piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
PyPI piccolo-admin · Upgrade to 1.14.0 or later · <= 1.13.0 · CVE-2026-55485 · GHSA-2gh4-jmwq-rr8w
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
2426–2450 of 30,910 matching · newest first
PyPI piccolo-admin · Upgrade to 1.14.0 or later · <= 1.13.0 · CVE-2026-55485 · GHSA-2gh4-jmwq-rr8w
PyPI wsgidav · Upgrade to 4.3.5 or later · <= 4.3.4 · CVE-2026-55509 · GHSA-p6gw-4frg-j7jw
Maven org.graylog2:graylog2-server · Upgrade to 7.1.4 or later · >= 7.1.0, <= 7.1.3 · CVE-2026-55425 · GHSA-q79r-r9xg-r863 · amended
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55516 · GHSA-575r-357h-fhch
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55515 · GHSA-35cr-9hqq-p2mg
header_color SettingPackagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55481 · GHSA-w7qw-5wfv-gwx9
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55479 · GHSA-8frh-vhgh-64cf
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55478 · GHSA-crv3-j83j-f3r6
Packagist snipe/snipe-it · Upgrade to 8.6.0 or later · < 8.6.0 · CVE-2026-55476 · GHSA-53jc-27pc-x8r8
Packagist snipe/snipe-it · Upgrade to 8.6.1 or later · <= 8.6.0 · CVE-2026-55475 · GHSA-5wx7-xq8j-v4qm
Packagist snipe/snipe-it · Upgrade to 8.5.0 or later · < 8.5.0 · CVE-2026-55474 · GHSA-c6f4-wj38-m3g3
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55472 · GHSA-8w8c-8mx9-52cw
image fieldPackagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55469 · GHSA-xr9m-gphc-9p63
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55466 · GHSA-jhph-5q74-pmfx
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55464 · GHSA-r52f-r9v5-66xr
Packagist snipe/snipe-it · Upgrade to 8.6.1 or later · <= 8.6.0 · CVE-2026-55462 · GHSA-fc33-6w3q-538h
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55461 · GHSA-wg2f-x2c2-c4rp
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55460 · GHSA-vgx7-c78r-69w9
Packagist snipe/snipe-it · Upgrade to 8.6.2 or later · <= 8.6.1 · CVE-2026-55452 · GHSA-whrx-mmgr-gpcf
Maven org.yamcs:yamcs-core · Upgrade to 5.13.2 or 5.12.8 by release line · >= 5.13.0, <= 5.13.1; <= 5.12.7 · CVE-2026-55566 · GHSA-9272-wg2r-7xmx · amended
LIKE pattern compiled by Janino (LikeExpression)Maven org.yamcs:yamcs-core · Upgrade to 5.13.2 or 5.12.8 by release line · >= 5.13.0, <= 5.13.1; <= 5.12.7 · CVE-2026-55565 · GHSA-c64q-hj4j-375f · amended
Maven org.yamcs:yamcs-core · Upgrade to 5.13.2 or 5.12.8 by release line · >= 5.13.0, <= 5.13.1; <= 5.12.7 · CVE-2026-55559 · GHSA-73mf-m39p-wpm9 · amended
Maven org.yamcs:yamcs-core · Upgrade to 5.12.0 or later · < 5.12.0 · CVE-2026-55552 · GHSA-9jg3-g3wh-w9pj
Maven org.yamcs:yamcs-core · Upgrade to 5.9.4 or later · < 5.9.4 · CVE-2026-55549 · GHSA-rxpg-wjf8-qv9c · amended
Maven org.yamcs:yamcs-core · Upgrade to 5.13.2 or 5.12.8 by release line · >= 5.13.0, <= 5.13.1; <= 5.12.7 · CVE-2026-55548 · GHSA-8xjq-pr36-ccgf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.