Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 941 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,060 in the 30 days before.
Critical: 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

2176–2200 of 30,910 matching · newest first

ExploitedClear filters

Medium, CVSS 5.88 Sep 2026
SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260726004013-64c26e74bb82 (pre-release) or later · < 0.0.0-20260726004013-64c26e74bb82 · CVE-2026-72791 · GHSA-57v5-wqx3-cgj4 · amended
8 Sep 2026Evidence →
High, CVSS 8.88 Sep 2026
NLTK: Corpus Reader Sandbox Bypass
PyPI nltk · Upgrade to 3.10.3 or later · <= 3.10.2 · CVE-2026-79674 · GHSA-3gq4-3j92-5w49 · amended
8 Sep 2026Evidence →
High, CVSS 8.28 Sep 2026
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
PyPI nltk · Upgrade to 3.10.3 or later · <= 3.10.2 · CVE-2026-79676 · GHSA-p4rw-rvv2-7xwr · amended
8 Sep 2026Evidence →
Critical, CVSS 9.38 Sep 2026
NLTK: Allowlisted pickle loaders still permit code execution in current source
PyPI nltk · Upgrade to 3.10.3 or later · <= 3.10.2 · CVE-2026-79657 · GHSA-x99w-6fgc-pmfw · amended
8 Sep 2026Evidence →
High, CVSS 8.78 Sep 2026
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
PyPI nltk · Upgrade to 3.10.3 or later · <= 3.10.2 · CVE-2026-78681 · GHSA-97qj-x29f-37w7 · amended
8 Sep 2026Evidence →
High, CVSS 8.78 Sep 2026
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured
PyPI nltk · Upgrade to 3.10.3 or later · <= 3.10.2 · CVE-2026-78682 · GHSA-6ww7-3frv-cqxh · amended
8 Sep 2026Evidence →
Critical, CVSS 9.48 Sep 2026
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
PyPI nltk · Upgrade to 3.10.0 or later · <= 3.9.4 · CVE-2026-78683 · GHSA-rhp5-r9x4-f5g2 · amended
8 Sep 2026Evidence →
Medium, CVSS 6.88 Sep 2026
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely
PyPI nltk · Upgrade to 3.10.2 or later · >= 3.10.0, < 3.10.2 · CVE-2026-62383 · GHSA-3hhw-38pf-pxj6 · amended
8 Sep 2026Evidence →
High, CVSS 8.78 Sep 2026
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
PyPI nltk · Upgrade to 3.10.2 or later · >= 3.10.0, < 3.10.2 · CVE-2026-62384 · GHSA-f833-7jw8-xwrv · amended
8 Sep 2026Evidence →
High, CVSS 8.28 Sep 2026
NLTK: Stable FrameNet and NKJP readers parse outside-root XML
PyPI nltk · Upgrade to 3.10.0 or later · <= 3.9.4 · CVE-2026-62385 · GHSA-568f-pv23-39p4 · amended
8 Sep 2026Evidence →
Medium, CVSS 5.38 Sep 2026
NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
PyPI nltk · Upgrade to 3.9.3 or later · < 3.9.3 · CVE-2026-12259 · GHSA-5wp5-5229-5g6q · amended
8 Sep 2026Evidence →
High, CVSS 8.78 Sep 2026
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read
PyPI nltk · Upgrade to 3.10.0 or later · <= 3.9.4 · CVE-2026-63312 · GHSA-x5ph-mj9p-rfr8 · amended
8 Sep 2026Evidence →
High, CVSS 7.18 Sep 2026
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol
PyPI nltk · Upgrade to 3.10.0 or later · <= 3.9.3 · CVE-2026-65915 · GHSA-72r2-7mfr-5xr9 · amended
8 Sep 2026Evidence →
High, CVSS 8.68 Sep 2026
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
PyPI nltk · Upgrade to 3.9.4 or later · <= 3.9.3 · CVE-2026-70626 · GHSA-r6gq-whwq-mvg9 · amended
8 Sep 2026Evidence →
Unrated8 Sep 2026
WaveFormat::parse reads past the end of a &WAVEFORMATEX
crates.io wasapi · Upgrade to 0.25.0 or later · >= 0.20.0, < 0.25.0
8 Sep 2026Evidence →
Critical, CVSS 9.48 Sep 2026
@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
npm @sap/cds-mtxs · Upgrade to 4.0.3, 3.9.7, 2.7.7 or 1.18.4 by release line · >= 4.0.1, < 4.0.3; >= 3.0.1, < 3.9.7; >= 2.0.2, < 2.7.7; < 1.18.4 · CVE-2026-76969 · GHSA-955m-rr6m-2f9v · amended
