Gogs OS Command Injection vulnerability
Go gogs.io/gogs · Upgrade to 0.12.11 or later · < 0.12.11 · CVE-2022-2024 · GHSA-pfvh-p8qp-9ww9
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go gogs.io/gogs · Upgrade to 0.12.11 or later · < 0.12.11 · CVE-2022-2024 · GHSA-pfvh-p8qp-9ww9
Packagist nilsteampassnet/teampass · Upgrade to 3.0.0.23 or later · < 3.0.0.23 · CVE-2023-1070 · GHSA-x36g-4629-xp9v
Packagist froxlor/froxlor · Upgrade to 2.0.11 or later · < 2.0.11 · CVE-2023-1033 · GHSA-p7qq-rrvw-x55x
npm ecdh · Upgrade to 0.2.0 or later · < 0.2.0 · CVE-2022-44310 · GHSA-p2hp-3wv3-4w74 · amended
npm sequelize · Upgrade to 6.29.0 or later · < 6.29.0 · +1 more package · CVE-2023-22578 · GHSA-f598-mfpv-gmfx · amended
NuGet litedb · Upgrade to 5.0.13 or later · < 5.0.13 · CVE-2022-23535 · GHSA-3x49-g6rc-c284
PyPI apache-airflow-providers-amazon · Upgrade to 7.2.1 or later · < 7.2.1 · CVE-2023-25956 · GHSA-w695-p3j5-hrj9 · amended
PyPI apache-airflow-providers-google · Upgrade to 8.10.0 or later · < 8.10.0 · CVE-2023-25692 · GHSA-h8p2-8g72-qpgh · amended
PyPI apache-airflow-providers-apache-sqoop +1 · Upgrade all 2 to 3.1.1 or later · < 3.1.1 · CVE-2023-25693 · GHSA-j69x-v4wc-3fpf · amended
PyPI apache-airflow-providers-apache-hive · Upgrade to 5.1.3 or later · < 5.1.3 · CVE-2023-25696 · GHSA-9mwf-mw74-9cv5 · amended
PyPI apache-airflow-providers-google · Upgrade to 8.10.0 or later · < 8.10.0 · CVE-2023-25691 · GHSA-8g23-2q5p-8866 · amended
Packagist francoisjacquet/rosariosis · Upgrade to 10.8.2 or later · < 10.8.2 · CVE-2023-0994 · GHSA-prjg-28jg-m3p5
Maven io.undertow:undertow-core · Upgrade to 2.3.5.Final or 2.2.24.Final by release line · >= 2.3.0, < 2.3.5.Final; < 2.2.24.Final · CVE-2022-4492 · GHSA-pfcc-3g6r-8rg8
npm sequelize · Upgrade to 6.28.1 or later · < 6.28.1 · +1 more package · CVE-2023-22579 · GHSA-vqfx-gj96-3w95 · amended
PyPI markdown-it-py · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2023-26302 · GHSA-jrwr-5x3p-hvc3 · amended
PyPI markdown-it-py · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2023-26303 · GHSA-vrjv-mxr7-vjf8 · amended
npm sequelize · Upgrade to 6.19.1 or later · < 6.19.1 · CVE-2023-25813 · GHSA-wrh9-cjv3-2hpw · amended
Maven com.ctrip.framework.apollo:apollo · Upgrade to 2.1.0 or later · < 2.1.0 · CVE-2023-25570 · GHSA-368x-wmmg-hq5c
Maven org.geotools:gt-jdbc · Upgrade to 28.2, 27.4, 26.7 or 2 more by release line · >= 28.0, < 28.2; >= 27.0, < 27.4; >= 26.0, < 26.7; >= 25.0, < 25.7; < 24.7 · CVE-2023-25158 · GHSA-99c3-qc2q-p94m
Maven org.geoserver.community:gs-jdbcconfig · Upgrade to 2.22.2 or 2.21.4 by release line · < 2.21.4; >= 2.22.0, < 2.22.2 · CVE-2023-25157 · GHSA-7g5f-wrx8-5ccf
npm versionn · Upgrade to 1.1.0 or later · < 1.1.0 · CVE-2023-25805 · GHSA-fj78-2vc5-f6cm · amended
PyPI nautobot · Upgrade to 1.5.7 or later · < 1.5.7 · CVE-2023-25657 · GHSA-8mfq-f5wj-vw5m · amended
Go github.com/notaryproject/notation-go · Upgrade to 1.0.0-rc.3 (pre-release) or later · < 1.0.0-rc.3 · CVE-2023-25656 · GHSA-87x9-7grx-m28v
NuGet mongodb.driver · Upgrade to 2.19.0 or later · < 2.19.0 · CVE-2022-48282 · GHSA-7j9m-j397-g4wx
Packagist codiad/codiad · Upgrade to 2.8.1 or later · < 2.8.1 · CVE-2017-20178 · GHSA-2q79-56rq-8v3c
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.