Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
AdminNeo: version-cache array injection causes persistent denial of service CVE-2026-59978, GHSA-jm85-8cpp-9cjc | High | Not scored | 3 hours ago | Packagist adminneo-org/adminneo |
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow CVE-2026-55186, GHSA-68wq-phq7-p2vg | Medium | Not scored | 1 day ago | Packagist silverstripe/mfa |
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization CVE-2026-116675, GHSA-mf2p-h6hf-fcwm | High | 0.3% | 3 days ago | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter CVE-2026-33944, GHSA-v5fq-cf5m-vwv7 | High | Not scored | 3 days ago | Packagist dolibarr/dolibarr |