Mail: Email address spoofing via malformed RFC 2047 encoded-words
RubyGems mail · Upgrade to 2.9.1 or later · < 2.9.1 · CVE-2026-63435 · GHSA-mvxr-6m87-mv2q · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
2276–2300 of 30,910 matching · newest first
RubyGems mail · Upgrade to 2.9.1 or later · < 2.9.1 · CVE-2026-63435 · GHSA-mvxr-6m87-mv2q · amended
Packagist getgrav/grav · Upgrade to 2.0.4 or later · < 2.0.4 · CVE-2026-62232 · GHSA-7mgc-c7pq-3rr3 · amended
PyPI omnigent · Upgrade to 0.3.0 or later · < 0.3.0 · CVE-2026-62677 · GHSA-p8rw-8qj3-hf33
PyPI omnigent · Upgrade to 0.3.0 or later · < 0.3.0 · CVE-2026-62674 · GHSA-jrrm-9hc7-2v3h · amended
PyPI omnigent · Upgrade to 0.3.0 or later · < 0.3.0 · CVE-2026-62675 · GHSA-756x-9hf6-q4h4
Packagist getgrav/grav · Upgrade to 2.0.2 or later · < 2.0.2 · CVE-2026-61450 · GHSA-mc5q-6hpj-rp7j · amended
Packagist getgrav/grav · Upgrade to 2.0.1 or later · < 2.0.1 · CVE-2026-61455 · GHSA-928x-9mpw-8h56 · amended
npm link-preview-js · Upgrade to 4.0.4 or later · <= 4.0.3 · CVE-2026-61704 · GHSA-cpjf-6666-r8fx
Go golang.org/x/crypto · Upgrade to 0.56.0 or later · < 0.56.0 · CVE-2026-56855
Go golang.org/x/crypto · Upgrade to 0.56.0 or later · < 0.56.0 · CVE-2026-78662
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-26307 · GHSA-h9c5-x7g8-4q7f · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-20909 · GHSA-fhq3-p242-2qpf · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-26247 · GHSA-m5ch-ppfx-xv3v · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-26232 · GHSA-5v69-g2m3-3hq3 · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-22547 · GHSA-922f-hfwp-p56f · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-27657 · GHSA-4c8f-3m6h-m56r · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-28705 · GHSA-7jvx-g65v-r899 · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-25712 · GHSA-37w2-86g3-h4qh · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-25718 · GHSA-h697-89cp-24q8 · amended
Go code.gitea.io/gitea · Upgrade to 1.25.5 or later · < 1.25.5 · CVE-2026-24690 · GHSA-47rq-xp99-92mx · amended
Go github.com/grafana/tempo · Upgrade to 1.5.1-0.20260303204923-b13f74291d48 (pre-release) or later · < 1.5.1-0.20260303204923-b13f74291d48 · CVE-2026-27878 · GHSA-6xff-cpcq-vpw2 · amended
npm fast-uri · Upgrade to 4.1.3, 3.1.6 or 2.4.5 by release line · >= 2.4.2, < 2.4.5; >= 3.1.3, < 3.1.6; >= 4.0.1, < 4.1.3 · CVE-2026-75931 · GHSA-5jgf-p345-68v8
npm fast-uri · Upgrade to 4.1.3, 3.1.6 or 2.4.5 by release line · >= 2.3.1, < 2.4.5; >= 3.0.0, < 3.1.6; >= 4.0.0, < 4.1.3 · CVE-2026-75975 · GHSA-f65p-4m7j-42xc
npm fast-uri · Upgrade to 4.1.3, 3.1.6 or 2.4.5 by release line · >= 2.4.1, < 2.4.5; >= 3.1.2, < 3.1.6; >= 4.0.0, < 4.1.3 · CVE-2026-75899 · GHSA-fph4-wmhf-6fwf
npm fast-uri · Upgrade to 4.1.3, 3.1.6 or 2.4.5 by release line · >= 2.3.1, < 2.4.5; >= 3.0.0, < 3.1.6; >= 4.0.0, < 4.1.3 · CVE-2026-76172 · GHSA-jqff-g426-hqxp
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.