Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

851–875 of 14,167 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 8.622 Sep 2026
MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77248 · GHSA-cc5h-2pwp-pvcc · amended
22 Sep 2026Evidence →
High, CVSS 7.522 Sep 2026
SIPGO: DoS via unvalidated WebSocket frame length
Go github.com/emiago/sipgo · Upgrade to 1.4.3 or later · <= 1.4.2 · CVE-2026-77322 · GHSA-8h6x-h86x-75wh · amended
22 Sep 2026Evidence →
High, CVSS 7.522 Sep 2026
MPXJ: XXE Vulnerability in MerlinReader
RubyGems mpxj +6 · Upgrade all 7 to 16.4.1 or later · >= 5.5.5, < 16.4.1 · CVE-2026-61570 · GHSA-5vvx-3h34-f3gj · amended
22 Sep 2026Evidence →
High, CVSS 7.522 Sep 2026
SIPGO: DoS via unvalidated Content-Length in the stream parser
Go github.com/emiago/sipgo · Upgrade to 1.4.1 or later · <= 1.4.0 · CVE-2026-58268 · GHSA-pg59-5vwg-4jxq · amended
22 Sep 2026Evidence →
High, CVSS 8.822 Sep 2026
deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes
npm @deepstream/server · Upgrade to 10.1.1 or later · >= 10.1.0, <= 10.1.0 · CVE-2026-63116 · GHSA-89vx-jh4q-vg3w · amended
22 Sep 2026Evidence →
High, CVSS 7.522 Sep 2026
request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process
npm request-filtering-agent · Upgrade to 3.2.1 or later · < 3.2.1 · CVE-2026-62985 · GHSA-r3r9-wp5j-pq5g · amended
22 Sep 2026Evidence →
High, CVSS 7.522 Sep 2026
psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry
PyPI psd-tools · Upgrade to 1.17.4 or later · < 1.17.4 · CVE-2026-59991 · GHSA-8q6g-vjhf-jp8m · amended
22 Sep 2026Evidence →
High, CVSS 7.322 Sep 2026
9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header
npm 9router · Upgrade to 0.5.8 or later · <= 0.5.4 · CVE-2026-56681 · GHSA-5mj8-gf6m-fhw8 · amended
22 Sep 2026Evidence →
High, CVSS 8.122 Sep 2026
Sync-in Server has a complete 2FA Bypass via POST /api/auth/token
npm @sync-in/server · Upgrade to 2.4.0 or later · <= 2.3.0 · CVE-2026-58269 · GHSA-92cr-jxw4-5wjg · amended
22 Sep 2026Evidence →
High, CVSS 7.122 Sep 2026
@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
npm @roomi-fields/notebooklm-mcp · Upgrade to 2.0.3 or later · >= 1.6.0, < 2.0.3 · CVE-2026-61647 · GHSA-jjhp-8crj-mppq · amended
22 Sep 2026Evidence →
High, CVSS 8.121 Sep 2026
nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition
Go github.com/lucasdillmann/nginx-ignition · Upgrade to 0.0.0-20260621194639-0586b4e55ab (pre-release) or later · < 0.0.0-20260621194639-0586b4e55ab · CVE-2026-61628 · GHSA-pxcx-fv34-x9p5 · amended
21 Sep 2026Evidence →
High, CVSS 7.521 Sep 2026
nginx ignition has ParseAcceptLanguage _ separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware
Go github.com/lucasdillmann/nginx-ignition · Upgrade to 0.0.0-20260526022344-0c988fc1277c (pre-release) or later · >= 0.0.0-20260126024607-cbaf0fc16ed8, < 0.0.0-20260526022344-0c988fc1277c · CVE-2026-61629 · GHSA-jr34-h97m-9hpx · amended
21 Sep 2026Evidence →
High, CVSS 8.718 Sep 2026
source-map-js allows event-loop denial of service through indexed source-map section offsets
npm source-map-js · Upgrade to 1.2.2 or later · >= 1.0.0, < 1.2.2 · CVE-2026-93749 · GHSA-68fv-2mgg-jv7q · amended
18 Sep 2026Evidence →
High, CVSS 7.618 Sep 2026
Obot: Server-Side Request Forgery via remote MCP server URL
Go github.com/obot-platform/obot · Upgrade to 0.23.0 or later · < 0.23.0 · CVE-2026-101064 · GHSA-jgh3-fggc-mcpm · amended
18 Sep 2026Evidence →
High, CVSS 8.818 Sep 2026
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion
Go github.com/obot-platform/obot · Upgrade to 0.23.0 or later · < 0.23.0 · CVE-2026-101062 · GHSA-xwmw-prc4-v3cr · amended
18 Sep 2026Evidence →
High, CVSS 7.518 Sep 2026
io.moquette:moquette-broker has a Missing Authorization issue
Maven io.moquette:moquette-broker · Upgrade to 0.18.1 or later · < 0.18.1 · CVE-2026-85058 · GHSA-9jjc-fw8x-fmwx · amended
18 Sep 2026Evidence →
Critical, CVSS 9.118 Sep 2026
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
PyPI mnemosyne-memory · Upgrade to 3.10.1 or later · <= 3.10.0 · CVE-2026-59163 · GHSA-xcw4-53cc-hv32 · amended
18 Sep 2026Evidence →
High, CVSS 7.118 Sep 2026
Perses's unvalidated project parameter enables filesystem path traversal
Go github.com/perses/perses · Upgrade to 0.54.0-rc.0 (pre-release) or later · < 0.54.0-rc.0 · CVE-2026-63445 · GHSA-vr5f-w35q-98jp · amended
18 Sep 2026Evidence →
High, CVSS 8.318 Sep 2026
Perses's missing authorization in datasource proxy allows cross-scope secret disclosure
Go github.com/perses/perses · Upgrade to 0.54.0-rc.0 (pre-release) or later · >= 0.43.0, < 0.54.0-rc.0 · CVE-2026-63199 · GHSA-4227-9989-jrhx · amended
18 Sep 2026Evidence →
High, CVSS 7.118 Sep 2026
Perses's project query parameter authorization bypass exposes cross-project resources
Go github.com/perses/perses · Upgrade to 0.54.0-beta.3 (pre-release) or later · < 0.54.0-beta.3 · CVE-2026-63458 · GHSA-cjgj-2fwf-4c2w · amended
18 Sep 2026Evidence →
High, CVSS 8.218 Sep 2026
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
npm @file-viewer/doc · Upgrade to 2.3.1 or later · <= 2.3.0 · +1 more package · CVE-2026-91127 · GHSA-3753-m2x2-q623 · amended
18 Sep 2026Evidence →
High, CVSS 7.518 Sep 2026
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
npm adm-zip · Upgrade to 0.6.1 or later · < 0.6.1 · CVE-2026-77301 · GHSA-7q85-xj36-vmfc · amended
18 Sep 2026Evidence →
High, CVSS 7.118 Sep 2026
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials
Go github.com/frain-dev/convoy · Upgrade to 0.9.3-0.20260724092134-1cc67cd16fb1 (pre-release) or later · < 0.9.3-0.20260724092134-1cc67cd16fb1 · CVE-2026-81505 · GHSA-p5vg-v7mj-f6q4 · amended
18 Sep 2026Evidence →
High, CVSS 7.018 Sep 2026
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
PyPI anyio · Upgrade to 4.14.2 or later · >= 4.14.0, < 4.14.2 · CVE-2026-63349 · GHSA-3w57-8xmc-8v26 · amended
18 Sep 2026Evidence →
Critical, CVSS 9.318 Sep 2026
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
PyPI anyio · Upgrade to 4.14.2 or later · < 4.14.2 · CVE-2026-63374 · GHSA-82r6-8w77-94w6 · amended
18 Sep 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

SIPGO: DoS via unvalidated WebSocket frame length

MPXJ: XXE Vulnerability in MerlinReader

SIPGO: DoS via unvalidated Content-Length in the stream parser

deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes

request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header

Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`

@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware

source-map-js allows event-loop denial of service through indexed source-map section offsets

Obot: Server-Side Request Forgery via remote MCP server URL

Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion

io.moquette:moquette-broker has a Missing Authorization issue

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

Perses's unvalidated project parameter enables filesystem path traversal

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure

Perses's project query parameter authorization bypass exposes cross-project resources

File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence