High, CVSS 8.7
Whistle vulnerable to path traversal
npm whistle · Upgrade to 2.10.3 or later · < 2.10.3 · CVE-2026-55629 · GHSA-3vfr-4gwf-qxfp
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 7.5
eml_parser vulnerable to DoS via deeply nested parens in Received headers
PyPI eml-parser · Upgrade to 3.0.2 or later · < 3.0.2 · CVE-2026-55620 · GHSA-g7gc-gmgp-wgqg
- High, CVSS 8.8
genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport
Go github.com/geiserx/genieacs-mcp · Upgrade to 0.3.2 or later · <= 0.3.1 · CVE-2026-55637 · GHSA-cmwv-wf9p-p8wx · amended
- High, CVSS 7.0
Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts
Go github.com/aquasecurity/trivy · Upgrade to 0.71.1 or later · < 0.71.1 · CVE-2026-55092 · GHSA-mcj4-mphf-j9ff · amended
- High, CVSS 8.8
phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.5 or later · <= 4.1.4 · CVE-2026-57995 · GHSA-pg62-f8g4-4wqh · amended
- High, CVSS 8.7
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
npm @platejs/media · Upgrade to 53.1.4 or later · >= 53.0.0, < 53.1.4 · CVE-2026-55596 · GHSA-qj6x-xx2h-8hvv
- High, CVSS 8.6
browse-mcp has an arbitrary file write via unconfined download and state paths
npm browse-mcp · Upgrade to 0.8.2 or later · <= 0.8.1 · CVE-2026-55557 · GHSA-m9mq-7m7q-xc6p
- High, CVSS 8.8
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy
parse_expr()PyPI qwed · Upgrade to 5.1.2 or later · < 5.1.2 · CVE-2026-55585 · GHSA-q27q-98j4-9pfv
- High, CVSS 7.5
urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
npm urllib · Upgrade to 4.9.1 or 2.44.1 by release line · >= 3.0.0, <= 4.9.0; <= 2.44.0 · CVE-2026-55553 · GHSA-hq3h-g68c-hp78
- High, CVSS 8.2
djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls
PyPI djust · Upgrade to 1.0.4 or later · < 1.0.4 · CVE-2026-55571 · GHSA-xx4j-w367-7247
- Critical, CVSS 9.1
nextcloud-mcp-server: Unauthenticated
POST /webhooks/nextcloudallows arbitrary vector data deletion whenWEBHOOK_SECRETis unset ( default )PyPI nextcloud-mcp-server · Upgrade to 0.117.2 or later · <= 0.117.1 · CVE-2026-55640 · GHSA-8vh3-g2qg-2h2c · amended
- High, CVSS 8.6
pickem vulnerable to terminal escape-sequence injection via unsanitized item text
npm pickem · Upgrade to 1.0.7 or later · < 1.0.7 · GHSA-8qx3-8gm5-9cj2
- High, CVSS 7.1
utcp-http has an OAuth2
tokenUrlTrust Boundary Bypass in OpenAPI ConversionPyPI utcp-http · Upgrade to 1.1.4 or later · <= 1.1.3 · GHSA-8cp3-qxj6-px34
- High, CVSS 8.2
utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target
PyPI utcp-http · Upgrade to 1.1.4 or later · <= 1.1.3 · GHSA-9qhg-99ww-9mqc
- High, CVSS 8.6
mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
Go github.com/sonirico/mcp-shell · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-55580 · GHSA-f5pj-2738-996m · amended
- High, CVSS 8.4
mcp-shell has a Secure Mode Allowlist Bypass via Default
/bin/bashExecutableGo github.com/sonirico/mcp-shell · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-55581 · GHSA-3x77-wg38-92r3 · amended
- High, CVSS 8.4
mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias
Go github.com/sonirico/mcp-shell · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-55582 · GHSA-74hp-mggr-hv58 · amended
- Critical, CVSS 9.8
qwed-mcp has Unsafe SymPy
parse_expr()Remote Code Execution via Unsanitized Math Expression InputPyPI qwed-mcp · Upgrade to 0.2.1 or later · < 0.2.1 · CVE-2026-55546 · GHSA-mw6r-2hvm-4rp2 · amended
- Critical, CVSS 9.1
PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55536 · GHSA-6g6r-q6gw-w8fg · amended
- High, CVSS 7.6
PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55532 · GHSA-pvph-5j39-v8qc
- High, CVSS 8.2
PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55533 · GHSA-gfq8-hmph-9gjv
- High, CVSS 8.6
PraisonAI: [Auth Bypass] PraisonAI async Jobs API (
/api/v1/runs) has no authentication — unauthenticated job execution, result theft, cancel and deletePyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55539 · GHSA-2jgc-f764-c5r2
- High, CVSS 7.1
praisonaiagents vulnerable to arbitrary file write via unsanitized
user_idinFileMemory.__init__()— path traversal to any writable locationPyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55527 · GHSA-gxmw-5f7x-6g22
- High, CVSS 8.8
PraisonAI:
--api-keyflag onpraisonai serveis not properly enforcedPyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55541 · GHSA-pvxx-r596-f5qj
- High, CVSS 7.1
PraisonAI: Webhook SSRF via DNS fail-open in
JobSubmitRequest.validate_webhook_url()— bypass of CVE-2026-40114PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55537 · GHSA-rg5q-pp8p-f7jm
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.