Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/traefik/traefik/v2 · Upgrade to 2.9.0-rc5 (pre-release) or 2.8.8 by release line · < 2.8.8; >= 2.9.0-rc1, < 2.9.0-rc5 · CVE-2022-39271 · GHSA-c6hx-pjc3-7fqr
crates.io slack-morphism · Upgrade to 1.3.2 or later · < 1.3.2 · CVE-2022-39292 · GHSA-4mjx-2gh5-ph8h
npm tiny-csrf · Upgrade to 1.1.0 or later · < 1.1.0 · CVE-2022-39287 · GHSA-pj2c-h76w-vv6f · amended
PyPI apache-airflow · Upgrade to 2.4.1rc1 (pre-release) or later · < 2.4.1rc1 · CVE-2022-41672 · GHSA-3q8r-f3pj-3gc4 · amended
npm v8n · Upgrade to 1.5.1 or later · < 1.5.1 · CVE-2022-35923 · GHSA-xrx9-gj26-5wx9 · amended
PyPI tensorflow +2 · Upgrade all 3 to 2.4.0 or later · >= 2.4.0rc0, < 2.4.0 · CVE-2020-26269 · GHSA-9jjw-hf72-3mxw · amended
GitHub Actions atlassian/gajira-create · Upgrade to 2.0.1 or later · < 2.0.1 · CVE-2020-14188 · GHSA-4xqx-pqpj-9fqw
Go github.com/antchfx/xmlquery · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2020-25614 · GHSA-93m7-c69f-5cfj
Go github.com/russellhaering/goxmldsig · Upgrade to 1.1.1 or later · < 1.1.1 · +1 more package · CVE-2020-7711 · GHSA-mqqv-chpx-vq25
Go github.com/caddyserver/caddy · Upgrade to 0.10.13 or later · < 0.10.13 · CVE-2018-21246 · GHSA-gr7w-x2jp-3xgw
Packagist fooman/tcpdf +3 · Upgrade all 4 to 6.2.22 or later · < 6.2.22 · CVE-2018-17057 · GHSA-5hw4-m7f3-hhx8
Maven org.hsqldb:hsqldb · Upgrade to 2.7.1 or later · < 2.7.1 · CVE-2022-41853 · GHSA-77xx-rxvh-q682
PyPI rdiffweb · Upgrade to 2.4.10 or later · < 2.4.10 · CVE-2022-3389 · GHSA-hrrm-895h-xh34 · amended
PyPI rdiffweb · Upgrade to 2.5.0 or later · < 2.5.0 · CVE-2022-3273 · GHSA-9g3v-v24q-jj5p · amended
Packagist moodle/moodle · Upgrade to 4.0.3 or 3.11.9 by release line · >= 3.11, < 3.11.9; >= 4.0, < 4.0.3 · CVE-2022-2986 · GHSA-xjr3-fwp9-9g96
Go github.com/flyteorg/flyteadmin · Upgrade to 1.1.44 or later · < 1.1.44 · CVE-2022-39273 · GHSA-67x4-qr35-qvrm
PyPI lief · Upgrade to 0.12.2 or later · <= 0.12.1 · CVE-2022-40922 · GHSA-38hf-c37x-32hv · amended
PyPI label-studio · Upgrade to 1.6.0 or later · < 1.6.0 · CVE-2022-36551 · GHSA-pc6f-259w-w3j6 · amended
npm snyk · Upgrade to 1.996.0 or later · < 1.996.0 · +1 more package · CVE-2022-40764 · GHSA-hpqj-7cj6-hfj8 · amended
Go github.com/dexidp/dex · Upgrade to 2.35.0 or later · <= 2.34.0 · CVE-2022-39222 · GHSA-vh7g-p26c-j2cw
Maven com.fasterxml.jackson.core:jackson-databind · Upgrade to 2.13.4.2 or 2.12.7.1 by release line · >= 2.4.0-rc1, < 2.12.7.1; >= 2.13.0, < 2.13.4.2 · CVE-2022-42003 · GHSA-jjjh-jjxp-wpff
Maven com.fasterxml.jackson.core:jackson-databind · Upgrade to 2.13.4 or 2.12.7.1 by release line · >= 2.13.0, < 2.13.4; >= 2.4.0-rc1, < 2.12.7.1 · CVE-2022-42004 · GHSA-rgv9-q543-rqg4
Go github.com/cloudflare/goflow/v3 · Upgrade to 3.4.4 or later · < 3.4.4 · CVE-2022-2529 · GHSA-9rpw-2h95-666c
npm react-native-reanimated · Upgrade to 2.10.0 or later · < 2.10.0 · CVE-2022-24373 · GHSA-2j79-8pqc-r7x6 · amended
npm css-what · Upgrade to 2.1.3 or later · < 2.1.3 · CVE-2022-21222 · GHSA-p28h-cc7q-c4fg · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.