Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

1126–1150 of 30,910 matching · newest first

ExploitedClear filters

High, CVSS 8.78 Oct 2026
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element
Go github.com/xuri/excelize/v2 · Upgrade to 2.11.1-0.20260929015830-8ffeb07ec9a3 (pre-release) or later · >= 2.9.0, < 2.11.1-0.20260929015830-8ffeb07ec9a3 · CVE-2026-107213 · GHSA-r7x5-4969-99p7 · amended
8 Oct 2026Evidence →
Medium, CVSS 6.88 Oct 2026
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.1.0, <= 2.16.1 · CVE-2026-107228 · GHSA-2jwh-9rmr-j4xf · amended
8 Oct 2026Evidence →
Medium, CVSS 6.88 Oct 2026
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.1.0, <= 2.16.1 · CVE-2026-107226 · GHSA-p2jm-6hj6-9rjg · amended
8 Oct 2026Evidence →
High, CVSS 7.58 Oct 2026
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, <= 3.0.13; >= 2.2.0, <= 2.16.1 · CVE-2026-107227 · GHSA-x8v2-478q-2hvg · amended
8 Oct 2026Evidence →
High, CVSS 7.48 Oct 2026
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.14; some affected versions have no fix yet · >= 3.0.0, < 3.0.14; >= 2.0.0, <= 2.16.1 · CVE-2026-107230 · GHSA-v2j5-22fr-j62r · amended
8 Oct 2026Evidence →
High, CVSS 8.18 Oct 2026
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61443 · GHSA-c44f-37qr-gw3f · amended
8 Oct 2026Evidence →
High, CVSS 7.88 Oct 2026
PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61437 · GHSA-4gfv-wg42-7jw5 · amended
8 Oct 2026Evidence →
Medium, CVSS 5.78 Oct 2026
PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61432 · GHSA-4xxv-6wmf-xf45 · amended
8 Oct 2026Evidence →
Medium, CVSS 6.58 Oct 2026
Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch
PyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 1.77.0, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107290 · GHSA-fpf4-vwcp-v4hp · amended
8 Oct 2026Evidence →
Low, CVSS 2.38 Oct 2026
Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when include_content=False
PyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 0.3.4, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107291 · GHSA-4x9p-g9wm-8q7f · amended
8 Oct 2026Evidence →
Medium, CVSS 6.88 Oct 2026
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers
PyPI pydantic-ai +1 · Upgrade all 2 to 2.44.0 or 1.107.6 by release line · >= 1.56.0, < 1.107.6; >= 2.0.0b1, < 2.44.0 · CVE-2026-107289 · GHSA-vmxc-h2x2-jmf3 · amended
8 Oct 2026Evidence →
High, CVSS 8.48 Oct 2026
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61446 · GHSA-m6wp-h223-4c8g · amended
8 Oct 2026Evidence →
Critical, CVSS 10.08 Oct 2026
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61447 · GHSA-2xv2-w8cq-5gxw · amended
8 Oct 2026Evidence →
Medium, CVSS 6.18 Oct 2026
PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-60087 · GHSA-29r9-67vg-qj56 · amended
8 Oct 2026Evidence →
High, CVSS 8.58 Oct 2026
PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-61430 · GHSA-qg25-6gc4-48mg · amended
8 Oct 2026Evidence →
Medium, CVSS 6.98 Oct 2026
PraisonAI: Project config can auto-save agent output outside the project root
PyPI praisonaiagents · Upgrade to 1.6.78 or later · <= 1.6.77 · CVE-2026-60089 · GHSA-qjw5-xwrp-xwpq · amended
8 Oct 2026Evidence →
High, CVSS 7.58 Oct 2026
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
Go github.com/xuri/excelize/v2 · Upgrade to 2.11.1-0.20260911060113-ea12859e43c6 (pre-release) or later · >= 2.8.1, < 2.11.1-0.20260911060113-ea12859e43c6 · CVE-2026-107216 · GHSA-wp2g-vpjj-g53r · amended
8 Oct 2026Evidence →
Low, CVSS 3.78 Oct 2026
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.12 or 2.16.1 by release line · >= 3.0.0, <= 3.0.11; >= 2.0.0, <= 2.16.0 · CVE-2026-107283 · GHSA-mfj3-87qq-382v · amended
8 Oct 2026Evidence →
Medium, CVSS 5.98 Oct 2026
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.12 or 2.16.1 by release line · >= 3.0.0, <= 3.0.11; >= 2.0.0, <= 2.16.0 · CVE-2026-107285 · GHSA-3wp9-xfwm-rjjf · amended
8 Oct 2026Evidence →
Medium, CVSS 6.98 Oct 2026
AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.13 or 2.16.1 by release line · >= 3.0.0, <= 3.0.12; >= 2.0.0, <= 2.16.0 · CVE-2026-107280 · GHSA-f9m8-cv68-674w · amended
8 Oct 2026Evidence →
Critical, CVSS 9.48 Oct 2026
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.13 or 2.16.1 by release line · >= 3.0.0, <= 3.0.12; >= 2.0.0, <= 2.16.0 · CVE-2026-107282 · GHSA-jmqq-x5g9-9p2w · amended
8 Oct 2026Evidence →
High, CVSS 8.78 Oct 2026
AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.13 or 2.16.1 by release line · >= 3.0.0.Beta1, <= 3.0.12; >= 2.0.0, <= 2.16.0 · CVE-2026-107231 · GHSA-rqf5-2wxv-rjf4 · amended
8 Oct 2026Evidence →
Medium, CVSS 5.58 Oct 2026
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
Go github.com/moby/sys/user · Upgrade to 0.4.1 or later · <= 0.4.0 · CVE-2026-61801 · GHSA-mjcv-p78q-w5fw · amended
8 Oct 2026Evidence →
High, CVSS 7.57 Oct 2026
PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats
PyPI praisonai · Upgrade to 4.6.78 or later · <= 4.6.77 · CVE-2026-61439 · GHSA-fj8f-m44g-c479 · amended
7 Oct 2026Evidence →
High, CVSS 8.87 Oct 2026
Ghost: Remote Code Execution via Bookmark Card Images
npm ghost · Upgrade to 6.67.0 or later · >= 6.56.0, < 6.67.0 · CVE-2026-105642 · GHSA-788w-68h3-cvxp · amended
7 Oct 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)

AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS

AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled

AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`

Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments

PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure

PraisonAI: Project config can auto-save agent output outside the project root

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source

AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel

AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk

AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Ghost: Remote Code Execution via Bookmark Card Images

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence