Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
2051–2075 of 30,910 matching · newest first
npm n8n · Upgrade to 2.38.2, 2.37.7 or 1.123.76 by release line · < 1.123.76; >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7 · CVE-2026-86994 · GHSA-65xw-2v52-jhxc · amended
npm n8n · Upgrade to 2.38.2, 2.37.7 or 1.123.76 by release line · < 1.123.76; >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7 · CVE-2026-86083 · GHSA-6xcw-7xm6-48c6 · amended
npm n8n · Upgrade to 2.38.2 or 2.37.7 by release line · >= 2.38.0, < 2.38.2; < 2.37.7 · CVE-2026-86077 · GHSA-35jj-42hp-8gmq · amended
npm @angular/platform-server · Upgrade to 22.1.4, 21.2.22 or 20.3.30 by release line; some affected versions have no fix yet · >= 22.0.0, < 22.1.4; >= 21.0.0, < 21.2.22; >= 20.0.0, < 20.3.30; <= 19.2.25 · CVE-2026-88060 · GHSA-v3p8-whq6-r5jg · amended
npm @angular/platform-server · Upgrade to 22.1.4, 21.2.22 or 20.3.30 by release line; some affected versions have no fix yet · >= 22.0.0, < 22.1.4; >= 21.0.0, < 21.2.22; >= 20.0.0, < 20.3.30; <= 19.2.25 · CVE-2026-88056 · GHSA-f6mr-pjwc-34m4 · amended
HttpTransferCache Bypass When Using withRequestsMadeViaParentnpm @angular/common · Upgrade to 22.1.1, 21.2.20 or 20.3.28 by release line; some affected versions have no fix yet · >= 22.0.0, < 22.1.1; >= 21.0.0, < 21.2.20; >= 20.0.0, < 20.3.28; <= 19.2.25 · CVE-2026-88059 · GHSA-p297-fm68-3q8c · amended
npm @angular/compiler +1 · Upgrade all 2 to 22.1.0, 21.2.20 or 20.3.28 by release line; some affected versions have no fix yet · >= 22.0.0, < 22.1.0; >= 21.0.0, < 21.2.20; >= 20.0.0, < 20.3.28; <= 19.2.25 · CVE-2026-88057 · GHSA-hh8m-fm6v-7cvg · amended
Packagist pimcore/pimcore · Upgrade to 2026.1.6, 12.3.10 or 11.5.19 by release line · >= 2026.1.0, < 2026.1.6; >= 12.0.0-RC1, < 12.3.10; < 11.5.19 · CVE-2026-55416 · GHSA-23rh-xw42-fq82
npm n8n · Upgrade to 2.38.2, 2.37.7 or 1.123.76 by release line · < 1.123.76; >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7 · CVE-2026-86082 · GHSA-34ff-336r-5q23 · amended
npm n8n · Upgrade to 2.38.2, 2.37.7 or 1.123.76 by release line · < 1.123.76; >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7 · CVE-2026-86081 · GHSA-j535-v25q-vx3q · amended
npm n8n · Upgrade to 2.38.2 or 2.37.7 by release line · >= 2.38.0, < 2.38.2; < 2.37.7 · CVE-2026-86075 · GHSA-hh89-3r9w-qj3j · amended
npm n8n · Upgrade to 2.38.2, 2.37.7 or 1.123.76 by release line · < 1.123.76; >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7 · CVE-2026-86076 · GHSA-hw8v-xxg5-vvvx · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.7.0, <= 0.11.0 · CVE-2026-87017 · GHSA-pcvc-8vrv-8q6w · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.9.5, < 0.11.1 · CVE-2026-87994 · GHSA-fmqh-xp37-5hr8 · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.8.11, <= 0.11.0 · CVE-2026-87995 · GHSA-jmc6-2wr8-h3wj · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.9.6, < 0.11.1 · CVE-2026-87996 · GHSA-4v28-j6q3-5m4r · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.10.0, < 0.11.1 · CVE-2026-87997 · GHSA-3pf7-q2g3-wj28 · amended
PyPI open-webui · Upgrade to 0.11.1 or later · >= 0.10.0, < 0.11.1 · CVE-2026-87998 · GHSA-2724-6cpj-gf3v · amended
PyPI open-webui · Upgrade to 0.11.1 or later · < 0.11.1 · CVE-2026-87999 · GHSA-34r3-9m95-vq73 · amended
PyPI open-webui · Upgrade to 0.9.0 or later · >= 0.8.0, < 0.9.0 · CVE-2026-88005 · GHSA-4qg5-cxx4-g927 · amended
npm @eigenpal/docx-editor-react +1 · Upgrade all 2 to 1.8.3 or later · <= 1.8.2 · GHSA-x7m8-jrm8-hpvx · amended
Go github.com/googleapis/mcp-toolbox · Upgrade to 1.3.0 or later · < 1.3.0 · CVE-2026-11720 · GHSA-vwxw-jrg6-9jxv · amended
Go code.gitea.io/gitea · Upgrade to 1.26.0 or later · < 1.26.0 · CVE-2026-27780 · GHSA-vhq7-fwwh-7hjf · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-25782 · GHSA-qm72-8prh-g92x · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-27660 · GHSA-x92v-f5gc-r34v · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.