Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
pages.access permission is not checked in the site/find REST API routePackagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54005 · GHSA-r3w8-2c5r-h9j9
Forwarded headerPackagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54003 · GHSA-whxw-24jc-cwmv
Dom::sanitize()Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-54002 · GHSA-wr9h-4r83-f4v6
Packagist getkirby/cms · Upgrade to 5.4.4 or 4.9.4 by release line · <= 4.9.3; >= 5.0.0-alpha.1, <= 5.4.3 · CVE-2026-49276 · GHSA-rhj6-r49h-5932
NbconvertFileHandler / NbconvertPostHandler via missing sandbox CSPPyPI jupyter-server · Upgrade to 2.20.0 or later · <= 2.19.0 · CVE-2026-44727 · GHSA-fcw5-x6j4-ccmp · amended
npm undici · Upgrade to 8.5.0 or 7.28.0 by release line · >= 7.23.0, < 7.28.0; >= 8.0.0, < 8.5.0 · CVE-2026-9697 · GHSA-vmh5-mc38-953g · amended
npm undici · Upgrade to 8.5.0 or later · >= 8.0.0, < 8.5.0 · CVE-2026-9675 · GHSA-38rv-x7px-6hhq · amended
npm nodemailer · Upgrade to 9.0.1 or later · <= 9.0.0 · CVE-2026-82659 · GHSA-p6gq-j5cr-w38f · amended
PyPI python-statemachine · Upgrade to 3.2.0 or later · >= 3.0.0, < 3.2.0 · CVE-2026-47103 · GHSA-v4jc-pm6r-3vj8 · amended
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57147 · GHSA-cwj8-7gp2-ggcw · amended
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.110, < 4.6.61 · CVE-2026-57144 · GHSA-6jcq-6546-qrrw · amended
PyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57132 · GHSA-8ccj-p46r-jwqq · amended
PyPI praisonaiagents · Upgrade to 1.6.61 or later · < 1.6.61 · CVE-2026-57143 · GHSA-4pcv-mg8v-vrgf · amended
PyPI praisonai-platform · Upgrade to 0.1.6 or later · <= 0.1.4 · CVE-2026-57148 · GHSA-f38v-77qj-h4jq · amended
multiedit Tool Without Path ValidationPyPI praisonai · Upgrade to 4.6.61 or later · < 4.6.61 · CVE-2026-57145 · GHSA-29w3-p9w9-wc47 · amended
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.115, < 4.6.61 · CVE-2026-57146 · GHSA-jxcw-qp4h-6jfq · amended
PyPI praisonai · Upgrade to 4.6.61 or later · >= 4.5.87, < 4.6.61 · CVE-2026-57142 · GHSA-7qw2-w5rc-37x2 · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.1, <= 1.7.1 · CVE-2026-57133 · GHSA-5jv7-2mjm-h6qj · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57137 · GHSA-h2w2-v7j6-xqm4 · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.5.0, <= 1.7.1 · CVE-2026-57139 · GHSA-j4f3-55x4-r6q2 · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.6.0, <= 1.7.1 · CVE-2026-57140 · GHSA-9752-mhqh-h34f · amended
codeMode Toolnpm praisonai · Upgrade to 1.7.2 or later · <= 1.7.1 · CVE-2026-57141 · GHSA-p69m-4f92-2v84 · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.2.3, <= 1.7.1 · CVE-2026-57136 · GHSA-vjv9-7m7j-h833 · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.4.0, <= 1.7.1 · CVE-2026-57138 · GHSA-vmmj-pfw7-fjwp · amended
npm praisonai · Upgrade to 1.7.2 or later · >= 1.2.3, <= 1.7.1 · CVE-2026-57135 · GHSA-gqmf-56h7-rrpf · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.