Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence GHSA-c33x-vcv4-vg3g | Low | Not scored | 4 hours ago | crates.io cedar-policy npm @cedar-policy/cedar-wasm |
Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist BIT-parse-2026-61448, CVE-2026-61448, GHSA-r899-h629-j84r | Low | Not scored | 4 hours ago | npm parse-server |
PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets CVE-2026-86198, GHSA-pg53-p7qp-65cv | Low | Not scored | 4 hours ago | Packagist pocketmine/pocketmine-mp |