Tornado is vulnerable to DoS due to too many multipart parts
PyPI tornado · Upgrade to 6.5.5 or later · <= 6.5.4 · CVE-2026-31958 · GHSA-qjxf-f2mg-c6mc · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
9301–9325 of 31,071 matching · newest first
PyPI tornado · Upgrade to 6.5.5 or later · <= 6.5.4 · CVE-2026-31958 · GHSA-qjxf-f2mg-c6mc · amended
npm unhead · Upgrade to 2.1.11 or later · <= 2.1.10 · CVE-2026-31873 · GHSA-5339-hvwr-7582 · amended
useHeadSafe via attribute name injection and case-sensitive protocol checknpm unhead · Upgrade to 2.1.11 or later · <= 2.1.10 · CVE-2026-31860 · GHSA-g5xx-pwrp-g3fv · amended
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-30937 · GHSA-qpg4-j99f-8xcg
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-30936 · GHSA-5ggv-92r5-cp4p
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-30935 · GHSA-cqw9-w2m7-r2m2
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-30931 · GHSA-h95r-c8c7-mrwx
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-30929 · GHSA-rqq8-jh93-f4vg
npm devalue · Upgrade to 5.6.4 or later · < 5.6.4 · CVE-2026-30226 · GHSA-cfw5-2vxh-hr84 · amended
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28693 · GHSA-hffp-q43q-qq76
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28691 · GHSA-wj8w-pjxf-9g4f
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28690 · GHSA-7h7q-j33q-hvpf
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28688 · GHSA-xxw5-m53x-j38c
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28687 · GHSA-fpvf-frm6-625q
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28686 · GHSA-467j-76j7-5885
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28494 · GHSA-932h-jw47-73jm
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.4 or later · < 14.10.4 · CVE-2026-28493 · GHSA-r39q-jr8h-gcq2
Packagist winter/wn-backend-module · Upgrade to 1.2.12, 1.1.12 or 1.0.477 by release line · >= 1.2.0, < 1.2.12; >= 1.1.0, < 1.1.12; < 1.0.477 · CVE-2026-27591 · GHSA-pgpf-m8m4-6cg6
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-26284 · GHSA-wrhr-rf8j-r842
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-25986 · GHSA-mqfc-82jx-3mr2
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-25982 · GHSA-pmq6-8289-hx3v
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-25971 · GHSA-8mpr-6xr2-chhc
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-25970 · GHSA-xg29-8ghv-v4xr
NuGet magick.net-q8-arm64 +18 · Upgrade all 19 to 14.10.3 or later · < 14.10.3 · CVE-2026-25968 · GHSA-3mwp-xqp2-q6ph
PyPI sglang · Upgrade to 0.5.10 or later · < 0.5.10 · CVE-2026-3059 · GHSA-rgq9-fqf5-fv58 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.