Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1626–1650 of 30,910 matching · newest first
npm fast-uri · Upgrade to 4.1.4, 3.1.7 or 2.4.6 by release line · < 2.4.6; >= 3.0.0, < 3.1.7; >= 4.0.0, < 4.1.4 · CVE-2026-84292 · GHSA-qw65-cvwx-89v3 · amended
npm fast-uri · Upgrade to 4.1.4, 3.1.7 or 2.4.6 by release line · >= 2.4.5, <= 2.4.5; >= 3.1.6, <= 3.1.6; >= 4.1.3, <= 4.1.3 · CVE-2026-84394 · GHSA-58mr-gqgx-xq4g · amended
Maven tools.jackson.core:jackson-databind · Upgrade to 3.2.2 or 3.1.6 by release line · >= 3.0.0, < 3.1.6; >= 3.2.0, < 3.2.2 · +1 more package · CVE-2026-83557 · GHSA-gx83-3vf8-gh7j · amended
npm ip-address · Upgrade to 10.5.1 or later · <= 10.5.0 · CVE-2026-101913 · GHSA-rpw4-54j3-4h4q · amended
npm ip-address · Upgrade to 10.5.1 or later · >= 10.2.0, <= 10.5.0 · CVE-2026-101910 · GHSA-2vr4-cq9g-pvrc · amended
npm @angular/platform-server · Upgrade to 22.1.4, 21.2.22 or 20.3.30 by release line; some affected versions have no fix yet · >= 22.0.0, < 22.1.4; >= 21.0.0, < 21.2.22; >= 20.0.0, < 20.3.30; <= 19.2.25 · CVE-2026-88058 · GHSA-j3r3-mxqp-r2p4 · amended
Maven tools.jackson.core:jackson-databind · Upgrade to 3.2.2 or 3.1.6 by release line · >= 3.2.0, < 3.2.2; >= 3.0.0, < 3.1.6 · +1 more package · CVE-2026-68497 · GHSA-q4xh-88c3-wmh7 · amended
Maven tools.jackson.core:jackson-databind · Upgrade to 3.2.2 or 3.1.6 by release line · >= 3.0.0, < 3.1.6; >= 3.2.0, < 3.2.2 · +1 more package · CVE-2026-19032 · GHSA-wjgm-6hv5-3cvf · amended
Maven tools.jackson.core:jackson-databind · Upgrade to 3.2.1 or 3.1.5 by release line · >= 3.0.0, < 3.1.5; >= 3.2.0, < 3.2.1 · +1 more package · CVE-2026-77310 · GHSA-vvgp-rfg2-7rr6 · amended
npm @grpc/grpc-js-xds · Upgrade to 1.14.1 or 1.13.1 by release line · < 1.13.1; >= 1.14.0, <= 1.14.0 · CVE-2026-101914 · GHSA-88h9-xgvx-hvf2 · amended
Go github.com/mattermost/mattermost-server · Upgrade to 11.7.1, 11.6.3, 11.5.6 or 10.11.18 by release line · >= 11.7.0, < 11.7.1; >= 11.6.0, < 11.6.3; >= 11.5.0, < 11.5.6; >= 10.11.0, < 10.11.18 · CVE-2026-6062 · GHSA-mxq2-5jpg-7474 · amended
Go github.com/hatchet-dev/hatchet · Upgrade to 0.91.1 or later · < 0.91.1 · CVE-2026-61687 · GHSA-phg3-3g28-wq9v · amended
Go github.com/mattermost/mattermost-server · Upgrade to 11.7.1, 11.6.3, 11.5.6 or 10.11.18 by release line · >= 11.7.0, < 11.7.1; >= 11.6.0, < 11.6.3; >= 11.5.0, < 11.5.6; >= 10.11.0, < 10.11.18 · CVE-2026-9162 · GHSA-h998-hxxj-8q83 · amended
Go github.com/mattermost/mattermost-server · Upgrade to 11.7.1, 11.6.3, 11.5.6 or 10.11.18 by release line · >= 11.7.0, < 11.7.1; >= 11.6.0, < 11.6.3; >= 11.5.0, < 11.5.6; >= 10.11.0, < 10.11.18 · CVE-2026-5139 · GHSA-2g8v-grq3-hq2g · amended
Go github.com/ubuntu/adsys · Upgrade to 0.16.3-0.20250318112551-8b1939f96d38 (pre-release) or later · < 0.16.3-0.20250318112551-8b1939f96d38 · CVE-2026-12249 · GHSA-crm4-q7v4-c2r2 · amended
Go github.com/mattermost/mattermost-server · Upgrade to 11.7.1 or 10.11.18 by release line · >= 11.7.0, < 11.7.1; >= 10.11.0, < 10.11.18 · CVE-2026-8074 · GHSA-g5vr-6pgg-74qv · amended
Go github.com/mattermost/mattermost-server · Upgrade to 11.7.1, 11.6.3, 11.5.6 or 10.11.18 by release line · >= 11.7.0, < 11.7.1; >= 11.6.0, < 11.6.3; >= 11.5.0, < 11.5.6; >= 10.11.0, < 10.11.18 · CVE-2026-6673 · GHSA-jqgv-39mg-7c2r · amended
npm scim-patch · Upgrade to 0.9.2 or later · < 0.9.2 · CVE-2026-61834 · GHSA-2mhw-wcx5-v3xj · amended
grep_search Command Injection via Unescaped $() Shell Substitution (CWE-78)npm code-ollama · Upgrade to 0.36.1 or later · <= 0.36.0 · GHSA-456v-xq2p-r4cj · amended
crates.io libcrux-kem · Upgrade to 0.0.10 or later · >= 0.0.0-0, < 0.0.10 · amended
crates.io latex-rust · Upgrade to 1.0.5 or later · >= 0.0.0-0, < 1.0.5
PyPI scbe-aethermoore · Upgrade to 4.2.1 or later · >= 4.0.2, < 4.2.1 · CVE-2026-57443 · GHSA-q986-4x7x-gx39 · amended
NuGet cliinvoke.specializations · Upgrade to 3.0.0-beta.1 (pre-release), 2.10.5, 2.9.4 or 2.8.5 by release line · >= 2.2.0, <= 2.8.4; >= 2.9.0, <= 2.9.3; >= 2.10.0, <= 2.10.4; >= 3.0.0-alpha.1, <= 3.0.0-alpha.4; >= 3.0.0-alpha.8, <= 3.0.0-alpha.10 · +1 more package · CVE-2026-100368 · GHSA-wrvw-254r-wpmv · amended
NuGet cliinvoke · Upgrade to 3.0.0-beta.2 (pre-release), 2.10.5, 2.9.4 or 2.8.5 by release line · >= 2.0.0, <= 2.8.4; >= 2.9.0, <= 2.9.3; >= 2.10.0, <= 2.10.4; >= 3.0.0-alpha.1, <= 3.0.0-beta.1 · +1 more package · CVE-2026-100369 · GHSA-j73w-8hfr-4gc9 · amended
PyPI khoj · Upgrade to 2.0.0b25 (pre-release) or later · >= 2.0.0b23, < 2.0.0b25 · GHSA-62mm-xwmv-crhg · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.