Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54067 · GHSA-mvjr-vv3c-w4qv
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260628153353-2d5d72223df4 (pre-release) or later · < 0.0.0-20260628153353-2d5d72223df4 · CVE-2026-54066 · GHSA-p4m3-mgmm-c664
npm adm-zip · Upgrade to 0.6.0 or later · < 0.6.0 · CVE-2026-39244 · GHSA-xcpc-8h2w-3j85 · amended
npm @libp2p/gossipsub · Upgrade to 16.0.0 or later · < 16.0.0 · CVE-2026-49866 · GHSA-cwc9-cp4j-mcvv · amended
PyPI mistune · Upgrade to 3.3.0 or later · < 3.3.0 · CVE-2026-49851 · GHSA-qcq2-496w-v96p · amended
Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52778 · GHSA-px5m-h76g-p7p8
Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52777 · GHSA-9369-69wj-7m2f
Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52775 · GHSA-4pf7-cc4r-g63h
ApiController::deletePage)Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · >= 4.2.0, < 4.6.6 · CVE-2026-52771 · GHSA-8f2v-2qhj-gfwg
query/queries filtersPackagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52770 · GHSA-qg78-vmvc-fhjw
Signature.keyIdPackagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · >= 4.6.2, < 4.6.6 · CVE-2026-52769 · GHSA-vw42-752g-5mrp
!openssl_verify(...) accepting int(-1)Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · >= 4.6.2, < 4.6.6 · CVE-2026-52767 · GHSA-mv28-wj57-f57g
{{erasespamedcomments}} actionPackagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52766 · GHSA-6x7x-gcmf-7r8x
Packagist yeswiki/yeswiki · Upgrade to 4.6.6 or later · < 4.6.6 · CVE-2026-52762 · GHSA-65p8-9433-jpcp
Packagist wnx/laravel-backup-restore · Upgrade to 1.9.4 or later · <= 1.9.3 · CVE-2026-53932 · GHSA-w9mx-xmg4-gc4r
Packagist craftcms/cms · Upgrade to 5.9.14 or later · >= 5.5.0, <= 5.9.13 · CVE-2026-56382 · GHSA-86vw-x4ww-x467
CssParser::Parser#read_remote_fileRubyGems css_parser · Upgrade to 3.0.0 or later · < 3.0.0 · CVE-2026-53727 · GHSA-9pmc-p236-855h
Maven ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli +7 · Upgrade all 8 to 6.9.9 or 6.9.4.2 by release line · >= 6.9.5, < 6.9.9; < 6.9.4.2 · CVE-2026-49485 · GHSA-7cmj-v6x8-frvv
Go github.com/enchant97/note-mark/backend · Upgrade to 0.0.0-20260601210719-67b7de04308a (pre-release) or later · < 0.0.0-20260601210719-67b7de04308a · CVE-2026-50553 · GHSA-rqrh-8wpv-x7hh
PyPI soupsieve · Upgrade to 2.8.4 or later · <= 2.8.3 · CVE-2026-49477 · GHSA-836r-79rf-4m37 · amended
PyPI soupsieve · Upgrade to 2.8.4 or later · <= 2.8.3 · CVE-2026-49476 · GHSA-2wc2-fm75-p42x · amended
PyPI phantom-audio · Upgrade to 1.3.1 or later · <= 1.3.0 · GHSA-52vm-mxx8-f227 · amended
Maven io.micronaut:micronaut-http-client · Upgrade to 5.0.1, 4.10.24 or 3.10.7 by release line · < 3.10.7; >= 4.0.0-M1, < 4.10.24; >= 5.0.0-M1, < 5.0.1 · GHSA-387m-935m-c4vw
PyPI pycti · Upgrade to 7.260326.0 or later · < 7.260326.0 · CVE-2026-35210 · GHSA-36fr-4m54-94mj
PyPI serena-agent · Upgrade to 1.5.2 or later · < 1.5.2 · CVE-2026-49471 · GHSA-37h2-6p4f-mp3q · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.