Tinfoil HatCatalogFeed statusWhere the catalog gets its news, and when each source last checked in. A source is stale when it has missed two check-ins in a row.
| Feed | Schedule | Last success | Last run | Run status | Fresh or stale. Stale means a source has missed two check-ins in a row, so its news may be out of date. One stale feed isn't an emergency, but worth a look. |
|---|---|---|---|---|---|
Bugs under active attack. CISA's list of vulnerabilities confirmed to be exploited in the wild. The most urgent feed here. kev | every 6h | 29 Oct, 2026 18:00 UTC | 29 Oct, 2026 18:00 UTC | success | Fresh |
Open source advisories, npm (OSV) osv:npm | every 1h | 29 Oct, 2026 19:05 UTC | 29 Oct, 2026 19:05 UTC | success | Fresh |
Open source advisories, PyPI (OSV) osv:PyPI | every 1h | 29 Oct, 2026 19:05 UTC | 29 Oct, 2026 19:05 UTC | success | Fresh |
Open source advisories, Packagist (OSV) osv:Packagist | every 1h | 29 Oct, 2026 19:05 UTC | 29 Oct, 2026 19:05 UTC | success | Fresh |
GitHub Advisory Database ghsa | every 1h | 29 Oct, 2026 19:15 UTC | 29 Oct, 2026 19:15 UTC | success | Fresh |
Where severity comes from. NVD assigns the Critical / High / Medium / Low scores. While it's stale, new advisories may show as Unrated. nvd | every 24h | 29 Oct, 2026 03:30 UTC | 29 Oct, 2026 03:30 UTC | success | Fresh |
Likelihood, not severity. EPSS estimates how likely a vulnerability is to be exploited in the next 30 days. Useful for picking what to fix first. epss | every 24h | 29 Oct, 2026 04:15 UTC | 29 Oct, 2026 04:15 UTC | success | Fresh |
Blogs and social posts (signals) signals | every 2h | 29 Oct, 2026 18:40 UTC | 29 Oct, 2026 18:40 UTC | success | Fresh |