Stack overflow when parsing deeply nested input in pest_grammars
crates.io pest_grammars · Upgrade to 2.9.3 or later · >= 0.0.0-0, < 2.9.3 · GHSA-7632-4q2x-hvjw
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
851–875 of 30,910 matching · newest first
crates.io pest_grammars · Upgrade to 2.9.3 or later · >= 0.0.0-0, < 2.9.3 · GHSA-7632-4q2x-hvjw
CParameter::StableInBuffercrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 4.1.0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
CCtx::try_clone on a multithreaded contextcrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 4.1.4, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
init_using_cdict and init_using_ddictcrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 3.0.0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 0.0.0-0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io zstd · Upgrade to 0.14.3 or 0.13.4 by release line · >= 0.13.2, < 0.13.4; >= 0.14.0-0, < 0.14.3 · amended
crates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 4.0.0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 3.0.1, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
write::Decoder on a corrupt legacy framecrates.io zstd · Upgrade to 0.8.0 or later · >= 0.4.22, < 0.8.0
Seekable::decompress sets a Vec length beyond its capacity for offsets past the endcrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 7.2.2, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io ammonia · Upgrade to 4.2.4 or 4.1.8 by release line · >= 0.0.0-0, < 4.1.8; >= 4.2.0, < 4.2.4 · GHSA-x43w-36pp-96g3
train_from_buffer when sample sizes overflowcrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 0.0.0-0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io zstd-sys · Upgrade to 2.1.2 or later · >= 2.0.9, < 2.1.2
DCtx::try_clonecrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 4.1.4, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
Bitnami gitlab · Upgrade to 19.4.2, 19.3.5 or 19.2.8 by release line · >= 19.2.0, < 19.2.8; >= 19.3.0, < 19.3.5; >= 19.4.0, < 19.4.2 · CVE-2026-97229 · amended
npm @tanstack/start-server-core · Upgrade to 1.169.39 or later · >= 1.143.12, < 1.169.39 · +3 more packages · CVE-2026-102989 · GHSA-qx66-fv34-fjm8 · amended
PyPI pipecat-ai · Upgrade to 1.6.0 or later · >= 0.0.98, <= 1.5.0 · CVE-2026-102682 · GHSA-hqm2-cfx2-2vgh · amended
PyPI jupyterlab · Upgrade to 4.6.4 or 4.5.11 by release line · >= 4.6.0, <= 4.6.3; >= 4.5.7, <= 4.5.10 · +2 more packages · CVE-2026-102832 · GHSA-jwrc-gm9j-263p · amended
npm @anthropic-ai/claude-code · Upgrade to 2.1.179 or later · < 2.1.179 · CVE-2026-86063 · GHSA-pq7j-f95f-qfcv · amended
Go github.com/containerd/containerd · Upgrade to 1.7.35 or later · < 1.7.35 · +1 more package · CVE-2026-95838 · GHSA-rp3h-jf77-q9p4 · amended
npm @builder.io/qwik · Upgrade to 1.20.0 or later · < 1.20.0 · +1 more package · CVE-2026-84994 · GHSA-x586-xvc8-g7q6 · amended
npm @backstage/backend-defaults · Upgrade to 0.17.8 or later · < 0.17.8 · CVE-2026-106495 · GHSA-3xr5-8w6c-p5gw · amended
Go github.com/getkin/kin-openapi · Upgrade to 0.149.0 or later · >= 0.136.0, < 0.149.0 · CVE-2026-100353 · GHSA-vrcc-3ch7-hppw · amended
Go github.com/getkin/kin-openapi · Upgrade to 0.149.0 or later · < 0.149.0 · CVE-2026-100354 · GHSA-g8cf-rcjf-c8cf · amended
Go github.com/getkin/kin-openapi · Upgrade to 0.148.0 or later · < 0.148.0 · CVE-2026-100352 · GHSA-rj39-cv6w-8wv7 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.