Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.springframework.boot:spring-boot · Upgrade to 2.2.11.RELEASE or later · <= 2.2.10.RELEASE · CVE-2022-27772 · GHSA-cm59-pr5q-cw85
Go github.com/hyperledger/fabric · Upgrade to 2.4.5 or 2.2.7 by release line · < 2.2.7; >= 2.3.0, < 2.4.5 · CVE-2022-31121 · GHSA-72x4-cq6r-jp4p
Maven org.eclipse.jetty.http2:http2-server · Upgrade to 11.0.10, 10.0.10 or 9.4.47 by release line · < 9.4.47; >= 10.0.0, < 10.0.10; >= 11.0.0, < 11.0.10 · CVE-2022-2048 · GHSA-wgmr-mf83-7x4j
Maven org.eclipse.jetty:jetty-server · Upgrade to 11.0.10 or 10.0.10 by release line · >= 11.0.0, < 11.0.10; >= 10.0.0, < 10.0.10 · CVE-2022-2191 · GHSA-8mpp-f3f7-xc28
Maven org.apache.commons:commons-configuration2 · Upgrade to 2.8.0 or later · >= 2.4, < 2.8.0 · CVE-2022-33980 · GHSA-xj57-8qj4-c4m6
crates.io openssl-src · Upgrade to 300.0.9 or 111.22.0 by release line · >= 300.0.0, < 300.0.9; < 111.22.0 · CVE-2022-2097 · GHSA-3wx7-46ch-7rq2
npm parse-server · Upgrade to 5.2.4 or 4.10.13 by release line · < 4.10.13; >= 5.0.0, < 5.2.4 · CVE-2022-31112 · GHSA-crrq-vr9j-fxxh · amended
npm next-auth · Upgrade to 4.9.0 or 3.29.8 by release line · < 3.29.8; >= 4.0.0, < 4.9.0 · CVE-2022-31127 · GHSA-pgjx-7f9g-9463 · amended
NuGet moment.js +1 · Upgrade all 2 to 2.29.4 or later · >= 2.18.0, < 2.29.4 · CVE-2022-31129 · GHSA-wc69-rhjr-hc9g · amended
Go github.com/beego/beego · Upgrade to 1.12.11 or later · < 1.12.11 · +1 more package · CVE-2022-31836 · GHSA-95f9-94vc-665h
npm jquery-validation · Upgrade to 1.19.5 or later · < 1.19.5 · CVE-2022-31147 · GHSA-ffmh-x56j-9rc3 · amended
PyPI ujson · Upgrade to 5.4.0 or later · < 5.4.0 · CVE-2022-31116 · GHSA-wpqr-jcpx-745r · amended
RubyGems opensearch-ruby · Upgrade to 2.0.2 or later · >= 2.0.0, < 2.0.2 · CVE-2022-31115 · GHSA-977c-63xq-cgw3
PyPI pycti · Upgrade to 5.3.0 or later · < 5.3.0 · CVE-2022-30290
npm typeorm · Upgrade to 0.3.0 or later · < 0.3.0 · CVE-2022-33171 · GHSA-fx4w-v43j-vc45 · amended
Trunc() and Extract() database functions vulnerable to SQL InjectionPyPI django · Upgrade to 4.0.6 or 3.2.14 by release line · >= 3.2a1, < 3.2.14; >= 4.0a1, < 4.0.6 · CVE-2022-34265 · GHSA-p64x-8rxx-wf6q · amended
crates.io openssl-src · Upgrade to 300.0.9 or later · >= 300.0.8, < 300.0.9 · CVE-2022-2274 · GHSA-735f-pg76-fxc4
npm scss-tokenizer · Upgrade to 0.4.3 or later · <= 0.4.2 · CVE-2022-25758 · GHSA-7mwh-4pqv-wmr8 · amended
Maven org.jenkins-ci.plugins:plot · Upgrade to 2.1.11 or later · < 2.1.11 · CVE-2022-34783 · GHSA-hpf7-mmqw-g6vq
Maven org.jenkins-ci.plugins:gitlab-plugin · Upgrade to 1.5.35 or later · <= 1.5.34 · CVE-2022-34777 · GHSA-f655-xhvm-cwp4
Maven org.jenkins-ci.plugins:testng-plugin · Upgrade to 555.va0d5f66521e3 or later · <= 554.va4a552116332 · CVE-2022-34778 · GHSA-8hv7-4vfc-w8pg
RubyGems awesome_spawn · Upgrade to 1.2.0 or later · < 1.2.0 · CVE-2014-0156 · GHSA-qpqw-mc85-qvm9
Go github.com/open-policy-agent/opa · Upgrade to 0.42.0 or later · < 0.42.0 · CVE-2022-33082 · GHSA-2m4x-4q9j-w97g
Maven org.apache.shiro:shiro-core · Upgrade to 1.9.1 or later · < 1.9.1 · CVE-2022-32532 · GHSA-4cf5-xmhp-3xj7
Packagist getgrav/grav · Upgrade to 1.7.34 or later · < 1.7.34 · CVE-2022-2073 · GHSA-cxgw-r5jg-7xwq
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.