Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
PyPI nautobot · Upgrade to 3.1.8 or later · >= 3.0.0, < 3.1.8 · CVE-2026-83805 · GHSA-q4c5-2j6f-r476 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1751–1775 of 30,910 matching · newest first
PyPI nautobot · Upgrade to 3.1.8 or later · >= 3.0.0, < 3.1.8 · CVE-2026-83805 · GHSA-q4c5-2j6f-r476 · amended
PyPI nautobot · Upgrade to 3.1.8 or 2.4.37 by release line · < 2.4.37; >= 3.0.0, < 3.1.8 · CVE-2026-83801 · GHSA-56v6-2fhr-wxgq · amended
PyPI autobahn +1 · Upgrade all 2 to 26.7.1 or later · < 26.7.1 · CVE-2026-77528 · GHSA-hxp9-w8x3-p566 · amended
Go github.com/tinyauthapp/tinyauth +1 · Upgrade all 2 to 1.0.1-0.20260715123057-dade1e2c8f27 (pre-release) or later · < 1.0.1-0.20260715123057-dade1e2c8f27 · CVE-2026-77561 · GHSA-9xhm-w3wj-xhqh · amended
Go github.com/tinyauthapp/tinyauth · Upgrade to 1.0.1-0.20260720133915-80bc87188ec3 (pre-release) or later · < 1.0.1-0.20260720133915-80bc87188ec3 · CVE-2026-77560 · GHSA-328g-jx67-v94g · amended
Go github.com/tinyauthapp/tinyauth · Upgrade to 1.0.1-0.20260714134959-c22925c2fba9 (pre-release) or later · < 1.0.1-0.20260714134959-c22925c2fba9 · CVE-2026-77582 · GHSA-456h-ww26-f758 · amended
Go github.com/kubeedge/kubeedge · Upgrade to 1.23.1, 1.22.2 or 1.21.2 by release line · >= 1.12.0, < 1.21.2; >= 1.22.0, < 1.22.2; >= 1.23.0, < 1.23.1 · CVE-2026-62371 · GHSA-5jpj-293f-rhvj · amended
Go github.com/kubeedge/kubeedge · Upgrade to 1.23.1, 1.22.2 or 1.21.2 by release line · >= 1.0.0, < 1.21.2; >= 1.22.0, < 1.22.2; >= 1.23.0, < 1.23.1 · CVE-2026-62370 · GHSA-gfw4-49f9-cp25 · amended
Go github.com/kubeedge/kubeedge · Upgrade to 1.23.1, 1.22.2 or 1.21.2 by release line · >= 1.16.0, < 1.21.2; >= 1.22.0, < 1.22.2; >= 1.23.0, < 1.23.1 · CVE-2026-62369 · GHSA-9vm9-pqxx-x83v · amended
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260713133043-f58d848c139e (pre-release); some affected versions have no fix yet · < 0.0.0-20260713133043-f58d848c139e; >= 0.1.0, <= 1.1.5 · CVE-2026-63131 · GHSA-xp3c-3jw3-4vcr · amended
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260713141742-763625a20721 (pre-release); some affected versions have no fix yet · < 0.0.0-20260713141742-763625a20721; >= 0.1.0, <= 1.1.5 · CVE-2026-63132 · GHSA-34fc-gh42-pj53 · amended
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260710001938-2d4ebafec5c5 (pre-release); some affected versions have no fix yet · < 0.0.0-20260710001938-2d4ebafec5c5; >= 0.1.0, <= 1.1.5 · CVE-2026-71543 · GHSA-59w7-v8rr-pr4p · amended
Go github.com/openbao/openbao · Upgrade to 0.0.0-20260714163218-90272575e5f5 (pre-release); some affected versions have no fix yet · < 0.0.0-20260714163218-90272575e5f5; >= 0.1.0, <= 1.1.5 · CVE-2026-77285 · GHSA-444v-8vxr-p36h · amended
Go github.com/kubeedge/kubeedge · Upgrade to 1.23.1, 1.22.2 or 1.21.2 by release line · >= 1.21.0, < 1.21.2; >= 1.22.0, < 1.22.2; >= 1.23.0, < 1.23.1 · CVE-2026-62182 · GHSA-m3c6-2p7h-cfr3 · amended
npm unleash-server · Upgrade to 8.0.3 or later · < 8.0.3 · CVE-2026-77426 · GHSA-72h8-wp98-7hch · amended
npm unleash-server · Upgrade to 8.0.3 or later · < 8.0.3 · CVE-2026-77425 · GHSA-5ffh-6f9q-5hhr · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77258 · GHSA-93xw-j965-9mx3 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77250 · GHSA-g5xv-mhgm-v5f6 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77249 · GHSA-v9m3-wfh8-5646 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77247 · GHSA-f6pj-qv47-g96w · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77244 · GHSA-wrhw-j3f9-8vc6 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77274 · GHSA-hgcf-4mq8-5266 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77271 · GHSA-6vmq-24h2-pj7j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77267 · GHSA-5wf4-jqxh-8gm3 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77272 · GHSA-g2r2-3j32-j27x · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.