Critical, CVSS 9.8
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
PyPI litellm · Upgrade to 1.83.7 or later · < 1.83.7 · CVE-2026-37004 · GHSA-6wvf-77m9-58rm · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.2
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check
Go github.com/crossplane/crossplane-runtime/v2 · Upgrade to 2.4.0-rc.1 (pre-release) or 2.3.3 by release line · >= 2.4.0-rc.0, <= 2.4.0-rc.0; >= 2.3.0, <= 2.3.2 · CVE-2026-105163 · GHSA-mf7q-r4rv-jv94 · amended
- High, CVSS 7.2
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
Packagist symbiote/silverstripe-advancedworkflow · Upgrade to 7.2.1, 7.1.3 or 6.4.5 by release line · < 6.4.5; >= 7.0.0, < 7.1.3; >= 7.2.0, < 7.2.1 · CVE-2026-54718 · GHSA-39mm-rwm3-29jp · amended
- High, CVSS 8.8
silverstripe/userforms vulnerable to remote code execution via userforms email subject
Packagist silverstripe/userforms · Upgrade to 7.1.1, 7.0.7 or 6.4.9 by release line · < 6.4.9; >= 7.0.0, < 7.0.7; >= 7.1.0, < 7.1.1 · CVE-2026-54721 · GHSA-g8wr-r2v2-vqc6 · amended
- Critical, CVSS 9.8
Spring Framework Server Sent Event stream corruption while rendering fragments
Maven org.springframework:spring-webmvc +1 · Upgrade all 2 to 7.0.9; some affected versions have no fix yet · >= 6.2.0, <= 6.2.19; >= 7.0.0, <= 7.0.8 · CVE-2026-47890 · GHSA-j9f9-w8pj-32f8 · amended
- Critical, CVSS 9.8
Spring Framework Improper Path Limitation in XsltView
Maven org.springframework:spring-webmvc · Upgrade to 7.0.9; some affected versions have no fix yet · <= 5.2.25.RELEASE; >= 5.3.0, <= 5.3.49; >= 6.0.0, <= 6.0.30; >= 6.1.0, <= 6.1.28; >= 6.2.0, <= 6.2.19; >= 7.0.0, <= 7.0.8 · CVE-2026-47884 · GHSA-pc63-qcmh-9cmg · amended
- Critical, CVSS 9.8
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
Maven org.springframework:spring-webflux · Upgrade to 7.0.9; some affected versions have no fix yet · >= 5.2.5.RELEASE, <= 5.2.25.RELEASE; >= 5.3.0, <= 5.3.49; >= 6.0.0, <= 6.0.30; >= 6.1.0, <= 6.1.28; >= 6.2.0, <= 6.2.19; >= 7.0.0, <= 7.0.8 · CVE-2026-47892 · GHSA-9qf2-26p9-2q2q · amended
- High, CVSS 7.1
LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates
Packagist librenms/librenms · Upgrade to 26.5.0 or later · < 26.5.0 · CVE-2026-84192 · GHSA-7w8c-qgxg-m7jx · amended
- High, CVSS 8.1
asyncssh has SCP Path Traversal to Arbitrary File Write
PyPI asyncssh · Upgrade to 2.23.1 or later · <= 2.23.0 · CVE-2026-54591 · GHSA-2wxc-x7rj-hg8f
- High, CVSS 8.5
SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
npm suneditor · Upgrade to 3.1.4 or later · >= 3.0.0, < 3.1.4 · CVE-2026-54606 · GHSA-w93q-cq9w-58p7 · amended
- High, CVSS 8.6
@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
npm @logtape/syslog · Upgrade to 2.1.5, 2.0.14 or 1.3.11 by release line · >= 2.1.0, <= 2.1.4; >= 2.0.0, < 2.0.14; < 1.3.11 · CVE-2026-54511 · GHSA-8h6h-x5pq-56fq
- High, CVSS 7.4
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
Maven org.codehaus.izpack:izpack-installer · Upgrade to 5.2.7 or later · < 5.2.7 · CVE-2026-54550 · GHSA-f63g-88cj-hjf9 · amended
- Critical, CVSS 9.6
Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
