Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
9076–9100 of 31,064 matching · newest first
npm parse-server · Upgrade to 9.6.0-alpha.21 (pre-release) or 8.6.45 by release line · >= 9.0.0, < 9.6.0-alpha.21; < 8.6.45 · CVE-2026-32944 · GHSA-9xp9-j92r-p88v · amended
RubyGems devise · Upgrade to 5.0.3 or later · <= 5.0.2 · CVE-2026-32700 · GHSA-57hq-95w6-v4fc
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.11.0 or later · < 14.11.0 · CVE-2026-32636 · GHSA-gc62-2v5p-qpmp
Go github.com/cloudnativelabs/kube-router/v2 · Upgrade to 2.8.0 or later · < 2.8.0 · CVE-2026-32254 · GHSA-phqm-jgc3-qf8g
npm jspdf · Upgrade to 4.2.1 or later · <= 4.2.0 · CVE-2026-31938 · GHSA-wfv2-pwc8-crg5 · amended
npm jspdf · Upgrade to 4.2.1 or later · <= 4.2.0 · CVE-2026-31898 · GHSA-7x6v-j9x4-qf24 · amended
Packagist cockpit-hq/cockpit · Upgrade to 2.13.5 or later · < 2.13.5 · CVE-2026-31891 · GHSA-7x5c-vfhj-9628
Maven io.micronaut:micronaut-json-core · Upgrade to 4.10.16, 3.10.5 or 3.8.13 by release line · >= 4.0.0-M1, < 4.10.16; >= 3.9.0, < 3.10.5; < 3.8.13 · CVE-2026-33013 · GHSA-43w5-mmxv-cpvh
npm elysia · Upgrade to 1.4.27 or later · < 1.4.27 · CVE-2026-31865 · GHSA-8hq9-phh3-p2wp · amended
PyPI pyasn1 · Upgrade to 0.6.3 or later · <= 0.6.2 · CVE-2026-30922 · GHSA-jr27-m4p2-rc6r · amended
npm next · Upgrade to 16.1.7 or 15.5.13 by release line · >= 16.0.0-beta.0, < 16.1.7; >= 9.5.0, < 15.5.13 · CVE-2026-29057 · GHSA-ggv3-7p47-pfv8 · amended
npm next · Upgrade to 16.1.7 or 15.5.14 by release line · >= 16.0.0-beta.0, < 16.1.7; >= 10.0.0, < 15.5.14 · CVE-2026-27980 · GHSA-3x4c-7xq6-9pq8 · amended
npm next · Upgrade to 16.1.7 or later · >= 16.0.1, < 16.1.7 · CVE-2026-27979 · GHSA-h27x-g6w4-24gq · amended
PyPI pycti · Upgrade to 6.9.1 or later · < 6.9.1 · CVE-2026-21886 · GHSA-mhmx-j75v-2m6x
RubyGems katello · Upgrade to 4.19.1 or later · < 4.19.1 · CVE-2026-4324 · GHSA-fwj4-6wgp-mpxm
npm next · Upgrade to 16.1.7 or later · >= 16.0.1, < 16.1.7 · CVE-2026-27978 · GHSA-mq59-m269-xvcx · amended
npm next · Upgrade to 16.1.7 or later · >= 16.0.1, < 16.1.7 · CVE-2026-27977 · GHSA-jcc7-9wpm-mj36 · amended
PyPI justhtml · Upgrade to 1.10.0 or later · <= 1.9.1 · CVE-2026-9769 · GHSA-v7cf-c9rm-wm3j · amended
PyPI apache-airflow · Upgrade to 3.1.8 or later · >= 3.0.0, < 3.1.8 · CVE-2026-28779 · GHSA-4fhm-p86v-hwpx · amended
PyPI apache-airflow · Upgrade to 3.1.8 or later · >= 3.1.0, < 3.1.8 · CVE-2026-30911 · GHSA-8x34-9q3v-h7g8 · amended
PyPI apache-airflow · Upgrade to 3.1.8 or later · >= 3.0.0, < 3.1.8 · CVE-2026-28563 · GHSA-x3fv-96qh-67m7 · amended
PyPI apache-airflow · Upgrade to 3.1.8 or later · >= 3.0.0, < 3.1.8 · CVE-2026-26929 · GHSA-4m3h-wp5w-5hqh · amended
Packagist ayacoo/redirect-tab · Upgrade to 4.0.5, 3.1.7 or 2.1.2 by release line · < 2.1.2; >= 3.0.0, < 3.1.7; >= 4.0.0, < 4.0.5 · CVE-2026-4202 · GHSA-755r-r738-mjgp
Packagist ralffreit/mfa-email · Upgrade to 2.0.1 or 1.0.7 by release line · < 1.0.7; >= 2.0.0, <= 2.0.0 · CVE-2026-4208 · GHSA-29r8-gvx4-r9w3
npm sjcl · Upgrade to 1.0.9 or later · <= 1.0.8 · CVE-2026-4258 · GHSA-2w8x-224x-785m · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.