Low Severity
Published: Nov 10, 2026
Am I affected? One Python file that checks your machine for the Oct 2026 PHP, Node.js, BIND, LiteLLM, GitLab and eMudhra issues.
# Am I affected?
One Python file that checks your machine for exploited Chrome bugs, the stale browsers Puppeteer and
Playwright leave behind, the archived Puppeteer MCP server, and the October 2026 PHP, Node.js, BIND,
LiteLLM, GitLab and eMudhra issues and tells you what to do about each one. On a Linux VPS it also
checks the kernel and the usual server software (nginx, Apache, MariaDB, MongoDB, WordPress and
more) for the bugs being exploited right now. On Ubuntu, RHEL, AlmaLinux, Rocky and Oracle Linux it
also checks every installed package against the vendor's own security notices, exploited ones first.
No dependencies, and nothing about your machine is sent anywhere. The only network calls are
read-only downloads of public files: the cve.now feed, your distro vendor's security notices and
CISA's list of exploited CVEs (see Staying current; `--no-update-check` uses the last copies only).
Python 3.8+ on macOS or Linux (Windows partly, see below).
Quickest way, without cloning:
```
curl -fsSL https://amiaffected.now/run | sh # options go after: sh -s -- --html report.html
```
Or from a clone:
```
python3 secinspect.py # whole machine
python3 secinspect.py ~/work ~/clients # only search these folders for envs and bundles
python3 secinspect.py --docker # also look inside every local Docker image
python3 secinspect.py --html report.html # also write an HTML report
python3 secinspect.py --no-update-check # no downloads: use the last copies (offline/CI)
```
Exit code is `1` if anything is affected, so it can fail a CI job.
## Staying current
On every run (unless `--no-update-check` or `SECINSPECT_NO_UPDATE_CHECK` is set) the tool does a
read-only GET of the public [cve.now](https://cve.now) feed for PHP, Node.js and GitLab and prints a
one-line notice to stderr if any CVE there is newer than the `checked` watermark in
[`advisories.json`](advisories.json) — a hint that the bundled data (and the too