Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
NuGet microsoft.netcore.app.runtime.win-x86 · Upgrade to 3.1.6 or later · >= 3.1.0, < 3.1.6 · +11 more packages · CVE-2020-1147 · GHSA-g5vf-38cp-4px9
Packagist magento/core · Upgrade to 1.9.4.5 or later · < 1.9.4.5 · +1 more package · CVE-2020-9591 · GHSA-w7rh-9w5v-rwqj
Packagist magento/core · Upgrade to 1.9.4.5 or later · < 1.9.4.5 · +1 more package · CVE-2020-9579 · GHSA-vrp3-wc28-qg2h
Maven org.wildfly:wildfly-parent · Upgrade to 20.0.0.Final or later · < 20.0.0.Final · CVE-2020-10740 · GHSA-vrmw-2xhq-hrmp
Packagist ec-cube/ec-cube · Upgrade to 4.0.4; some affected versions have no fix yet · >= 3.0.0, <= 3.0.18; >= 4.0.0, <= 4.0.3 · CVE-2020-5590 · GHSA-hx79-x87c-hgm3
PyPI rtslib-fb · Upgrade to 2.1.73 or later · <= 2.1.72 · CVE-2020-14019 · GHSA-cpcw-p965-wpqx · amended
Packagist woocommerce/woocommerce · Upgrade to 3.6.5 or later · < 3.6.5 · CVE-2019-20891 · GHSA-rcmf-88p4-9wrg
invite_people commandGo github.com/mattermost/mattermost-server · Upgrade to 5.1.0 or later · < 5.1.0 · CVE-2018-21258 · GHSA-5mh6-p63g-3mv5
Go github.com/mattermost/mattermost-server · Upgrade to 3.8.2, 3.7.5 or 3.6.7-rc1 (pre-release) by release line · < 3.6.7-rc1; >= 3.7.0, < 3.7.5; >= 3.8.0, < 3.8.2 · CVE-2017-18911 · GHSA-m462-mqw4-2c8m
Go github.com/mattermost/mattermost-server · Upgrade to 3.7.4-0.20170404171331-0b5c0794fdcb (pre-release) or later · < 3.7.4-0.20170404171331-0b5c0794fdcb · CVE-2017-18912 · GHSA-m2ch-x2q7-2284
Go github.com/mattermost/mattermost-server · Upgrade to 3.8.2, 3.7.5 or 3.6.7-0.20170420152529-0968e4079e0a (pre-release) by release line · < 3.6.7-0.20170420152529-0968e4079e0a; >= 3.7.0, < 3.7.5; >= 3.8.0, < 3.8.2 · CVE-2017-18915 · GHSA-hxxj-8phw-74vw
Go github.com/mattermost/mattermost-server · Upgrade to 3.8.2 or 3.7.5-0.20170421192444-247cd1e51a8c (pre-release) by release line · < 3.7.5-0.20170421192444-247cd1e51a8c; >= 3.8.0, < 3.8.2 · CVE-2017-18917 · GHSA-jxc4-w54c-qv5r
Go github.com/mattermost/mattermost-server · Upgrade to 4.0.3 or 3.10.3 by release line · < 3.10.3; >= 4.0.0, < 4.0.3 · CVE-2017-18900 · GHSA-8q4v-35v6-g8wr
Go github.com/mattermost/mattermost-server · Upgrade to 3.10.1 or 3.9.1-rc1 (pre-release) by release line · < 3.9.1-rc1; >= 3.10.0, < 3.10.1 · CVE-2017-18908 · GHSA-34cx-hvm4-vx7j
Go github.com/mattermost/mattermost-server · Upgrade to 3.10.2 or 3.9.2-0.20170714134023-b17fca0d5ee7 (pre-release) by release line · < 3.9.2-0.20170714134023-b17fca0d5ee7; >= 3.10.0, < 3.10.2 · CVE-2017-18906 · GHSA-fpcr-4rr5-hpcp
Go github.com/mattermost/mattermost-server · Upgrade to 3.8.1-0.20170504181128-4f074fed0d65 (pre-release) or later · < 3.8.1-0.20170504181128-4f074fed0d65 · CVE-2017-18909 · GHSA-r6j5-fqx9-7qv9
Go github.com/mattermost/mattermost-server · Upgrade to 3.10.2 or 3.9.2 by release line · < 3.9.2; >= 3.10.0-rc1, < 3.10.2 · CVE-2017-18903 · GHSA-fcwg-45jh-5qhf
Go github.com/mattermost/mattermost-server · Upgrade to 4.3.0, 4.2.1 or 4.1.2 by release line · < 4.1.2; >= 4.2.0-rc1, < 4.2.1; >= 4.3.0-rc1, < 4.3.0 · CVE-2017-18888 · GHSA-v2vm-hq26-5jv6
Go github.com/mattermost/mattermost-server · Upgrade to 4.2.0, 4.1.1 or 4.0.5 by release line · < 4.0.5; >= 4.1.0, < 4.1.1; >= 4.2.0-rc1, < 4.2.0 · CVE-2017-18894 · GHSA-gg42-mwr6-p82c
Go github.com/mattermost/mattermost-server · Upgrade to 4.3.0, 4.2.1 or 4.1.2 by release line · < 4.1.2; >= 4.2.0-rc1, < 4.2.1; >= 4.3.0-rc1, < 4.3.0 · CVE-2017-18885 · GHSA-g78f-6xq7-rrhq
Go github.com/mattermost/mattermost-server · Upgrade to 4.3.0, 4.2.1 or 4.1.2 by release line · < 4.1.2; >= 4.2.0-rc1, < 4.2.1; >= 4.3.0-rc1, < 4.3.0 · CVE-2017-18886 · GHSA-wvjg-33p9-938h
Go github.com/mattermost/mattermost-server · Upgrade to 4.3.0, 4.2.1 or 4.1.2 by release line · < 4.1.2; >= 4.2.0-rc1, < 4.2.1; >= 4.3.0-rc1, < 4.3.0 · CVE-2017-18884 · GHSA-876j-jfqf-m7j7
@ character prefix inserted into JavaScript field namesGo github.com/mattermost/mattermost-server · Upgrade to 4.5.0, 4.4.5, 4.3.4 or 4.2.2 by release line · < 4.2.2; >= 4.3.0-rc1, < 4.3.4; >= 4.4.0-rc1, < 4.4.5; >= 4.5.0-rc1, < 4.5.0 · CVE-2017-18871 · GHSA-jc6w-8r7f-vmp5
Go github.com/mattermost/mattermost-server · Upgrade to 3.1.1 or later · < 3.1.1 · CVE-2016-11066 · GHSA-r93j-3mmp-px57
Go github.com/mattermost/mattermost-server · Upgrade to 3.0.0 or later · < 3.0.0 · CVE-2016-11076 · GHSA-379p-37xc-q963
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.