Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Arc has unauthenticated application log disclosure via `/api/v1/logs` GHSA-m3qr-fvp4-78xj | Low | Not scored | 15 hours ago | Go github.com/basekick-labs/arc |
Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through CVE-2026-55458, GHSA-8qx7-j2v2-x6q5 | Low | Not scored | 6 days ago | Go github.com/caddyserver/caddy/v2 |