Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
9826–9850 of 31,071 matching · newest first
PyPI openexr · Upgrade to 3.4.6, 3.3.8 or 3.2.6 by release line · >= 2.3.0, < 3.2.6; >= 3.3.0, < 3.3.8; >= 3.4.0, < 3.4.6 · CVE-2026-27622 · GHSA-cr4v-6jm6-4963 · amended
crates.io theshit · Upgrade to 0.2.0 or later · < 0.2.0 · CVE-2026-21882 · GHSA-2j3p-gqw5-g59j
Go github.com/bytebase/bytebase · Upgrade to 1.0.1 or later · <= 1.0.0 · GHSA-5r3p-6rj5-7937
npm @nestjs/platform-fastify · Upgrade to 11.1.14 or later · <= 11.1.13 · CVE-2026-2293 · GHSA-r4wm-x892-vjmx · amended
Packagist statamic/cms · Upgrade to 6.4.0 or 5.73.11 by release line · < 5.73.11; >= 6.0.0-alpha.1, < 6.4.0 · CVE-2026-28426 · GHSA-5vrj-wf7v-5wr7
Packagist statamic/cms · Upgrade to 6.7.2 or 5.73.16 by release line · < 5.73.16; >= 6.0.0-alpha.1, < 6.7.2 · CVE-2026-28425 · GHSA-cpv7-q2wx-m8rw
Packagist statamic/cms · Upgrade to 6.4.0 or 5.73.11 by release line · < 5.73.11; >= 6.0.0-alpha.1, < 6.4.0 · CVE-2026-28424 · GHSA-w878-f8c6-7r63
Packagist statamic/cms · Upgrade to 6.4.0 or 5.73.11 by release line · < 5.73.11; >= 6.0.0-alpha.1, < 6.4.0 · CVE-2026-28423 · GHSA-cwpp-325q-2cvp
proxy_url Injection in gr.load() Config ProcessingPyPI gradio · Upgrade to 6.6.0 or later · < 6.6.0 · CVE-2026-28416 · GHSA-jmh7-g254-2cq9 · amended
PyPI gradio · Upgrade to 6.6.0 or later · < 6.6.0 · CVE-2026-28415 · GHSA-pfjf-5gxr-995x · amended
PyPI gradio · Upgrade to 6.7.0 or later · < 6.7.0 · CVE-2026-28414 · GHSA-39mp-8hj3-5c49 · amended
Go github.com/chainguard-dev/kaniko · Upgrade to 1.25.10 or later · >= 1.25.4, < 1.25.10 · CVE-2026-28406 · GHSA-6rxq-q92g-4rmf
PyPI indico · Upgrade to 3.3.11 or later · < 3.3.11 · CVE-2026-28352 · GHSA-rfpp-2hgm-gp5v · amended
Go github.com/romitou/insatutorat · Upgrade to 0.0.0-20260226075457-15ae47425aed (pre-release) or later · < 0.0.0-20260226075457-15ae47425aed · GHSA-xfx2-prg5-jq3g
npm multer · Upgrade to 2.1.0 or later · < 2.1.0 · CVE-2026-3304 · GHSA-xf7r-hgr6-v32p · amended
npm multer · Upgrade to 2.1.0 or later · < 2.1.0 · CVE-2026-2359 · GHSA-v52c-386h-88mc · amended
PyPI gradio · Upgrade to 6.6.0 or later · >= 4.16.0, < 6.6.0 · CVE-2026-27167 · GHSA-h3h8-3v2v-rg7m · amended
npm serialize-javascript · Upgrade to 7.0.3 or later · <= 7.0.2 · GHSA-5c6j-r48x-rmvq · amended
Go github.com/chainguard-dev/malcontent · Upgrade to 1.21.0 or later · < 1.21.0 · CVE-2026-28407 · GHSA-945p-3jhm-6rcp
Maven net.sourceforge.pmd:pmd-core · Upgrade to 7.22.0 or later · <= 7.21.0 · CVE-2026-28338 · GHSA-8rr6-2qw5-pc7r
crates.io hivex · Upgrade to 0.2.1 or later · >= 0.2.0, <= 0.2.0 · GHSA-j8cj-hw74-64jv
npm @fastify/middie · Upgrade to 9.2.0 or later · < 9.2.0 · CVE-2026-2880 · GHSA-8p85-9qpw-fwgw · amended
PyPI pypdf · Upgrade to 6.7.4 or later · < 6.7.4 · CVE-2026-28351 · GHSA-f2v5-7jq9-h8cg · amended
Go github.com/jmpsec/osctrl · Upgrade to 0.5.0 or later · < 0.5.0 · CVE-2026-28280 · GHSA-4rv8-5cmm-2r22
Go github.com/jmpsec/osctrl · Upgrade to 0.5.0 or later · < 0.5.0 · CVE-2026-28279 · GHSA-rchw-322g-f7rm
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.