Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 119 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

1826–1850 of 14,167 Critical + High advisories · newest first

Show all severities

Exploited

Critical, CVSS 9.320 Jul 2026
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
PyPI lightrag-hku · Upgrade to 1.5.4 or later · <= 1.5.3 · CVE-2026-61736 · GHSA-6x6h-qqr7-855w · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Mistune plugins/formatting: quadratic-time parsing on long runs of ~~x~~, ==x==, and ^^x^^ markers (strikethrough / mark / insert)
PyPI mistune · Upgrade to 3.3.0 or later · < 3.3.0 · CVE-2026-59922 · GHSA-c8j7-8cv4-2xmq · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Mistune inline_parser: quadratic-time parsing on long runs of **x** and ***x*** emphasis pairs
PyPI mistune · Upgrade to 3.3.0 or later · < 3.3.0 · CVE-2026-59925 · GHSA-4j32-57v6-6g45 · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions
PyPI mistune · Upgrade to 3.3.0 or later · < 3.3.0 · CVE-2026-59928 · GHSA-ffq3-xpv3-j92q · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
js-yaml: YAML merge-key chains can force quadratic CPU consumption
npm js-yaml · Upgrade to 4.3.0 or 3.15.0 by release line · >= 3.0.0, < 3.15.0; >= 4.0.0, < 4.3.0 · CVE-2026-59869 · GHSA-52cp-r559-cp3m · amended
20 Jul 2026Evidence →
High, CVSS 8.220 Jul 2026
File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.63.16 or later · <= 2.63.15 · CVE-2026-55667 · GHSA-fmm7-x4gx-8jhr
20 Jul 2026Evidence →
High, CVSS 7.620 Jul 2026
Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim
Go github.com/cloudreve/Cloudreve/v4 · Upgrade to 4.0.0-20260606015557-ed20843dc3df (pre-release) or later · >= 4.0.0-20260114075425-bc6845bd742c, < 4.0.0-20260606015557-ed20843dc3df · CVE-2026-54560 · GHSA-vgj4-345g-jcf8
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Pillow GdImageFile._open(): image dimensions accepted without _decompression_bomb_check()
PyPI pillow · Upgrade to 12.3.0 or later · < 12.3.0 · CVE-2026-55380 · GHSA-phj9-mv4w-65pm · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Pillow BdfFontFile: Image.new() called without _decompression_bomb_check() — bomb protection bypass via font loading
PyPI pillow · Upgrade to 12.3.0 or later · < 12.3.0 · CVE-2026-55379 · GHSA-45hq-cxwh-f6vc · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Pillow: FontFile.compile(): Image.new() called without _decompression_bomb_check()
PyPI pillow · Upgrade to 12.3.0 or later · < 12.3.0 · CVE-2026-54060 · GHSA-5x94-69rx-g8h2 · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Pillow PcfFontFile._load_bitmaps(): Image.frombytes() called without _decompression_bomb_check() — bomb protection bypass via PCF font loading
PyPI pillow · Upgrade to 12.3.0 or later · < 12.3.0 · CVE-2026-54059 · GHSA-8v84-f9pq-wr9x · amended
20 Jul 2026Evidence →
High, CVSS 8.320 Jul 2026
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
PyPI pillow · Upgrade to 12.3.0 or later · < 12.3.0 · CVE-2026-54058 · GHSA-62p4-gmf7-7g93 · amended
20 Jul 2026Evidence →
High, CVSS 7.120 Jul 2026
@better-auth/sso: SSO provider may allow registration for any org member without a checking their role
npm @better-auth/sso · Upgrade to 1.6.11 or later · >= 1.2.10, < 1.6.11 · CVE-2026-53515 · GHSA-gv74-j8m3-fg5f · amended
20 Jul 2026Evidence →
High, CVSS 7.720 Jul 2026
brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
npm brace-expansion · Upgrade to 5.0.7, 2.1.2 or 1.1.16 by release line · >= 3.0.0, < 5.0.7; < 1.1.16; >= 2.0.0, < 2.1.2 · CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp · amended
20 Jul 2026Evidence →
