Langroid: Path traversal in the file tools allows read/write outside configured current directory
PyPI langroid · Upgrade to 0.64.0 or later · <= 0.63.0 · CVE-2026-50181 · GHSA-fg23-3346-88f5 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI langroid · Upgrade to 0.64.0 or later · <= 0.63.0 · CVE-2026-50181 · GHSA-fg23-3346-88f5 · amended
npm openclaw · Upgrade to 2026.5.6 or later · <= 2026.5.5 · CVE-2026-53828 · GHSA-p73f-w79w-jqr5 · amended
npm openclaw · Upgrade to 2026.5.12 or later · <= 2026.5.7 · CVE-2026-53836 · GHSA-j472-gf56-x589 · amended
npm openclaw · Upgrade to 2026.5.7 or later · < 2026.5.7 · CVE-2026-53839 · GHSA-77q5-rr5v-x43q · amended
npm openclaw · Upgrade to 2026.5.6 or later · <= 2026.5.5 · CVE-2026-53807 · GHSA-w5ww-7chg-mxcq · amended
npm openclaw · Upgrade to 2026.5.7 or later · <= 2026.5.6 · CVE-2026-53811 · GHSA-7hxm-f538-3xp6 · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53816 · GHSA-3c6j-hq33-3jv4 · amended
npm openclaw · Upgrade to 2026.5.12 or later · <= 2026.5.7 · CVE-2026-53806 · GHSA-vxx3-6hc9-7cc3 · amended
npm openclaw · Upgrade to 2026.4.25 or later · <= 2026.4.24 · CVE-2026-53813 · GHSA-v8cx-933x-r976 · amended
npm openclaw · Upgrade to 2026.5.27 or later · < 2026.5.27 · CVE-2026-53819 · GHSA-8wg3-5mcm-fjq8 · amended
npm openclaw · Upgrade to 2026.4.27 or later · <= 2026.4.26 · CVE-2026-53834 · GHSA-77pv-3w4q-vrj5 · amended
npm openclaw · Upgrade to 2026.5.4 or later · < 2026.5.4 · CVE-2026-32905 · GHSA-xr4f-mjxj-w6w5 · amended
npm openclaw · Upgrade to 2026.4.29 or later · < 2026.4.29 · CVE-2026-34507 · GHSA-w4v6-g3wm-w36c · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53821 · GHSA-qjpc-qf9m-xwmr · amended
npm openclaw · Upgrade to 2026.5.3 or later · <= 2026.5.3-1 · CVE-2026-53823 · GHSA-c29c-2q9c-pc86 · amended
npm openclaw · Upgrade to 2026.4.29 or later · <= 2026.4.27 · CVE-2026-53833 · GHSA-jvm4-4j77-39p6 · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35674 · GHSA-hw9r-h9mr-4jff · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53831 · GHSA-mhq8-78pj-5j79 · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35630 · GHSA-mgq6-vr84-7m2j · amended
npm openclaw · Upgrade to 2026.5.20 or later · < 2026.5.20 · CVE-2026-53814 · GHSA-6fvr-66p3-3qj4 · amended
npm openclaw · Upgrade to 2026.5.22 or later · < 2026.5.22 · CVE-2026-53817 · GHSA-chr9-m4q2-76hw · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53832 · GHSA-rggc-m335-3wvj · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53810 · GHSA-v6r2-jh58-xx6w · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53829 · GHSA-xww8-gqvh-92x9 · amended
npm openclaw · Upgrade to 2026.5.19 or later · <= 2026.5.19-beta.2 · CVE-2026-53815 · GHSA-q7q8-3mgw-q67r · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.