinder · Upgrade to 2.1.62 or later · < 2.1.62 · CVE-2023-35840 · GHSA-wm5g-p99q-66g4
PyPI langchain · Upgrade to 0.0.225 or later · < 0.0.225 · CVE-2023-34540 · GHSA-x32c-59v5-h7fg · amended
Maven com.cedarsoftware:json-io · Upgrade to 4.14.1 or later · < 4.14.1 · CVE-2023-34610 · GHSA-779h-3r69-4f5p
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.