Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

101–125 of 30,910 matching · newest first

ExploitedClear filters

Medium, CVSS 5.49 Nov 2026
Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
Go github.com/kubeflow/pipelines · Upgrade to 0.0.0-20260910172610-620d0cc89ae0 (pre-release) or later · < 0.0.0-20260910172610-620d0cc89ae0 · CVE-2026-88982 · GHSA-2xwh-426q-42c5 · amended
9 Nov 2026Evidence →
High, CVSS 7.79 Nov 2026
Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
npm @anthropic-ai/claude-code · Upgrade to 2.1.251 or later · < 2.1.251 · CVE-2026-88968 · GHSA-5xjx-9qx6-jcrv · amended
9 Nov 2026Evidence →
High, CVSS 8.89 Nov 2026
DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
Go github.com/ddev/ddev · Upgrade to 1.25.4 or later · < 1.25.4 · CVE-2026-108262 · GHSA-9hq4-hm3j-jmph · amended
9 Nov 2026Evidence →
High, CVSS 7.59 Nov 2026
Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
npm moleculer · Upgrade to 0.15.2 or 0.14.36 by release line · >= 0.15.0-beta1, < 0.15.2; < 0.14.36 · CVE-2026-97705 · GHSA-h89v-g948-47vp · amended
9 Nov 2026Evidence →
Medium, CVSS 6.59 Nov 2026
Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
Go www.velocidex.com/golang/velociraptor · Upgrade to 0.77.2 or later · < 0.77.2 · CVE-2026-85737 · GHSA-9qq5-422f-33c2 · amended
9 Nov 2026Evidence →
Critical, CVSS 9.69 Nov 2026
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
Go github.com/kubeflow/pipelines · Upgrade to 0.0.0-20260909234119-62516d8c525f (pre-release) or later · < 0.0.0-20260909234119-62516d8c525f · CVE-2026-77596 · GHSA-rjr3-43j3-4q8g · amended
9 Nov 2026Evidence →
Medium, CVSS 5.99 Nov 2026
FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files
Packagist filegator/filegator · Upgrade to 7.15.0 or later · < 7.15.0 · CVE-2026-94619 · GHSA-44r8-3p76-84mw · amended
9 Nov 2026Evidence →
Medium, CVSS 5.49 Nov 2026
FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive
Packagist filegator/filegator · Upgrade to 7.15.0 or later · < 7.15.0 · CVE-2026-94618 · GHSA-f74m-x83r-c4v4 · amended
9 Nov 2026Evidence →
High, CVSS 7.19 Nov 2026
Code Graph RAG structural tools follow out-of-root symlinks
PyPI code-graph-rag · Upgrade to 0.0.587 or later · < 0.0.587 · CVE-2026-87008 · GHSA-85gg-2gfq-q95m · amended
9 Nov 2026Evidence →
Critical, CVSS 9.8Exploited · CISA KEV9 Nov 2026
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
PyPI gpustack · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2026-102895 · GHSA-gj9m-f8ph-pmhr · amended
9 Nov 2026Evidence →
Critical, CVSS 9.69 Nov 2026
Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing
Go github.com/pocket-id/pocket-id/backend · Upgrade to 0.0.0-20260727180059-43aaccd5bfac (pre-release) or later · < 0.0.0-20260727180059-43aaccd5bfac · CVE-2026-115770 · GHSA-rm8c-2cv8-jwf6 · amended
9 Nov 2026Evidence →
Medium, CVSS 5.39 Nov 2026
Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)
PyPI urwid · Upgrade to 4.0.7 or later · < 4.0.7 · CVE-2026-103022 · GHSA-cp25-j9x5-p5xm · amended
9 Nov 2026Evidence →
High, CVSS 7.59 Nov 2026
esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal
Go github.com/esm-dev/esm.sh/web · Upgrade to 0.2.0 or later · < 0.2.0 · CVE-2026-102657 · GHSA-g3c2-rjq2-c763 · amended
9 Nov 2026Evidence →
Medium, CVSS 6.49 Nov 2026
fast-agent: fast-agent serve binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution
PyPI fast-agent-mcp · Upgrade to 0.7.21 or later · < 0.7.21 · CVE-2026-102610 · GHSA-9vhv-g5hf-m7m7 · amended
9 Nov 2026Evidence →
High, CVSS 8.59 Nov 2026
Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets
