python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
PyPI ecdsa · Upgrade to 0.19.2 or later · < 0.19.2 · CVE-2026-33936 · GHSA-9f5j-8jwj-x28g · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
8651–8675 of 31,057 matching · newest first
PyPI ecdsa · Upgrade to 0.19.2 or later · < 0.19.2 · CVE-2026-33936 · GHSA-9f5j-8jwj-x28g · amended
Packagist miraheze/ts-portal · Upgrade to 34 or later · <= 33 · CVE-2026-33541 · GHSA-f346-8rp3-4h9h
Packagist miraheze/ts-portal · Upgrade to 30 or later · <= 29 · CVE-2026-29788 · GHSA-gfhq-7499-f3f2
PyPI open-webui · Upgrade to 0.8.6 or later · <= 0.8.5 · CVE-2026-29071 · GHSA-w9f8-gxf9-rhvw · amended
PyPI open-webui · Upgrade to 0.8.6 or later · < 0.8.6 · CVE-2026-29070 · GHSA-26gm-93rw-cchf · amended
PyPI open-webui · Upgrade to 0.8.6 or later · < 0.8.6 · CVE-2026-28788 · GHSA-jjp7-g2jw-wh3j · amended
POST /api/v1/audio/transcriptionsPyPI open-webui · Upgrade to 0.8.6 or later · < 0.8.6 · CVE-2026-28786 · GHSA-vvxm-vxmr-624h · amended
PyPI vllm · Upgrade to 0.18.0 or later · >= 0.10.1, < 0.18.0 · CVE-2026-27893 · GHSA-7972-pg2x-xr59 · amended
Maven org.springframework.ai:spring-ai-neo4j-store · Upgrade to 1.1.4 or 1.0.5 by release line · >= 1.0.0-M5, < 1.0.5; >= 1.1.0-M1, < 1.1.4 · CVE-2026-22743 · GHSA-7cj7-rcw6-p68v
Maven org.springframework.ai:spring-ai-redis-store · Upgrade to 1.1.4 or 1.0.5 by release line · >= 1.0.0-M5, < 1.0.5; >= 1.1.0-M1, < 1.1.4 · CVE-2026-22744 · GHSA-44f4-gvwj-6qg3
Maven org.springframework.ai:spring-ai-bedrock-converse · Upgrade to 1.1.4 or 1.0.5 by release line · >= 1.0.0-M5, < 1.0.5; >= 1.1.0-M1, < 1.1.4 · CVE-2026-22742 · GHSA-mhrg-94vw-45c5
Maven org.springframework.ai:spring-ai-vector-store · Upgrade to 1.1.4 or 1.0.5 by release line · >= 1.0.0, < 1.0.5; >= 1.1.0-M1, < 1.1.4 · CVE-2026-22738 · GHSA-fvh3-672c-7p6c
Go github.com/grafana/tempo · Upgrade to 2.10.3 or later · < 2.10.3 · CVE-2026-28377 · GHSA-ffqx-q65f-36jf
PyPI c2cciutils · Upgrade to 1.1.66 or later · < 1.1.66 · GHSA-wcjx-v2wj-xg87
envelope.size parameternpm nodemailer · Upgrade to 8.0.4 or later · < 8.0.4 · CVE-2026-82854 · GHSA-c7w3-x93f-qmm8 · amended
Go github.com/goharbor/harbor · Upgrade to 2.14.3 or 2.13.5 by release line · >= 2.13.0, < 2.13.5; >= 2.14.0, < 2.14.3 · GHSA-prh4-vhfh-24mj
npm happy-dom · Upgrade to 20.8.8 or later · >= 15.10.0, <= 20.8.7 · CVE-2026-33943 · GHSA-6q6h-j7hj-3r64 · amended
npm handlebars · Upgrade to 4.7.9 or later · >= 4.0.0, < 4.7.9 · CVE-2026-33916 · GHSA-2qvq-rjwj-gvw9 · amended
allowed_uri?RubyGems loofah · Upgrade to 2.25.1 or later · >= 2.25.0, <= 2.25.0 · GHSA-2j22-pr5w-6gq8
Go github.com/ellanetworks/core · Upgrade to 1.7.0 or later · < 1.7.0 · CVE-2026-33907 · GHSA-55q8-2gwx-29pc
Go github.com/ellanetworks/core · Upgrade to 1.7.0 or later · < 1.7.0 · CVE-2026-33906 · GHSA-87j9-m7x6-hvw2
Go github.com/ellanetworks/core · Upgrade to 1.7.0 or later · < 1.7.0 · CVE-2026-33904 · GHSA-9h59-p45g-445h
Go github.com/ellanetworks/core · Upgrade to 1.7.0 or later · < 1.7.0 · CVE-2026-33903 · GHSA-f2f3-9cx3-wcmf
NuGet magick.net-q8-arm64 +17 · Upgrade all 18 to 14.11.1 or later · < 14.11.1 · GHSA-9r56-3gjq-hqf7
NuGet magick.net-q8-arm64 +17 · Upgrade all 18 to 14.11.1 or later · < 14.11.1 · GHSA-6p22-q7w5-33pg
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.