Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
Critical: 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

1276–1300 of 14,167 Critical + High advisories · newest first

Show all severities

Exploited

High, CVSS 7.325 Aug 2026
PraisonAI: [Auth Bypass] praisonai serve agents --api-key is silently ignored — agent-invocation routes (POST /agents, POST /agents/{agent_name}) run unauthenticated
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55538 · GHSA-r7v3-x45f-g7hp
25 Aug 2026Evidence →
High, CVSS 7.125 Aug 2026
PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55540 · GHSA-ch89-h4r2-c8f8
25 Aug 2026Evidence →
High, CVSS 7.525 Aug 2026
praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55524 · GHSA-vg6p-v9vm-6fgj
25 Aug 2026Evidence →
High, CVSS 8.625 Aug 2026
PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
PyPI praisonai · Upgrade to 4.6.58 or later · >= 4.6.34, < 4.6.58 · CVE-2026-55534 · GHSA-7ww9-85pg-cv4x
25 Aug 2026Evidence →
High, CVSS 8.525 Aug 2026
praisonaiagents has an SSRF protection bypass in spider_tools._host_is_blocked() via DNS-resolved hostnames (127.0.0.1.nip.io)
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55526 · GHSA-x44h-65qv-cw74
25 Aug 2026Evidence →
High, CVSS 8.225 Aug 2026
praisonaiagents: AgentServer declares auth_token but never enforces it on any route
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55528 · GHSA-7g3p-92qq-8wvh
25 Aug 2026Evidence →
High, CVSS 7.725 Aug 2026
praisonaiagents has a web_crawl SSRF protection bypass via unchecked redirect targets
PyPI praisonaiagents · Upgrade to 1.6.58 or later · >= 1.5.128, < 1.6.58 · CVE-2026-55523 · GHSA-8hjw-25cg-g52h
25 Aug 2026Evidence →
High, CVSS 7.825 Aug 2026
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
PyPI praisonai · Upgrade to 4.6.58 or later · >= 3.9.26, < 4.6.58 · +1 more package · CVE-2026-55522 · GHSA-hxmv-c4g6-5fqc
25 Aug 2026Evidence →
High, CVSS 7.525 Aug 2026
praisonaiagents web_crawl vulnerable to SSRF via redirect-following
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55525 · GHSA-5r34-2g38-6569
25 Aug 2026Evidence →
High, CVSS 7.124 Aug 2026
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
PyPI django-cms · Upgrade to 5.0.8 or later · < 5.0.8 · CVE-2026-54623 · GHSA-8jj7-4v57-frf5
24 Aug 2026Evidence →
High, CVSS 8.724 Aug 2026
postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
crates.io postgres-protocol · Upgrade to 0.6.12 or later · >= 0.3.0, < 0.6.12 · GHSA-5x78-73v4-xg6w · amended
24 Aug 2026Evidence →
Critical, CVSS 10.024 Aug 2026
mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
PyPI mcp-contextforge-gateway · Upgrade to 1.0.2 or later · <= 1.0.1 · CVE-2026-53710 · GHSA-xm98-3vcf-fph7 · amended
24 Aug 2026Evidence →
Critical, CVSS 9.824 Aug 2026
Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
Maven org.apache.camel:camel-undertow · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.11.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-78329 · GHSA-v7h8-xhh6-gfj4 · amended
24 Aug 2026Evidence →
High, CVSS 7.524 Aug 2026
Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result
Maven org.apache.camel:camel-google-storage · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.0.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-66907 · GHSA-f78g-9385-qxqj · amended
24 Aug 2026Evidence →
Critical, CVSS 9.824 Aug 2026
Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace
Maven org.apache.camel:camel-atmosphere-websocket · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.0.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-71300 · GHSA-m5r8-w65q-8wjf · amended
24 Aug 2026Evidence →
High, CVSS 7.524 Aug 2026
Apache Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a…
Maven org.apache.camel:camel-platform-http-main · Upgrade to 4.22.0 or later · >= 4.8.0, < 4.22.0 · CVE-2026-66908 · GHSA-fpm2-m4qq-wghr · amended
24 Aug 2026Evidence →
Critical, CVSS 9.124 Aug 2026
Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir
Maven org.apache.camel:camel-azure-storage-blob · Upgrade to 4.22.0, 4.18.4 or 4.14.9 by release line · >= 4.0.0, < 4.14.9; >= 4.15.0, < 4.18.4; >= 4.19.0, < 4.22.0 · CVE-2026-66906 · GHSA-2x37-89hj-2j95 · amended
24 Aug 2026Evidence →
High, CVSS 8.724 Aug 2026
Panic on Decoding Short Hybrid Keys
crates.io libcrux-kem · Upgrade to 0.0.10 or later · >= 0.0.0-0, < 0.0.10 · amended
24 Aug 2026Evidence →
High, CVSS 8.722 Aug 2026
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
PyPI nltk · Upgrade to 3.10.3 or later · >= 3.10.0, < 3.10.3 · CVE-2026-71513 · GHSA-5gh2-94qg-qppq
22 Aug 2026Evidence →
Critical, CVSS 9.321 Aug 2026
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
npm jsonata · Upgrade to 2.2.1 or 1.8.8 by release line · >= 2.0.0, < 2.2.1; < 1.8.8 · CVE-2026-77415 · GHSA-66mm-25pp-rfff · amended
21 Aug 2026Evidence →
Critical, CVSS 9.321 Aug 2026
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
npm jsonata · Upgrade to 2.2.1 or 1.8.8 by release line · >= 2.0.0, < 2.2.1; < 1.8.8 · CVE-2026-77414 · GHSA-2943-5xfg-gq5f · amended
21 Aug 2026Evidence →
High, CVSS 7.821 Aug 2026
Hydra: hydra.utils.instantiate with untrusted config can lead to code execution
PyPI hydra-core · Upgrade to 1.3.4 or later · <= 1.3.3 · CVE-2026-68508 · GHSA-2cp2-2r3c-7p7r
21 Aug 2026Evidence →
High, CVSS 8.221 Aug 2026
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
Packagist yourls/yourls · Upgrade to 1.10.4 or later · >= 1.5.1, <= 1.10.3 · CVE-2026-63135 · GHSA-5h77-88j3-r659 · amended
21 Aug 2026Evidence →
Critical, CVSS 9.321 Aug 2026
JSONata: Arbitrary Code Execution via crafted JSONata expressions
npm jsonata · Upgrade to 2.2.0 or 1.8.8 by release line · <= 1.8.7; >= 2.0.0, < 2.2.0 · CVE-2026-77413 · GHSA-8gq3-vp5j-2grp · amended
21 Aug 2026Evidence →
High, CVSS 8.721 Aug 2026
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
Go github.com/getkin/kin-openapi · Upgrade to 0.142.0 or later · >= 0.124.0, < 0.142.0 · CVE-2026-77354 · GHSA-xhj3-7xw9-vr34 · amended
21 Aug 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated

PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace

Apache Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a…

Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Panic on Decoding Short Hybrid Keys

NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

YOURLS has stored XSS in referrer statistics chart via crafted Referer header

JSONata: Arbitrary Code Execution via crafted JSONata expressions

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence