Vyper vulnerable to integer overflow in loop
PyPI vyper · Upgrade to 0.3.8 or later · < 0.3.8 · CVE-2023-32058 · GHSA-6r8q-pfpv-7cgj · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI vyper · Upgrade to 0.3.8 or later · < 0.3.8 · CVE-2023-32058 · GHSA-6r8q-pfpv-7cgj · amended
PyPI vyper · Upgrade to 0.3.8 or later · < 0.3.8 · CVE-2023-32059 · GHSA-ph9x-4vc9-m39g · amended
Go github.com/mattermost/mattermost-server/v6 · Upgrade to 7.9.2, 7.8.3, 7.7.4 or 7.1.8 by release line · < 7.1.8; >= 7.2.0, < 7.7.4; >= 7.8.0, < 7.8.3; >= 7.9.0, < 7.9.2 · CVE-2023-2515 · GHSA-7g2v-2frm-rg94
Maven org.apache.openmeetings:openmeetings-parent · Upgrade to 7.1.0 or later · >= 3.1.3, < 7.1.0 · CVE-2023-29032 · GHSA-v9rm-7rv9-r3fw
Maven org.apache.openmeetings:openmeetings-parent · Upgrade to 7.1.0 or later · >= 2.0.0, < 7.1.0 · CVE-2023-29246 · GHSA-mg5h-f3q8-c96g
Packagist pimcore/customer-management-framework-bundle · Upgrade to 3.3.9 or later · < 3.3.9 · CVE-2023-2629 · GHSA-mq3x-qgwx-3rfw
Go github.com/ipfs/go-bitswap · Upgrade to 0.12.0 or later · < 0.12.0 · GHSA-q3j6-22wf-3jh9
Go github.com/docker/distribution · Upgrade to 2.8.2-beta.1 (pre-release) or later · < 2.8.2-beta.1 · CVE-2023-2253 · GHSA-hqxw-f8mx-cpmw
Maven org.xwiki.platform:xwiki-platform-test-ui · Upgrade to 14.10.4 or later · >= 3.3-milestone-3, < 14.10.4 · CVE-2023-32069 · GHSA-36fm-j33w-c25f
Go github.com/ipfs/go-libipfs · Upgrade to 0.6.0 or 0.4.1 by release line · >= 0.5.0, < 0.6.0; < 0.4.1 · CVE-2023-25568 · GHSA-m974-xj4j-7qv5
Go github.com/pterodactyl/wings · Upgrade to 1.11.6 or 1.7.5 by release line · < 1.7.5; >= 1.11.0, < 1.11.6 · CVE-2023-32080 · GHSA-p744-4q6p-hvc2
PyPI mlflow · Upgrade to 2.0.0rc0 (pre-release) or later · < 2.0.0rc0 · CVE-2023-30172 · GHSA-wc6j-5g83-xfm6 · amended
npm n8n · Upgrade to 0.216.1 or later · < 0.216.1 · CVE-2023-27563 · GHSA-97cp-mr4m-9mcf · amended
npm n8n · Upgrade to 0.216.1 or later · < 0.216.1 · CVE-2023-27564 · GHSA-r9xw-p7wj-w792 · amended
Maven org.xwiki.commons:xwiki-commons-xml · Upgrade to 14.10.4 or later · >= 14.6-rc-1, < 14.10.4 · CVE-2023-31126 · GHSA-pv7v-ph6g-3gxv
Maven org.xwiki.platform:xwiki-platform-distribution-war · Upgrade to 14.10.4 or 14.4.8 by release line · >= 2.2-milestone-1, < 14.4.8; >= 14.5, < 14.10.4 · CVE-2023-32071 · GHSA-j9h5-vcgv-2jfm
Packagist nilsteampassnet/teampass · Upgrade to 3.0.7 or later · < 3.0.7 · CVE-2023-2591 · GHSA-prj5-2g2p-x2mw
npm jsreport · Upgrade to 3.11.3 or later · < 3.11.3 · CVE-2023-2583 · GHSA-g7rj-q722-245g · amended
PyPI apache-airflow · Upgrade to 2.6.0b1 (pre-release) or later · < 2.6.0b1 · CVE-2023-25754 · GHSA-jchm-fm4q-c2fp · amended
PyPI django · Upgrade to 4.2.1, 4.1.9 or 3.2.19 by release line · >= 3.2a1, < 3.2.19; >= 4.0a1, < 4.1.9; >= 4.2a1, < 4.2.1 · CVE-2023-31047 · GHSA-r3xc-prgr-mg9p · amended
PyPI mage-ai · Upgrade to 0.8.72 or later · >= 0.8.34, < 0.8.72 · CVE-2023-31143 · GHSA-c6mm-2g84-v4m7 · amended
PyPI vyper · Upgrade to 0.3.8 or later · < 0.3.8 · CVE-2023-30837 · GHSA-mgv8-gggw-mrg6 · amended
Packagist thorsten/phpmyfaq · Upgrade to 3.1.13 or later · < 3.1.13 · CVE-2023-2550 · GHSA-5mf7-p346-7rm8
Maven org.apache.ranger:ranger-hive-plugin · Upgrade to 2.4.0 or later · >= 2.0.0, < 2.4.0 · CVE-2021-40331 · GHSA-vjr2-wpfh-5r9p
npm ghost · Upgrade to 5.42.1 or later · < 5.42.1 · CVE-2023-32235 · GHSA-wf7x-fh6w-34r6 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.