Go github.com/telepresenceio/telepresence · Upgrade to 2.31.0 or later · < 2.31.0 · CVE-2026-102340 · GHSA-j8j4-rw65-56r6 · amended
9 Nov 2026Evidence →
High, CVSS 8.29 Nov 2026
Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable
Go github.com/telepresenceio/telepresence/v2 · Upgrade to 2.31.0 or later · < 2.31.0 · CVE-2026-102339 · GHSA-6j3h-rp73-6rvf · amended
9 Nov 2026Evidence →
High, CVSS 7.09 Nov 2026
zizmor: Debug logging prints available GitHub credentials in cleartext
PyPI zizmor · Upgrade to 1.28.0 or later · >= 1.27.0, < 1.28.0 · CVE-2026-102289 · GHSA-f42p-wjw5-97qh · amended
9 Nov 2026Evidence →
Medium, CVSS 5.39 Nov 2026
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed X-Forwarded-For header
Go github.com/mayswind/ezbookkeeping · Upgrade to 1.6.0 or later · >= 0.10.0, < 1.6.0 · CVE-2026-86041 · GHSA-wchh-mrv2-5h4q · amended
9 Nov 2026Evidence →
Medium, CVSS 6.99 Nov 2026
OmniAuth: Host Header Injection Vulnerability
RubyGems omniauth · Upgrade to 2.2.0 or later · < 2.2.0 · CVE-2026-63183 · GHSA-m27g-v28p-f9fx · amended
9 Nov 2026Evidence →
High, CVSS 8.19 Nov 2026
Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
Maven com.gradleup.shadow:com.gradleup.shadow.gradle.plugin · Upgrade to 9.6.0 or later · < 9.6.0 · CVE-2026-75598 · GHSA-rr8v-fxxf-c986 · amended
9 Nov 2026Evidence →
High, CVSS 7.59 Nov 2026
Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read
PyPI code-graph-rag · Upgrade to 0.0.345 or later · < 0.0.345 · CVE-2026-77604 · GHSA-vvr2-h2jp-838m · amended
9 Nov 2026Evidence →
High, CVSS 7.79 Nov 2026
Pocket ID: The client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences
Go github.com/pocket-id/pocket-id/backend · Upgrade to 0.0.0-20260622164202-8158452b3730 (pre-release) or later · < 0.0.0-20260622164202-8158452b3730 · CVE-2026-62662 · GHSA-q4xm-p75h-h9p3 · amended
9 Nov 2026Evidence →
Medium, CVSS 6.99 Nov 2026
tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
npm @tsparticles/mcp-server · Upgrade to 4.3.2 or later · < 4.3.2 · CVE-2026-76893 · GHSA-h7c4-q426-7jh9 · amended
9 Nov 2026Evidence →
High, CVSS 8.79 Nov 2026
tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
npm @tsparticles/mcp-server · Upgrade to 4.3.1 or later · < 4.3.1 · CVE-2026-76892 · GHSA-4p8p-pjpq-2w7h · amended
9 Nov 2026Evidence →
Medium, CVSS 5.99 Nov 2026
JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS
Maven org.json:json · Upgrade to 20260719 or later · >= 20150729, < 20260719 · CVE-2026-59171 · GHSA-ghc9-756g-vrcv · amended
9 Nov 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)

Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885

Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin

Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files

FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive

Code Graph RAG structural tools follow out-of-root symlinks

GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin

Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing

Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal

fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution

Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets

Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable

zizmor: Debug logging prints available GitHub credentials in cleartext

ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header

OmniAuth: Host Header Injection Vulnerability

Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization

Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read

Pocket ID: The client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences

tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients

tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence