High, CVSS 8.8
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
Go github.com/stacklok/toolhive · Upgrade to 0.30.1 or later · < 0.30.1 · CVE-2026-58197 · GHSA-qg2g-g9w3-m5h8 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- Critical, CVSS 9.9
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
Go github.com/kcp-dev/kcp · Upgrade to 0.32.2 or 0.31.4 by release line · < 0.31.4; >= 0.32.0, < 0.32.2 · CVE-2026-61682 · GHSA-c8w2-fgvx-vhv4 · amended
- High, CVSS 7.1
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
Go github.com/projectcapsule/capsule · Upgrade to 0.13.7 or later · <= 0.13.6 · CVE-2026-61672 · GHSA-gjw4-3v3v-rqxg · amended
- High, CVSS 7.5
LMDeploy has an SSRF bypass
PyPI lmdeploy · Upgrade to 0.15.0 or later · >= 0.12.3, < 0.15.0 · CVE-2026-123818 · GHSA-39wr-7q6h-cf68 · amended
- High, CVSS 8.8
LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading
PyPI lmdeploy · Upgrade to 0.12.3 or later · >= 0.12.1, < 0.12.3 · CVE-2026-33625 · GHSA-3hmm-rh5q-gwwr · amended
- Critical, CVSS 9.8
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
PyPI lmdeploy · Upgrade to 0.16.0 or later · >= 0.9.2, < 0.16.0 · CVE-2025-66455 · GHSA-2vh9-42vm-xmv2 · amended
- High, CVSS 7.3
Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks
Packagist mediawiki/semantic-media-wiki · Upgrade to 7.3.0 or later · >= 3.0.0, < 7.3.0 · CVE-2026-116890 · GHSA-jr78-w6w5-m8f8 · amended
- High, CVSS 8.6
Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes
Packagist mediawiki/semantic-media-wiki · Upgrade to 7.0.0 or later · >= 3.1.0, < 7.0.0 · CVE-2025-61682 · GHSA-hg8h-557g-q8pp · amended
- Critical, CVSS 9.9
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
Maven org.xwiki.rendering:xwiki-rendering-xml · Upgrade to 14.10.2 or later · < 14.10.2 · CVE-2025-53837 · GHSA-26vp-8gxg-v4pg · amended
- High, CVSS 8.7
Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text
Maven org.opencastproject:opencast-engage-paella-player-7 · Upgrade to 20.2 or 19.7 by release line · < 19.7; >= 20.0, < 20.2 · +1 more package · CVE-2026-77615 · GHSA-m6c8-jcw2-5r25 · amended
- High, CVSS 8.7
Grav CMS vulnerable to remote code execution via .zip file upload
Packagist getgrav/grav · Upgrade to 2.0.13 or later · < 2.0.13 · CVE-2026-72819 · GHSA-r94f-hx44-8jqf · amended
- High, CVSS 7.7
Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin
Packagist getgrav/grav · Upgrade to 2.0.14 or later · < 2.0.14 · CVE-2026-75837 · GHSA-xhfv-7758-r9hx · amended
- Critical, CVSS 9.3
Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write
Packagist getgrav/grav · Upgrade to 2.0.15 or later · <= 2.0.14 · CVE-2026-75827 · GHSA-f8wv-xp27-6gq7 · amended
- Critical, CVSS 9.3
Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS
Packagist getgrav/grav · Upgrade to 2.0.15 or later · <= 2.0.14 · CVE-2026-75828 · GHSA-vfmf-q6x9-cw96 · amended
- High, CVSS 8.2
Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in
plugin-asset-map.phpStatic Asset Server (index.php)Packagist getgrav/grav · Upgrade to 2.0.15 or later · <= 2.0.14 · CVE-2026-74907 · GHSA-4v9q-p283-qc2m · amended
- High, CVSS 7.1
Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
Packagist getgrav/grav · Upgrade to 2.0.16 or later · <= 2.0.15 · CVE-2026-72695 · GHSA-jq29-c7v8-rg55 · amended
- High, CVSS 7.5
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
Go github.com/coredns/coredns · Upgrade to 1.14.7 or later · <= 1.14.6 · CVE-2026-86003 · GHSA-9gm5-9rfh-m6vx · amended
- High, CVSS 7.5
react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
Packagist react/http · Upgrade to 1.11.1 or later · >= 0.6.0, <= 1.11.0 · CVE-2026-84997 · GHSA-x424-64qh-5j54 · amended
- High, CVSS 7.5
CoreDNS: Unauthenticated memory exhaustion in custom transports
Go github.com/coredns/coredns · Upgrade to 1.14.7 or later · <= 1.14.6 · CVE-2026-82399 · GHSA-mrg3-qvqr-jw29 · amended
- High, CVSS 7.5
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service
Maven ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli +2 · Upgrade all 3 to 6.9.12 or later · <= 6.9.11 · CVE-2026-81876 · GHSA-gq9c-wmrm-5hvr · amended
- High, CVSS 8.7
djust: A template binding inherits a context safety grant it never earned (XSS)
PyPI djust · Upgrade to 1.1.2 or 1.0.10 by release line · < 1.0.10; >= 1.1.0, < 1.1.2 · CVE-2026-125112 · GHSA-xjw9-38cr-6372 · amended
- High, CVSS 7.5
Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
NuGet steeltoe.discovery.consul · Upgrade to 4.3.0 or later · >= 4.0.0, <= 4.2.0 · CVE-2026-81516 · GHSA-67c9-f6v2-qv86 · amended
- High, CVSS 7.5
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
NuGet steeltoe.discovery.eureka · Upgrade to 4.3.0 or later · >= 4.0.0, <= 4.2.0 · CVE-2026-81515 · GHSA-hr73-3gpv-hh6q · amended
- High, CVSS 7.1
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
PyPI jupyter-server · Upgrade to 2.21.0 or later · <= 2.20.0 · CVE-2026-86049 · GHSA-c3mw-737p-c7g2 · amended
- Critical, CVSS 9.2
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
Packagist cakephp/cakephp +1 · Upgrade all 2 to 5.3.7, 5.2.14, 5.1.9 or 2 more by release line · < 4.5.12; >= 4.6.0, < 4.6.5; >= 5.0.0, < 5.1.9; >= 5.2.0, < 5.2.14; >= 5.3.0, < 5.3.7 · CVE-2026-79752 · GHSA-vjqc-q4mp-2rvf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.