Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1726–1750 of 30,910 matching · newest first
.* WrappingMaven org.jline:jline-builtins · Upgrade to 4.3.1 or 3.30.15 by release line · >= 4.0.0, < 4.3.1; >= 3.0.0, < 3.30.15 · CVE-2026-77422 · GHSA-r2xf-8xr9-62gw · amended
npm 9router · Upgrade to 0.5.4 or later · <= 0.5.2 · CVE-2026-56679 · GHSA-vmjq-hvgq-2wv4 · amended
npm 9router · Upgrade to 0.5.6 or later · <= 0.5.2 · CVE-2026-56678 · GHSA-6mwv-4mrm-5p3m · amended
npm 9router · Upgrade to 0.5.2 or later · <= 0.4.80 · CVE-2026-56676 · GHSA-cmhj-wh2f-9cgx · amended
npm 9router · Upgrade to 0.5.2 or later · <= 0.4.80 · CVE-2026-56675 · GHSA-x5c9-v98j-722r · amended
HISTORY_IGNORE Configuration VariableMaven org.jline:jline-reader · Upgrade to 4.3.1 or 3.30.15 by release line · >= 4.0.0, < 4.3.1; >= 3.0.0, < 3.30.15 · CVE-2026-77420 · GHSA-5q95-hrpc-m3w3 · amended
Maven io.moquette:moquette-broker · Upgrade to 0.18.1 or later · <= 0.18.0 · CVE-2026-85724 · GHSA-5f42-97gr-vfhq · amended
Packagist solspace/craft-freeform · Upgrade to 5.10.14 or later · >= 5.0.0, <= 5.10.13 · CVE-2026-73858 · GHSA-gxrg-x694-283w · amended
Packagist redaxo/source · Upgrade to 5.21.2 or later · <= 5.21.1 · CVE-2026-63000 · GHSA-m8r3-22v6-g877 · amended
Packagist redaxo/source · Upgrade to 5.21.2 or later · <= 5.21.1 · CVE-2026-63002 · GHSA-w998-qmw9-mf4m · amended
mediaIsInUse()Packagist redaxo/source · Upgrade to 5.21.2 or later · <= 5.21.1 · CVE-2026-63001 · GHSA-mf2p-wjp4-99pq · amended
PyPI zapros · Upgrade to 0.14.0 or later · < 0.14.0 · CVE-2026-61541 · GHSA-5vjj-2r48-q622 · amended
PyPI zapros · Upgrade to 0.14.0 or later · < 0.14.0 · CVE-2026-61652 · GHSA-6cp7-3m3c-5x5c · amended
PyPI plone-app-portlets · Upgrade to 7.0.2, 6.0.4 or 5.0.8 by release line · >= 7.0.0, <= 7.0.1; >= 6.0.0, <= 6.0.3; >= 5.0.0, <= 5.0.7 · CVE-2026-57149 · GHSA-rr49-f9g6-c9r5 · amended
crates.io rustpython-vm · Upgrade to 0.6.0 or later · >= 0.3.0, < 0.6.0
uncbv: archive extraction is vulnerable to path traversal (zip-slip)crates.io uncbv · Upgrade to 0.3.1 or later · >= 0.0.0-0, < 0.3.1
PyPI homeassistant · Upgrade to 2026.7.0 or later · < 2026.7.0 · CVE-2026-91130 · GHSA-wx4m-69m9-gx3m · amended
Go github.com/hatchet-dev/hatchet · Upgrade to 0.106.1 or later · < 0.106.1 · CVE-2026-88978 · GHSA-992g-9cr3-vm5x · amended
Go github.com/hatchet-dev/hatchet · Upgrade to 0.95.3 or later · < 0.95.3 · CVE-2026-84298 · GHSA-9q4h-f4x5-ffq8 · amended
PATCH /api/v3/store/carts/:id/associate (IDOR)RubyGems spree_api · Upgrade to 5.5.4 or 5.4.4 by release line · >= 5.4.0, < 5.4.4; >= 5.5.0, < 5.5.4 · CVE-2026-94462 · GHSA-4825-p4xm-pcf2 · amended
PyPI lightrag-hku · Upgrade to 1.5.5 or later · <= 1.5.4 · CVE-2026-86062 · GHSA-xpjq-3w4w-w5wr · amended
PyPI lightrag-hku · Upgrade to 1.5.5 or later · < 1.5.5 · CVE-2026-85740 · GHSA-vv3m-f8x4-7377 · amended
PyPI lightrag-hku · Upgrade to 1.5.5 or later · < 1.5.5 · CVE-2026-85734 · GHSA-frch-4w6v-q5xx · amended
PyPI lightrag-hku · Upgrade to 1.5.5 or later · <= 1.5.4 · CVE-2026-85725 · GHSA-c759-cx9p-mrwq · amended
PyPI lightrag-hku · Upgrade to 1.5.5 or later · <= 1.5.4 · CVE-2026-85709 · GHSA-hrmj-7rvj-4hg8 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.