Magento remote code execution vulnerability
Packagist magento/community-edition · Upgrade to 2.3.2-p2 (pre-release) or 2.2.10 by release line · >= 2.2.0, < 2.2.10; >= 2.3.0, < 2.3.2-p2 · CVE-2019-8154 · GHSA-4v2q-hjx3-c4vr
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Packagist magento/community-edition · Upgrade to 2.3.2-p2 (pre-release) or 2.2.10 by release line · >= 2.2.0, < 2.2.10; >= 2.3.0, < 2.3.2-p2 · CVE-2019-8154 · GHSA-4v2q-hjx3-c4vr
Packagist magento/community-edition · Upgrade to 2.3.2-p1 (pre-release) or 2.2.10 by release line · >= 2.2, < 2.2.10; >= 2.3, < 2.3.2-p1 · CVE-2019-8149 · GHSA-8mwx-wpp4-5xh4
Maven com.typesafe.play:play-ws_2.12 · Upgrade to 2.6.24 or later · >= 2.5.0, < 2.6.24 · CVE-2019-17598 · GHSA-442g-gcg6-mhm4
PyPI pip · Upgrade to 1.5 or later · < 1.5 · CVE-2013-5123 · GHSA-c5h8-cq4v-cvfm · amended
PyPI reportlab · Upgrade to 3.5.28 or later · < 3.5.28 · CVE-2019-17626 · GHSA-qpg2-vx7j-3869 · amended
PyPI numpy · Upgrade to 1.16.3 or later · < 1.16.3 · CVE-2019-6446 · GHSA-9fq2-x9r6-wfmf · amended
Maven org.jenkins-ci.plugins:aqua-security-scanner · Upgrade to 3.0.18 or later · <= 3.0.17 · CVE-2019-10428 · GHSA-xp44-8vwr-xwmv
Packagist magento/community-edition · Upgrade to 2.3.2, 2.2.9 or 2.1.18 by release line · >= 2.1.0, < 2.1.18; >= 2.2.0, < 2.2.9; >= 2.3.0, < 2.3.2 · CVE-2019-7139 · GHSA-4j6w-9rf8-hg7r
Maven org.apache.tapestry:tapestry-core · Upgrade to 5.4.5 or later · >= 5.4.0, < 5.4.5 · CVE-2019-0195 · GHSA-6mwh-fw4p-75fj
Maven org.apache.solr:solr-core · Upgrade to 5.0.0 or later · < 5.0.0 · CVE-2019-12401 · GHSA-jq2w-w7v2-69q5
Packagist typo3/cms-core +1 · Upgrade all 2 to 9.5.8 or 8.7.27 by release line · >= 8.0.0, < 8.7.27; >= 9.0.0, < 9.5.8 · CVE-2019-12747 · GHSA-86hp-xrhj-fhpq
NuGet microsoft.chakracore · Upgrade to 1.11.10 or later · < 1.11.10 · CVE-2019-1024 · GHSA-g8q3-rcf9-qx4q
NuGet microsoft.chakracore · Upgrade to 1.11.10 or later · < 1.11.10 · CVE-2019-1002 · GHSA-4v6q-gjm6-6vv4
NuGet microsoft.chakracore · Upgrade to 1.11.10 or later · < 1.11.10 · CVE-2019-1051 · GHSA-fxrx-5j36-pwg5
NuGet microsoft.chakracore · Upgrade to 1.11.10 or later · < 1.11.10 · CVE-2019-1052 · GHSA-v8jw-x9wq-hw4v
Maven org.jenkins-ci.plugins:gitea · Upgrade to 1.1.2 or later · < 1.1.2 · CVE-2019-10330 · GHSA-q98c-rqx7-7ghf
Maven org.jenkins-ci.plugins:influxdb · Upgrade to 1.22 or later · < 1.22 · CVE-2019-10329 · GHSA-rv97-r8f7-8wmg
Maven org.jenkins-ci.plugins:pipeline-maven · Upgrade to 3.7.1 or later · < 3.7.1 · CVE-2019-10327 · GHSA-6755-jgp4-8q7h
Maven org.jenkins-ci.plugins:workflow-remote-loader · Upgrade to 1.5 or later · < 1.5 · CVE-2019-10328 · GHSA-v558-fhw2-v46w
Packagist typo3/cms-core +1 · Upgrade all 2 to 9.5.6 or 8.7.25 by release line · >= 8.0.0, < 8.7.25; >= 9.0.0, < 9.5.6 · CVE-2019-11832 · GHSA-3w4h-r27h-4r2w
Go github.com/cilium/cilium · Upgrade to 1.11.5, 1.10.11 or 1.9.16 by release line · >= 1.11.0, < 1.11.5; >= 1.10.0, < 1.10.11; < 1.9.16 · CVE-2022-29179 · GHSA-fmrf-gvjp-5j5g
Go github.com/cilium/cilium · Upgrade to 1.11.5, 1.10.11 or 1.9.16 by release line · >= 1.11.0, < 1.11.5; >= 1.10.0, < 1.10.11; < 1.9.16 · CVE-2022-29178 · GHSA-6p8v-8cq8-v2r3
Go github.com/charmbracelet/charm · Upgrade to 0.12.1 or later · >= 0.9.0, < 0.12.1 · CVE-2022-29180 · GHSA-4wpp-w5r4-7v5v
Go github.com/theupdateframework/go-tuf · Upgrade to 0.3.0 or later · < 0.3.0 · CVE-2022-29173 · GHSA-66x3-6cw3-v5gj
Go github.com/argoproj/argo-cd/v2 · Upgrade to 2.3.4, 2.2.9 or 2.1.15 by release line · >= 2.3.0, < 2.3.4; >= 2.2.0, < 2.2.9; < 2.1.15 · +1 more package · CVE-2022-29165 · GHSA-r642-gv9p-2wjj
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.