Feeds

Upgrade now

freescout 1.8.225 Security relevant · 4h

Auth RCE / SSRF Dependencies

Path traversal fix + CVE patches

Open

Upgrade now

bigbluebutton v3.0.29 Security relevant · 11h

Auth RCE / SSRF

Security fixes

Open

Upgrade now

Podman v5.8.3 Security relevant · 15h

RCE / SSRF

CVE-2026-44517 fix

Open

Upgrade now

Hasura v2.45.5 Security relevant · 16h

Security fix + server/data connector bugs

Open

Upgrade now

opentofu v1.11.9 Security relevant · 16h

Auth RCE / SSRF

SSH security fixes

Open

Upgrade now

opentofu v1.12.2 Security relevant · 17h

Auth RCE / SSRF

Security fixes

Open

Review required

Scoold 1.69.0 Security relevant · 1d

Auth RBAC

Security hardening

Open

Monitor

mattermost v11.7.3 Security · 1d

Security fixes

Open

Upgrade now

costajohnt/oss-autopilot mcp-v5.6.1 Security relevant · 1d

Fence lastMaintainerComment.body

Open

Review required

FileRise v3.15.0 Security relevant · 1d

Auth RBAC

Shared-folder boundary hardening

Open

Upgrade now

SQLPage v0.44.1 Security relevant · 1d

Auth

OIDC protected path bypass fix

Open

Config change

Oikos v0.71.12 Security relevant · 1d

Auth

OIDC email verification strictness

Open

Upgrade now

Wolfe-Jam/claude-faf-mcp v5.7.2 Security relevant · 1d

RCE / SSRF Breaking upgrade

Path confinement enforcement

Open

Upgrade now

Wolfe-Jam/faf-mcp v2.1.3 Security relevant · 1d

RCE / SSRF

Path confinement enforcement

Open

Upgrade now

wekan v9.37 Security relevant · 1d

Auth RBAC

BoardBleed fix

Open

Upgrade now

Vvveb CMS 1.0.8.6 Security relevant · 1d

Auth RCE / SSRF

XSS fixes + filename filter

Open

Config change

budibase 3.39.13 Security relevant · 1d

Auth

Login IP lockout

Open

Upgrade now

perry v0.5.1159 Security relevant · 1d

RCE / SSRF

Path‑traversal fix

Open

Upgrade now

translated/lara-mcp v1.0.6 Security relevant · 1d

Dependencies

Security fixes

Open

Upgrade now

langchain langchain-model-profiles==0.0.6 Security relevant · 2d

Dependencies

CVE-2026-4539 security fix

Open

Upgrade now

wekan v9.36 Security relevant · 2d

Auth

TokenBleed fix + API expansions

Open

Upgrade now

cameronrye/activitypub-mcp v3.1.4 Security relevant · 2d

RCE / SSRF Dependencies Auth

SSRF fixes

Open

Upgrade now

wiredoor v1.7.2 Security relevant · 2d

Dependencies

Security fixes

Open

Upgrade now

PaSympa/discord-mcp v1.7.3 Security relevant · 2d

Dependencies

Lockfile fixes + Docker gate

Open

Review required

Flyimg 1.12.1 Security relevant · 2d

Dependencies

Dependency updates

Open

Review required

Oikos v0.70.2 Security relevant · 2d

Auth RCE / SSRF

WebDAV security hardening

Open

Review required

Tapflow v0.8.0-next.2 Security relevant · 2d

Dependencies

CVE-2026-9277 fix

Open

Review required

Jenkins jenkins-2.568 Security relevant · 2d

Security fixes

Open

Review required

great_cto v2.65.1 Security relevant · 2d

Auth

CSRF mitigation

Open

Upgrade now

cameronrye/activitypub-mcp v3.1.3 Security relevant · 2d

Auth Dependencies RCE / SSRF

Media upload size cap enforcement

Open

Upgrade now

Jentic API Scorecard v1.4.2 Security relevant · 2d

Crypto / TLS

CVE-2026-45447 fix

Open

Upgrade now

SoulSync 2.6.9 Security relevant · 3d

Auth

Server‑side PIN enforcement + secret masking

Open

Upgrade now

Cronicle v0.9.118 Security · 3d

Dependencies

shell-quote bump

Open

Upgrade now

julien040/anyquery 0.4.5 Security relevant · 3d

RCE / SSRF

Security patch + MySQL fix + tool annotations

Open

Upgrade now

langroid 0.65.3 Security relevant · 3d

RCE / SSRF

Sender verification in handle_message

Open

Upgrade now

langroid 0.65.2 Security relevant · 3d

RCE / SSRF

RCE fix in pandas eval

Open

Upgrade now

langroid 0.65.1 Security relevant · 3d

RCE / SSRF

SQL function‑name blocklist bypass fix

Open

Upgrade now

fireshare v1.6.16 Security relevant · 3d

Auth RCE / SSRF

SSRF fix

Open

Review required

Oikos v0.68.1 Security relevant · 3d

Auth RCE / SSRF

Documents preview hardening

Open

No immediate action

grafana v12.2.9 Security relevant · 3d

CVE fixes + Docker + Go update

Open

Upgrade now

Medialyze v0.15.0 Security relevant · 3d

Dependencies

Starlette update + duplication comparison

Open

Review required

Oikos v0.67.5 Security relevant · 3d

Auth

CSP + referrer policy

Open

Upgrade now

BookStack v26.05.1 Security relevant · 3d

Auth RCE / SSRF

Attachment leak + file protocol abuse

Open

Review required

Froxlor 2.3.8 Security relevant · 4d

Auth

CSRF token validation

Open

Monitor

Oikos v0.66.2 Security relevant · 4d

Crypto / TLS

Secure avatar color selection

Open

Upgrade now

Jovancoding/Network-AI v5.10.2 Security relevant · 4d

CWE-377 fix

Open

Upgrade now

Jovancoding/Network-AI v5.10.1 Security relevant · 4d

Auth RBAC

Security fixes for temp files, FILE_EXPORT, data dir

Open

Upgrade now

coder v2.33.7 Security relevant · 4d

Dependencies RCE / SSRF

CVE fixes + aibridge header fix

Open

Review required

lanchuske/local-mcp v3.0.265 Security · 4d

Auth RBAC

Data‑handling hardening

Open

Upgrade now

goklab/guardvibe v3.14.0 Security relevant · 4d

RCE / SSRF

CVE-2024-52011 fix

Open