High, CVSS 7.020 Jul 2026
Composer: Arbitrary file write outside vendor via malicious transitive package name
Packagist composer/composer · Upgrade to 2.10.2 or 2.2.29 by release line · >= 2.3.0, < 2.10.2; >= 1.0.0, < 2.2.29 · CVE-2026-59948 · GHSA-499r-g7pc-vmp9
20 Jul 2026Evidence →
High, CVSS 7.120 Jul 2026
vLLM denial of service via prompt embeds on M-RoPE models
PyPI vllm · Upgrade to 0.24.0 or later · >= 0.12.0, < 0.24.0 · CVE-2026-55514 · GHSA-33cg-gxv8-3p8g · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Tornado: Quadratic DoS via Crafted Multipart Parameters
PyPI tornado · Upgrade to 6.5.3 or later · < 6.5.3 · CVE-2025-67726 · GHSA-jhmp-mqwm-3gq8 · amended
20 Jul 2026Evidence →
High, CVSS 7.520 Jul 2026
Tornado: Quadratic DoS via Repeated Header Coalescing
PyPI tornado · Upgrade to 6.5.3 or later · < 6.5.3 · CVE-2025-67725 · GHSA-c98p-7wgm-6p64 · amended
20 Jul 2026Evidence →
High, CVSS 7.819 Jul 2026
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
PyPI keras · Upgrade to 3.15.0 or 3.12.3 by release line · < 3.12.3; >= 3.13.0, < 3.15.0 · CVE-2026-12484 · GHSA-v2w2-w228-c444 · amended
19 Jul 2026Evidence →
High, CVSS 8.718 Jul 2026
SurrealDB: Full Table Permissions by Default
crates.io surrealdb +1 · Upgrade all 2 to 1.0.1 or later · < 1.0.1 · CVE-2023-54366 · GHSA-x5fr-7hhj-34j3 · amended
18 Jul 2026Evidence →
High, CVSS 8.217 Jul 2026
Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies
Go github.com/zalando/skipper · Upgrade to 0.27.26 or later · < 0.27.26 · CVE-2026-65838 · GHSA-8qqm-fp2q-v734
17 Jul 2026Evidence →
High, CVSS 7.617 Jul 2026
CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard
npm @tak-ps/cloudtak · Upgrade to 13.10.0 or later · < 13.10.0 · CVE-2026-55177 · GHSA-r95q-fp26-h3hc · amended
17 Jul 2026Evidence →
High, CVSS 7.517 Jul 2026
Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
PyPI flask-reuploaded · Upgrade to 1.6.0 or later · <= 1.5.0 · CVE-2026-54567 · GHSA-937x-gpqr-72gg · amended
17 Jul 2026Evidence →
High, CVSS 8.717 Jul 2026
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
npm @prompty/core · Upgrade to 2.0.0-beta.3 (pre-release) or later · >= 2.0.0-alpha.1, < 2.0.0-beta.3 · CVE-2026-53597 · GHSA-c4gh-rv8h-q9vw · amended
17 Jul 2026Evidence →
High, CVSS 7.517 Jul 2026
Prompty: Arbitrary file read via file reference expansion
PyPI prompty · Upgrade to 2.0.0b2 (pre-release) or later · <= 2.0.0b1 · +3 more packages · CVE-2026-53598 · GHSA-wxhm-2mq7-7697 · amended
17 Jul 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

Mistune plugins/formatting: quadratic-time parsing on long runs of `x`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

Mistune inline_parser: quadratic-time parsing on long runs of `x` and `x` emphasis pairs

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

js-yaml: YAML merge-key chains can force quadratic CPU consumption

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

@better-auth/sso: SSO provider may allow registration for any org member without a checking their role

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Composer: Arbitrary file write outside vendor via malicious transitive package name

vLLM denial of service via prompt embeds on M-RoPE models

Tornado: Quadratic DoS via Crafted Multipart Parameters

Tornado: Quadratic DoS via Repeated Header Coalescing

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

SurrealDB: Full Table Permissions by Default

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

Prompty: Arbitrary file read via file reference expansion

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence