Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.apache.httpcomponents.core5:httpcore5-h2 · Upgrade to 5.5-beta2 (pre-release) or 5.4.3 by release line · < 5.4.3; >= 5.5-alpha1, < 5.5-beta2 · CVE-2026-54428 · GHSA-v3jc-474w-2wm6
Maven org.apache.httpcomponents.core5:httpcore5 · Upgrade to 5.5-beta2 (pre-release) or 5.4.3 by release line · < 5.4.3; >= 5.5-alpha1, < 5.5-beta2 · CVE-2026-54399 · GHSA-hf6x-8p5f-cgmf
npm wetty · Upgrade to 3.0.4 or later · < 3.0.4 · CVE-2026-49864 · GHSA-p26j-h7wj-r568 · amended
npm auth-fetch-mcp · Upgrade to 3.0.2 or later · <= 3.0.1 · CVE-2026-49857 · GHSA-pvrj-8cg3-j5f8 · amended
Maven org.geonetwork-opensource:geonetwork · Upgrade to 4.4.11 or 4.2.16 by release line; some affected versions have no fix yet · >= 4.0.0-alpha.1, <= 4.0.6-0; >= 4.2.0, <= 4.2.15; >= 4.4.0, <= 4.4.10-0 · CVE-2026-46487 · GHSA-582q-v28r-7cxr
Maven org.geonetwork-opensource:geonetwork · Upgrade to 4.4.10 or 4.2.15 by release line; some affected versions have no fix yet · >= 3.0.0, <= 3.12.12; >= 4.0.0-alpha.1, <= 4.0.6; >= 4.2.0, <= 4.2.14; >= 4.4.0, <= 4.4.9 · CVE-2026-39379 · GHSA-2v4m-fw6c-g78f
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46295 · GHSA-f8h2-c479-vqxf · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46294 · GHSA-mjmg-352j-f456 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46293 · GHSA-7h6r-6p76-68c9 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46291 · GHSA-jg3h-pv7c-4f9c · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46290 · GHSA-5rff-8f7c-8jmw · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46289 · GHSA-rj4c-r689-cm87 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-46280 · GHSA-8qxc-57hf-hc9j · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-44451 · GHSA-jr2x-6qf6-q5mc · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-43607 · GHSA-vjg6-gm8m-v5g6 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-43467 · GHSA-f29h-2h58-48r7 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-42885 · GHSA-mw5r-wq2m-397c · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-41793 · GHSA-p594-7xw4-g76p · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2022-37331 · GHSA-vr3p-gg26-45v9 · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2025-10997 · GHSA-8wq6-qh76-wpv9 · amended
PyPI langflow · Upgrade to 1.10.1rc0 (pre-release) or later · >= 1.0.0, < 1.10.1rc0 · CVE-2026-7873 · GHSA-v798-mcc6-2m3m · amended
PyPI openbabel · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2025-10996 · GHSA-j35x-w4gj-pf7w · amended
Go github.com/sigstore/fulcio · Upgrade to 1.8.6 or later · <= 1.8.5 · CVE-2026-49478 · GHSA-f5mr-q85p-6hh6
npm @adonisjs/bodyparser · Upgrade to 11.0.3 or 10.1.5 by release line · >= 10.1.3, <= 10.1.4; >= 11.0.0-next.9, <= 11.0.1 · CVE-2026-48795 · GHSA-qcm7-3vpr-hj5h · amended
PyPI deeptutor · Upgrade to 1.4.10 or later · < 1.4.10 · CVE-2026-58168 · GHSA-jg88-rvpc-qvxj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.