8 Sep 2026Evidence →
Unrated7 Sep 2026
greentic-setup 1.3.1-dev.34027618345 was removed from crates.io due to containing malicious code
crates.io greentic-setup · Upgrade to 1.3.1-dev.34027618345.0 (pre-release) or later · >= 1.3.1-dev.34027618345, < 1.3.1-dev.34027618345.0
7 Sep 2026Evidence →
Unrated7 Sep 2026
greentic-setup-dev 1.3.34027618345 was removed from crates.io due to containing malicious code
crates.io greentic-setup-dev · Upgrade to 1.3.34027618346-0 (pre-release) or later · >= 1.3.34027618345, < 1.3.34027618346-0
7 Sep 2026Evidence →
High, CVSS 7.54 Sep 2026
TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
npm @typespec/spector · Upgrade to 0.1.0-alpha.27 (pre-release) or later · <= 0.1.0-alpha.26 · GHSA-7q9c-hpx7-9cwm · amended
4 Sep 2026Evidence →
Unrated4 Sep 2026
OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation in github.com/openchoreo/openchoreo
Go github.com/openchoreo/openchoreo · Upgrade to 1.2.0, 1.1.3 or 1.0.3 by release line · < 1.0.3; >= 1.1.0, < 1.1.3; >= 1.2.0-rc.1, < 1.2.0 · CVE-2026-73842 · GHSA-rh53-xvx2-j327 · amended
4 Sep 2026Evidence →
Medium, CVSS 6.34 Sep 2026
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
PyPI vllm · Upgrade to 0.26.0 or later · >= 0.21.0, < 0.26.0 · CVE-2026-73557 · GHSA-pr7f-p5mw-fc87
4 Sep 2026Evidence →
Medium, CVSS 5.34 Sep 2026
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
PyPI vllm · Upgrade to 0.26.0 or later · < 0.26.0 · CVE-2026-73556 · GHSA-48jh-3gj7-fg8v
4 Sep 2026Evidence →
Medium, CVSS 5.34 Sep 2026
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
PyPI vllm · Upgrade to 0.26.0 or later · < 0.26.0 · CVE-2026-73555 · GHSA-hwrm-c4cx-rf4j
4 Sep 2026Evidence →
Medium, CVSS 4.34 Sep 2026
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
PyPI vllm · Upgrade to 0.26.0 or later · < 0.26.0 · CVE-2026-71486 · GHSA-8737-qx52-hjff
4 Sep 2026Evidence →
Medium, CVSS 5.84 Sep 2026
SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260726002639-4515fa257cfa (pre-release) or later · < 0.0.0-20260726002639-4515fa257cfa · CVE-2026-72792 · GHSA-mp7r-57w4-5qm3 · amended
4 Sep 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm11 Nov 2026
Malicious code in chalks-log (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in prettlog (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in @solana-trade/core (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in termchalk (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm11 Nov 2026
Malicious code in kbmathlessons (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews

NLTK: Corpus Reader Sandbox Bypass

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

NLTK: Allowlisted pickle loaders still permit code execution in current source

NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses

NLTK: pathsec SSRF protection can be bypassed when a proxy is configured

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)

NLTK: Stable FrameNet and NKJP readers parse outside-root XML

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

`WaveFormat::parse` reads past the end of a `&WAVEFORMATEX`

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

`greentic-setup` 1.3.1-dev.34027618345 was removed from crates.io due to containing malicious code

`greentic-setup-dev` 1.3.34027618345 was removed from crates.io due to containing malicious code

TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation in github.com/openchoreo/openchoreo

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence