High, CVSS 7.4
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
PyPI authlib · Upgrade to 1.9.0 or later · >= 1.3.1, < 1.9.0 · CVE-2026-114615 · GHSA-7vr2-2fgp-9w7p · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.7
PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)
Packagist phpoffice/phpspreadsheet · Upgrade to 5.10.0, 3.10.8, 2.4.8 or 2 more by release line · >= 4.0.0, < 5.10.0; >= 3.3.0, < 3.10.8; >= 2.2.0, < 2.4.8; >= 2.0.0, < 2.1.19; < 1.30.7 · CVE-2026-108359 · GHSA-j2w7-387v-m2rq · amended
- High, CVSS 8.8
PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service
Packagist phpoffice/phpspreadsheet · Upgrade to 5.10.0, 3.10.8, 2.4.8 or 2 more by release line · >= 4.0.0, < 5.10.0; >= 3.3.0, < 3.10.8; >= 2.2.0, < 2.4.8; >= 2.0.0, < 2.1.19; < 1.30.7 · CVE-2026-108358 · GHSA-3x94-m842-937c · amended
- High, CVSS 8.8
PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service
Packagist phpoffice/phpspreadsheet · Upgrade to 5.10.0 or 3.10.8 by release line · >= 4.0.0, < 5.10.0; >= 3.3.0, < 3.10.8 · CVE-2026-108357 · GHSA-rxj4-h86g-25gc · amended
- High, CVSS 8.7
compress zstd: Panic on two-block frames
Go github.com/klauspost/compress +1 · Upgrade all 2 to 1.20.2 or later · < 1.20.2 · CVE-2026-116591 · GHSA-fpmh-frq8-7rj8 · amended
- High, CVSS 7.5
dnspython dns.name.from_wire_parser() excessive CPU use
PyPI dnspython · Upgrade to 2.9.0 or later · < 2.9.0 · CVE-2026-114605 · GHSA-45c3-73f7-pv4m · amended
- High, CVSS 8.7
Datadog dd-trace-py: ReDoS in URL query string obfuscation
PyPI ddtrace · Upgrade to 4.15.6 or 3.19.9 by release line · >= 1.5.0, < 3.19.9; >= 4.0.0, < 4.15.6 · CVE-2026-116588 · GHSA-3633-r77q-h3v3 · amended
- High, CVSS 8.2
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
PyPI ddtrace · Upgrade to 4.15.5 or later · >= 3.13.0, < 4.15.5 · CVE-2026-116589 · GHSA-p3m5-h5v9-vqj6 · amended
- High, CVSS 8.2
MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element
PyPI pymongo · Upgrade to 4.18.3 or later · >= 3.9.0, < 4.18.3 · CVE-2026-106435 · GHSA-98qm-wvgf-w4cf · amended
- High, CVSS 8.1
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
PyPI vllm · Upgrade to 0.31.0 or later · >= 0.7.3, < 0.31.0 · CVE-2026-114053 · GHSA-h3rc-6mm3-gc2m · amended
- High, CVSS 7.1
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
PyPI strands-agents · Upgrade to 1.48.0 or later · < 1.48.0 · GHSA-3w55-933p-8pv5 · amended
- High, CVSS 7.5
snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.9 or later · < 1.1.10.9 · CVE-2026-93451 · GHSA-gwq9-9ffj-mvrv · amended
- High, CVSS 7.5
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Maven org.xerial.snappy:snappy-java · Upgrade to 1.1.10.9 or later · < 1.1.10.9 · CVE-2026-108106 · GHSA-q233-g92q-qxp6 · amended
- High, CVSS 7.1
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
PyPI flexible-graphrag · Upgrade to 0.8.2 or later · >= 0.6.0, < 0.8.2 · CVE-2026-114510 · GHSA-vqrg-773h-4wxc · amended
- High, CVSS 8.1
LiteLLM: internal_user_viewer arbitrary local file read via
vertex_ai_credentialsPyPI litellm · Upgrade to 1.95.0 or later · < 1.95.0 · GHSA-g5ff-637f-6q2m · amended
- High, CVSS 7.4
better-auth: OAuth Proxy lets an attacker sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.5.0-beta.12, < 1.7.7 · CVE-2026-110864 · GHSA-r4xp-prcw-77qf · amended
- Critical, CVSS 9.1
better-auth: OAuth state can be used as a Magic Link to sign in as another user
npm better-auth · Upgrade to 1.7.7 or later · >= 1.4.0-beta.18, < 1.7.7 · CVE-2026-114607 · GHSA-965c-763c-88jm · amended
- High, CVSS 7.1
GitPython: arbitrary file read via attacker-controlled branch name in
Head.checkout()(incomplete fix of CVE-2026-78679)PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110859 · GHSA-23mf-xhv8-69c2 · amended
- High, CVSS 8.1
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution
PyPI gitpython · Upgrade to 3.2.0 or later · >= 3.1.30, < 3.2.0 · CVE-2026-110858 · GHSA-f9j4-qggq-h239 · amended
- High, CVSS 7.5
GitPython command wrappers omit unsafe protocol and option checks
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110857 · GHSA-w8jc-g24h-crhw · amended
- High, CVSS 8.7
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
PyPI gitpython · Upgrade to 3.2.0 or later · < 3.2.0 · CVE-2026-110856 · GHSA-m64x-33q8-m5h7 · amended
- High, CVSS 7.7
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
PyPI litellm · Upgrade to 1.104.0rc2 (pre-release), 1.103.1, 1.102.2 or 2 more by release line · >= 1.91.0, < 1.100.4; >= 1.101.0, < 1.101.3; >= 1.102.0, < 1.102.2; >= 1.103.0, < 1.103.1; >= 1.104.0rc1, < 1.104.0rc2 · CVE-2026-114612 · GHSA-7hp6-4w63-5g45 · amended
- High, CVSS 7.5
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
PyPI msgpack · Upgrade to 1.2.3 or later · < 1.2.3 · CVE-2026-114613 · GHSA-j586-36cw-2gc2 · amended
- High, CVSS 8.6
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment
PyPI nltk · Upgrade to 3.10.4 or later · < 3.10.4 · CVE-2026-109956 · GHSA-j456-xh4h-cpf2 · amended
- Critical, CVSS 9.1
Authlib: empty signatures validation in JWS JSON deserialization
PyPI authlib · Upgrade to 1.9.0 or later · < 1.9.0 · CVE-2026-96760 · GHSA-6v38-4h7w-rj9h · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.