High, CVSS 7.3
Ghost: Stored XSS via Embed Card Previews
npm ghost · Upgrade to 6.67.0 or later · >= 6.34.0, < 6.67.0 · CVE-2026-105643 · GHSA-69qc-f5m6-889c · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
1151–1175 of 30,910 matching · newest first
- Medium, CVSS 6.8
Ghost : Stored XSS via SVG Files in Content Imports
npm ghost · Upgrade to 6.67.0 or later · >= 4.0.0, < 6.67.0 · CVE-2026-105644 · GHSA-hqq2-xqr2-fmx2 · amended
- Medium, CVSS 4.9
Ghost: Regular Expression Denial of Service in External Media Inliner
npm ghost · Upgrade to 6.67.0 or later · >= 5.37.0, < 6.67.0 · CVE-2026-105645 · GHSA-9m4w-fmjw-fvjq · amended
- Medium, CVSS 4.9
Ghost: Regular Expression Denial of Service in Content Import
npm ghost · Upgrade to 6.67.0 or later · >= 4.0.0, < 6.67.0 · CVE-2026-105646 · GHSA-fwh9-qg68-vxp4 · amended
- Medium, CVSS 4.9
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
Maven com.rabbitmq:amqp-client · Upgrade to 5.36.1 or later · <= 5.36.0 · CVE-2026-106121 · GHSA-cqgh-8p3p-mx4m · amended
- Low, CVSS 3.7
Docling: Configured HTTP headers sent to every remote image host named by a document
PyPI docling +1 · Upgrade all 2 to 2.132.0 or later · >= 2.95.0, < 2.132.0 · CVE-2026-105742 · GHSA-p3fw-7699-7926 · amended
- Medium, CVSS 4.0
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
PyPI docling +1 · Upgrade all 2 to 2.132.0 or later · >= 2.91.0, < 2.132.0 · CVE-2026-105743 · GHSA-pc36-qwjq-x68c · amended
- High, CVSS 7.5
Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
PyPI docling +1 · Upgrade all 2 to 2.132.0 or later · >= 2.94.0, < 2.132.0 · CVE-2026-105744 · GHSA-x3q2-h9hx-4r4j · amended
- Medium, CVSS 4.3
Docling: Crafted DoclingDocument JSON embeds local image files into converted output
PyPI docling +1 · Upgrade all 2 to 2.131.0 or later · >= 2.16.0, < 2.131.0 · CVE-2026-105748 · GHSA-p944-4xh2-x776 · amended
- Medium, CVSS 6.5
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
PyPI docling +1 · Upgrade all 2 to 2.131.0 or later · >= 2.0.0, < 2.131.0 · CVE-2026-105749 · GHSA-cgc7-9qp3-86m3 · amended
- Medium, CVSS 6.7
Docling imports plugin entry points before the allow_external_plugins check
PyPI docling +1 · Upgrade all 2 to 2.131.0 or later · >= 2.27.0, < 2.131.0 · CVE-2026-105745 · GHSA-9jxx-vjrv-h2rq · amended
- Critical, CVSS 9.9
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
PyPI langflow · Upgrade to 1.10.3 or later · >= 1.1.2, < 1.10.3 · +2 more packages · CVE-2026-105697 · GHSA-w794-rj3p-xv45 · amended
- Medium, CVSS 5.4
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
PyPI langflow · Upgrade to 1.10.1 or later · >= 1.0.0, < 1.10.1 · +1 more package · CVE-2026-105698 · GHSA-gh98-4phw-6fmw · amended
- Medium, CVSS 4.0
Ghost: Server-Side Request Forgery in Bookmark Fetching
npm ghost · Upgrade to 6.65.0 or later · >= 6.54.1, < 6.65.0 · CVE-2026-105647 · GHSA-322m-ff4g-9vx9 · amended
- Medium, CVSS 4.0
Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses
npm ghost · Upgrade to 6.65.0 or later · >= 6.0.9, < 6.65.0 · CVE-2026-105648 · GHSA-r7f2-6fj8-6fg2 · amended
- High, CVSS 7.3
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
npm ghost · Upgrade to 6.65.0 or later · >= 4.22.0, < 6.65.0 · CVE-2026-105649 · GHSA-8575-cr6v-7jh4 · amended
- High, CVSS 7.1
Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
PyPI langflow · Upgrade to 1.9.1 or later · >= 1.6.8, <= 1.9.0 · CVE-2026-105699 · GHSA-4hmc-cfm3-w43c · amended
- Medium, CVSS 6.3
Next.js: Pending
use cachefill can leak Draft Mode content into regular responses and persisted pagesnpm next · Upgrade to 16.3.8 or later · >= 16.3.0, < 16.3.8 · CVE-2026-94544 · GHSA-3w37-wq28-93x7 · amended
- Medium, CVSS 6.3
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
npm next · Upgrade to 16.3.8 or 15.5.27 by release line · >= 15.0.0, < 15.5.27; >= 16.0.0, < 16.3.8 · CVE-2026-94543 · GHSA-4jqv-mc3x-m676 · amended
- Low, CVSS 2.3
Next.js has information disclosure in development server's Model Context Protocol endpoint
npm next · Upgrade to 16.3.8 or later · >= 16.0.0, < 16.3.8 · CVE-2026-94486 · GHSA-39w2-rjm5-chcv · amended
- Medium, CVSS 6.3
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
npm next · Upgrade to 16.3.8 or later · >= 16.0.0, < 16.3.8 · CVE-2026-94485 · GHSA-f87g-xv8r-7p7x · amended
- Medium, CVSS 6.3
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
npm next · Upgrade to 16.3.8 or 15.5.27 by release line · >= 16.0.0, < 16.3.8; >= 15.0.0, < 15.5.27 · CVE-2026-94484 · GHSA-mcj8-r9mp-w47p · amended
- High, CVSS 8.3
Next.js has Server-Side Request Forgery in Image Optimization
npm next · Upgrade to 16.3.8 or later · >= 16.0.0, < 16.3.8 · CVE-2026-94483 · GHSA-cjq9-62q9-8jv4 · amended
- High, CVSS 8.6
Payload: SQL injection in SQLite/Postgres
npm @payloadcms/db-postgres · Upgrade to 3.73.0 or later · >= 3.0.0, < 3.73.0 · +3 more packages · CVE-2026-105856 · GHSA-pj7x-6wpf-pgvp · amended
- High, CVSS 8.1
Payload: Remote Code Execution through first-register
npm payload · Upgrade to 4.0.0-canary.34 (pre-release) or 3.90.0 by release line · < 3.90.0; >= 4.0.0-canary.0, < 4.0.0-canary.34 · CVE-2026-105858 · GHSA-97rh-rhh2-7vjv · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.