High, CVSS 8.8
Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication
npm line-desktop-mcp · Upgrade to 1.1.2 or later · <= 1.1.1 · CVE-2026-49357 · GHSA-4hf8-5mjm-rfgq · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 405 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 565 in the 30 days before.
- Critical
- 65 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 8.2
php-weasyprint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)
Packagist pontedilana/php-weasyprint · Upgrade to 2.5.1 or later · <= 2.5.0 · CVE-2026-49260 · GHSA-f5gc-qxf8-mh9g
- High, CVSS 8.1
phpMyFAQ has an incomplete fix for GHSA-xvp4-phqj-cjr3 — editUser() and updateUserRights() lack authorization guards
Packagist phpmyfaq/phpmyfaq +1 · Upgrade all 2 to 4.1.4 or later · <= 4.1.3 · GHSA-985r-q3qp-299h
- Critical, CVSS 10.0
mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind
PyPI mcp-pinot-server · Upgrade to 3.1.0 or later · <= 3.0.1 · CVE-2026-49257 · GHSA-73cv-556c-w3g6 · amended
- High, CVSS 8.1
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
PyPI mcp-memory-service · Upgrade to 10.65.3 or later · <= 10.65.1 · CVE-2026-49291 · GHSA-2r68-g678-7qr3 · amended
- Critical, CVSS 9.9
deepstream is vulnerable to prototype pollution
npm @deepstream/server · Upgrade to 10.0.5 or later · < 10.0.5 · CVE-2026-49252 · GHSA-9v98-6g37-x9g6 · amended
- High, CVSS 7.5
better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server
npm better-helperjs · Upgrade to 3.0.6 or later · <= 3.0.5 · GHSA-3p34-w4f6-5xh2 · amended
- High, CVSS 7.5
PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling
Packagist php-standard-library/php-standard-library +1 · Upgrade all 2 to 6.2.1 or 6.1.2 by release line · >= 6.1.0, < 6.1.2; >= 6.2.0, < 6.2.1 · CVE-2026-48979 · GHSA-pw9p-jvrm-f7rm
- High, CVSS 7.5
Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key
npm muhammara · Upgrade to 6.0.5 or later · < 6.0.5 · CVE-2026-125107 · GHSA-fhp4-pr5j-46m5 · amended
- High, CVSS 8.7
Flawfinder output manipulation via untrusted filenames and source text
PyPI flawfinder · Upgrade to 2.0.20 or later · < 2.0.20 · CVE-2026-48813 · GHSA-4c3c-r6p8-c863 · amended
- High, CVSS 7.5
python-socketio: Binary attachment accumulation can cause denial of service
PyPI python-socketio · Upgrade to 5.16.2 or later · <= 5.16.1 · CVE-2026-48804 · GHSA-5w7q-77mv-v69f · amended
- High, CVSS 7.5
python-engineio has unbound thread allocation that can cause denial of service
PyPI python-engineio · Upgrade to 4.13.2 or later · <= 4.13.1 · CVE-2026-48802 · GHSA-cgwc-pv48-fhj5 · amended
- High, CVSS 7.5
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
PyPI python-engineio · Upgrade to 4.13.2 or later · <= 4.13.1 · CVE-2026-48809 · GHSA-m9gh-vj53-gvh9 · amended
- High, CVSS 8.7
LinkifyIt#match scan loop has quadratic algorithmic complexity
npm linkify-it · Upgrade to 5.0.1 or later · <= 5.0.0 · CVE-2026-48801 · GHSA-22p9-wv53-3rq4 · amended
- Critical, CVSS 9.3
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
npm @mcptoolshop/backpropagate +1 · Upgrade all 2 to 1.2.0 or later · >= 1.1.0, < 1.2.0 · CVE-2026-48797 · GHSA-f65r-h4g3-3h9h · amended
- High, CVSS 7.5
Hysteria: http large header with sniff cause server DoS
Go github.com/apernet/hysteria · Upgrade to 2.9.2 or later · < 2.9.2 · GHSA-jqc5-2p7q-fqfc
- High, CVSS 7.5
Hysteria vulnerable to server crash when max_datagram_frame_size very small
Go github.com/apernet/hysteria · Upgrade to 2.9.2 or later · < 2.9.2 · GHSA-qh5x-rfwf-rvfv
- High, CVSS 7.4
Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
Go github.com/apernet/hysteria/core/v2 · Upgrade to 2.9.2 or later · >= 2.0.0, <= 2.9.1 · GHSA-vgrc-hq28-p3xp
- High, CVSS 8.2
Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
Go github.com/umputun/remark42 · Upgrade to 1.16.0 or later · >= 1.6.0, < 1.16.0 · CVE-2026-48788 · GHSA-4c8j-mgm4-qqvp
- Critical, CVSS 9.9
Incus has an arbitrary file write on its client due to trusted image hash
Go github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2026-48769 · GHSA-f6m5-xw2g-xc4x · amended
- Critical, CVSS 9.9
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
Go github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2026-48755 · GHSA-v6mj-8pf4-hhw4 · amended
- Critical, CVSS 9.9
Incus has an arbitrary file write via path traversal in S3 multipart upload
Go github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.1.0 or later · < 7.1.0 · CVE-2026-48753 · GHSA-ccjc-4qc3-jxqc
- Critical, CVSS 9.9
Incus has arbitrary file read+write on host via templates/ symlink in malicious image
Go github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2026-48752 · GHSA-vxp5-584q-c479 · amended
- Critical, CVSS 9.9
Incus has a restricted project bypass leading to arbitrary command execution
Go github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2026-48751 · GHSA-48q5-w887-33wv · amended
- Critical, CVSS 9.9
Incus has an arbitrary file write on host via
exec-outputsymlink in crafted imageGo github.com/lxc/incus/v7/cmd/incusd · Upgrade to 7.2.0 or later · < 7.2.0 · CVE-2026-48750 · GHSA-73hr-m85f-64v9 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.