Zotpaper for Claude, ChatGPT and Cursor
Know what to patch before attackers do
Zotpaper follows the vulnerabilities in the news and on CISA’s list of ones being exploited. Connect it to your AI and ask which affect your projects: it checks your packages against the advisory databases, the exploited ones first, and tells you what to upgrade to.
The first 20 lookups are free. No card.
On your phone? You add the connector on a computer. Send this page to yourself for later.
Which vulnerabilities are being exploited right now, and what do I need to patch?
Used Zotpaper: vulnerabilities
These are being exploited and were in the news this week:
- Ivanti Connect Secure flaw lets attackers exploit predictable identifiers in remote access gateways: no fix yet. On CISA’s list.
- Privilege escalation to root in Ivanti Connect Secure: no fix yet. On CISA’s list.
- Remote code execution via crafted regex in GitLab CI/CD: fixed in 19.5.1 and 19.4.2. On CISA’s list.
Want me to check this project’s packages against them and everything else in the advisory databases?
Built from what Zotpaper’s tools return now. Claude’s words will be its own.
Connect it in a minute
Add Zotpaper to your AI
Claude Code, in your project’s terminal:
claude mcp add --transport http zotpaper https://zot.news/mcpClaude on the web or desktop: Settings, Connectors, Add custom connector, with the address
https://zot.news/mcp.ChatGPT: Settings, Apps and connectors, then create a connector with the same address (it needs developer mode on).
Cursor and other tools: setup with a key, for members.
Sign in, or join free
Zotpaper opens in your browser (in Claude Code, type
/mcpand pick zotpaper first). Sign in, or make a free account with your email, then allow the connection. No card, no key to copy.Ask
Try one of the questions below. Your first 20 lookups are free, and your assistant tells you when you’re running low. Checking a whole project takes one lookup.
Things to ask
- “Check this repo’s lockfile for vulnerable packages and tell me what to upgrade.”
- “Is anything in our Dockerfile affected by a vulnerability being exploited?”
- “What’s changed on the vulnerabilities in the news since Monday?”
- “Is nginx 1.27.3 affected by anything?”
- “Which of this week’s critical vulnerabilities have a fix out?”
After the 20 free lookups
Membership is every research paper in full, Zotpaper in Claude, ChatGPT and Cursor for the research, the news and checking your projects for vulnerabilities, API keys for your own code, and the voices around each story. The news stays free.
From US$3.25 a month, billed yearly at US$39, or US$3.99 month to month. The yearly plan starts with 14 days free. Cancel any time.