Go github.com/kyverno/kyverno · Upgrade to 1.18.2 or later · >= 1.18.0, <= 1.18.1 · CVE-2026-54523 · GHSA-79gf-7frw-68m9 · amended
- High, CVSS 8.2
http4s has HTTP/2 Denial of Service with Ember Backend
Maven org.http4s:http4s-ember-core_2.12 · Upgrade to 0.23.35 or later · < 0.23.35 · +2 more packages · CVE-2026-54556 · GHSA-vmm3-xgcx-67hm · amended
- High, CVSS 8.2
Path traversal in apimock-server's file-serving fallback
crates.io apimock-server · Upgrade to 5.19.1 or later · >= 0.0.0-0, < 5.19.1 · GHSA-72g6-wgrg-vhm7 · amended
- Critical, CVSS 9.1
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
Maven org.apache.tomcat:tomcat +2 · Upgrade all 3 to 11.0.25, 10.1.58 or 9.0.121 by release line; some affected versions have no fix yet · >= 11.0.0-M1, < 11.0.25; >= 10.1.0-M1, < 10.1.58; >= 9.0.0-M1, < 9.0.121; >= 8.5.0, <= 8.5.100; >= 7.0.0, <= 7.0.109 · CVE-2026-68525 · GHSA-h3x4-894j-xpx5 · amended
- Critical, CVSS 9.8
Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation
Bitnami tomcat · Upgrade to 11.0.25, 10.1.58 or 9.0.121 by release line · >= 9.0.115, < 9.0.121; >= 10.1.53, < 10.1.58; >= 11.0.20, < 11.0.25 · +2 more packages · CVE-2026-65637 · GHSA-f525-44xv-f2qj · amended
- Critical, CVSS 9.1
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability
Maven org.apache.tomcat:tomcat +2 · Upgrade all 3 to 11.0.25, 10.1.58 or 9.0.121 by release line; some affected versions have no fix yet · >= 11.0.0-M1, < 11.0.25; >= 10.1.0-M1, < 10.1.58; >= 9.0.0-M1, < 9.0.121; >= 8.5.0, <= 8.5.100; >= 7.0.0, <= 7.0.109 · CVE-2026-65182 · GHSA-gcx9-497g-6cp6 · amended
- Critical, CVSS 9.8
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability
Maven org.apache.tomcat:tomcat +2 · Upgrade all 3 to 11.0.25, 10.1.58 or 9.0.121 by release line; some affected versions have no fix yet · >= 11.0.0-M1, < 11.0.25; >= 10.1.0-M1, < 10.1.58; >= 9.0.0.M1, < 9.0.121; >= 8.5.0, <= 8.5.100; >= 7.0.30, <= 7.0.109 · CVE-2026-65905 · GHSA-9xv2-5v5q-p794 · amended
- Critical, CVSS 9.4
MCP Toolbox for Databases has an Origin Validation Error
Go github.com/googleapis/genai-toolbox +1 · Upgrade all 2 to 0.25.0 or later · < 0.25.0 · CVE-2026-11624 · GHSA-76g7-m3xw-x9gr · amended
- High, CVSS 7.5
icalendar has Algorithmic Complexity in Equality
PyPI icalendar · Upgrade to 7.1.3 or later · >= 7.1.0, < 7.1.3 · CVE-2026-55099 · GHSA-cv84-9p8j-fj68
- High, CVSS 7.2
Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access
PyPI chainlit · Upgrade to 2.12.0 or later · >= 2.4.0rc0, < 2.12.0 · CVE-2026-45019 · GHSA-hvfh-5mj3-5f3j · amended
- Critical, CVSS 9.8
Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution
PyPI chainlit · Upgrade to 2.12.0 or later · >= 2.4.0rc0, <= 2.11.1 · CVE-2026-45018 · GHSA-w3fx-mc44-mf6j · amended
- High, CVSS 8.6
@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
npm @arikusi/deepseek-mcp-server · Upgrade to 1.7.0 or later · >= 1.4.2, < 1.7.0 · CVE-2026-55604 · GHSA-fh3r-g96v-f578
- High, CVSS 7.1
consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
npm consciousness-explorer · Upgrade to 1.1.2 or later · < 1.1.2 · +1 more package · CVE-2026-55609 · GHSA-xc9g-j69q-37xw
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.