HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http
Go stdlib · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-94439
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1051–1075 of 30,910 matching · newest first
Go stdlib · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-94439
Go stdlib · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-94448
Go stdlib · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-94440
Go golang.org/x/net · Upgrade to 0.60.0 or later · < 0.60.0 · +1 more package · CVE-2026-78669
Go golang.org/x/net · Upgrade to 0.60.0 or later · < 0.60.0 · +1 more package · CVE-2026-78660
Go golang.org/x/net · Upgrade to 0.60.0 or later · < 0.60.0 · +1 more package · CVE-2026-97032
Go stdlib · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-97031
Go toolchain · Upgrade to 1.27.2 or 1.26.9 by release line · < 1.26.9; >= 1.27.0-0, < 1.27.2 · CVE-2026-94447
Go golang.org/x/net · Upgrade to 0.60.0 or later · < 0.60.0 · +1 more package · CVE-2026-78659
npm fast-jwt · Upgrade to 6.3.4 or later · <= 6.3.3 · CVE-2026-107719 · GHSA-x937-hj6v-793p · amended
Maven com.hazelcast:hazelcast · Upgrade to 5.7.0 or later · >= 5.6.0, < 5.7.0; >= 5.5.0, < 5.7.0; < 5.7.0 · CVE-2026-107726 · GHSA-6v25-8wq6-xq4j · amended
PyPI banks · Upgrade to 2.5.1 or later · <= 2.5.0 · CVE-2026-107716 · GHSA-556j-vv39-8rqv · amended
PyPI banks · Upgrade to 2.5.0 or later · <= 2.4.5 · CVE-2026-107717 · GHSA-hmq2-7hp6-7crh · amended
PyPI indico · Upgrade to 3.3.13 or later · < 3.3.13 · CVE-2026-107394 · GHSA-2v95-h47v-g4x9 · amended
PyPI indico · Upgrade to 3.3.13 or later · < 3.3.13 · CVE-2026-107395 · GHSA-6p4f-j8j6-463q · amended
PyPI indico · Upgrade to 3.3.13 or later · < 3.3.13 · CVE-2026-107397 · GHSA-cw24-x4mj-fw3q · amended
PyPI indico · Upgrade to 3.3.13 or later · < 3.3.13 · CVE-2026-107396 · GHSA-c4wc-ggrj-jg9v · amended
Maven com.hazelcast:hazelcast · Upgrade to 5.7.0 or later · >= 5.6.0, < 5.7.0; >= 5.5.0, < 5.7.0; < 5.7.0 · CVE-2026-107725 · GHSA-w294-6q5q-53p8 · amended
npm @adonisjs/http-server · Upgrade to 9.3.0 or 8.2.3 by release line · >= 9.0.0, <= 9.2.0; <= 8.2.2 · CVE-2026-107718 · GHSA-2m6q-8v3h-jqww · amended
RubyGems mechanize · Upgrade to 2.14.1 or later · < 2.14.1 · CVE-2026-107399 · GHSA-c6rp-p8xm-4q9f · amended
RubyGems mechanize · Upgrade to 2.14.1 or later · < 2.14.1 · CVE-2026-107715 · GHSA-2mwr-xjcg-37j7 · amended
npm fast-jwt · Upgrade to 6.3.1 or later · <= 6.3.0 · CVE-2026-107720 · GHSA-8wpc-h4q6-8fxv · amended
npm fast-jwt · Upgrade to 6.3.0 or later · >= 6.2.0, <= 6.2.4 · CVE-2026-107722 · GHSA-ww5h-9m49-7xx4 · amended
npm fast-jwt · Upgrade to 6.3.0 or later · <= 6.2.4 · CVE-2026-107721 · GHSA-687g-22h4-j4w4 · amended
npm fast-jwt · Upgrade to 6.3.0 or later · <= 6.2.4 · CVE-2026-107723 · GHSA-5hjw-83fp-phq9 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.