Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in twitter-request-diagnostics (PyPI) MAL-2026-18403 | Malicious | Not scored | 2 hours ago | PyPI twitter-request-diagnostics |
Malicious release: Malicious code in test-01-rafamarrara-learning-dc (PyPI) MAL-2026-18402 | Malicious | Not scored | 3 hours ago | PyPI test-01-rafamarrara-learning-dc |
Malicious release: Malicious code in bq-helix-build-hook-6ade983e (PyPI) MAL-2026-18395 | Malicious | Not scored | 6 hours ago | PyPI bq-helix-build-hook-6ade983e |
Malicious release: Malicious code in bq-helix-recon-6ade983e (PyPI) MAL-2026-18396 | Malicious | Not scored | 6 hours ago | PyPI bq-helix-recon-6ade983e |
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset GHSA-vpp8-g58w-m8mp | High | Not scored | 10 hours ago | PyPI Twisted PyPI twisted |
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox CVE-2026-61438, GHSA-26mh-57q7-jfvr | High | Not scored | 10 hours ago | PyPI praisonai |
Malicious release: Malicious code in poc-revshell (PyPI) MAL-2026-18378 | Malicious | Not scored | 11 hours ago | PyPI poc-revshell |
Malicious release: Malicious code in seapy-ops (PyPI) MAL-2026-17880 | Malicious | Not scored | 13 hours ago | PyPI seapy-ops |
LangGraph JavaScript custom authentication may permit cross-user Store access CVE-2026-118668, GHSA-4hm6-w6qq-w73v | High | Not scored | 1 day ago | PyPI langgraph-api |
filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold CVE-2026-112908, GHSA-6627-m3xw-93mp | Medium | Not scored | 1 day ago | PyPI filelock |
filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL CVE-2026-112910, GHSA-8mx5-7m5m-r77g | Medium | Not scored | 1 day ago | PyPI filelock |
filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses CVE-2026-112938, GHSA-m462-7rxw-wvpg | Medium | Not scored | 1 day ago | PyPI filelock |
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests CVE-2026-118667, GHSA-3fx2-cqw9-xr3c | Medium | Not scored | 1 day ago | PyPI langgraph PyPI langgraph-sdk |
rucio has an Authorization Bypass on REST API endpoint for signing URLs CVE-2026-58273, GHSA-5j9r-fx4x-rpvg | High | Not scored | 1 day ago | PyPI rucio |
Malicious release: Malicious code in trajmetrics (PyPI) MAL-2026-18354 | Malicious | Not scored | 2 days ago | PyPI trajmetrics |
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules CVE-2026-116692, GHSA-26p8-2jq9-3vq9 | Critical | 0.7% | 2 days ago | PyPI mlflow |
OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation CVE-2026-116694, GHSA-f5m9-jfrj-jjj7 | Medium | 0.4% | 2 days ago | PyPI opentelemetry-propagator-jaeger |
MLflow CrewAI autologging records LLM provider API keys in logged trace spans CVE-2026-116691, GHSA-j7qq-vr8c-xvw3 | Medium | 0.2% | 2 days ago | PyPI mlflow |
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source CVE-2026-116690, GHSA-m65p-9j7q-6w33 | High | 0.6% | 2 days ago | PyPI mlflow |
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas CVE-2026-116686, GHSA-rwrf-2pqf-9j8j | Medium | 0.3% | 2 days ago | PyPI mcp |
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies CVE-2026-116685, GHSA-5h93-6whr-6q8j | Medium | 0.4% | 2 days ago | PyPI mcp |
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server CVE-2026-116684, GHSA-w4fh-qvv9-3v23 | Medium | 0.4% | 2 days ago | PyPI mcp |
Hydra legacy target blacklist permits unsafe PyYAML loading GHSA-wf6j-7hvr-gr93 | High | Not scored | 2 days ago | PyPI hydra-core |
Malicious release: Malicious code in numprint (PyPI) MAL-2026-18343 | Malicious | Not scored | 2 days ago | PyPI numprint |
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage GHSA-3w55-933p-8pv5 | High | Not scored | 2 days ago | PyPI strands-agents |
Strands Agents: Default FileSessionManager storage is world-readable on shared systems GHSA-763v-5pjm-fx36 | Medium | Not scored | 2 days ago | PyPI strands-agents |
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` GHSA-g5ff-637f-6q2m | High | Not scored | 2 days ago | PyPI litellm |
LiteLLM vulnerable to reflected XSS in /sso/debug/callback GHSA-hhww-mrg2-969h | Medium | Not scored | 2 days ago | PyPI litellm |
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it CVE-2026-117601, GHSA-6jp4-8v48-cc5v | Critical | 0.2% | 2 days ago | PyPI electrum |
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow CVE-2026-49272, GHSA-3jp2-3mrg-2vxc | High | Not scored | 2 days ago | PyPI oauthlib |
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) CVE-2026-48705, GHSA-6hp3-vr39-rqw8 | Critical | Not scored | 2 days ago | PyPI monai |
Malicious release: Malicious code in h13t0ry-hello-demo (PyPI) MAL-2026-18336 | Malicious | Not scored | 2 days ago | PyPI h13t0ry-hello-demo |
Datadog dd-trace-py: IAST instrumentation can lead to application DOS CVE-2026-116589, GHSA-p3m5-h5v9-vqj6 | High | 0.3% | 3 days ago | PyPI ddtrace |
Datadog dd-trace-py: ReDoS in URL query string obfuscation CVE-2026-116588, GHSA-3633-r77q-h3v3 | High | 0.5% | 3 days ago | PyPI ddtrace |
Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) CVE-2026-116579, GHSA-pjh6-c8mg-3x7m | Medium | 0.4% | 3 days ago | PyPI autobahn |
Tornado: Open redirect in RedirectHandler via protocol-relative URLs CVE-2026-116578, GHSA-pw9p-v7r6-gx4p | Low | 0.5% | 3 days ago | PyPI tornado |
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding CVE-2026-116577, GHSA-pcg2-g6cj-q92c | Medium | 0.4% | 3 days ago | PyPI tornado |
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope) CVE-2026-116575, GHSA-5324-3w58-qpp2 | Medium | 0.1% | 3 days ago | PyPI mem0ai npm mem0ai |
Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks CVE-2026-115927, GHSA-r4j5-9xpp-3985 | Medium | 0.4% | 3 days ago | PyPI tornado |
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs CVE-2026-115924, GHSA-qr6x-7v33-6qmg | High | 0.4% | 3 days ago | PyPI rembg |
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs CVE-2026-115922, GHSA-q69g-f4f5-v8m7 | Medium | 0.1% | 3 days ago | PyPI onnx |
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute CVE-2026-115921, GHSA-m4pr-6v3c-6fgr | Medium | 0.1% | 3 days ago | PyPI onnx |
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank CVE-2026-115920, GHSA-6pwm-x34p-fvj2 | Medium | 0.2% | 3 days ago | PyPI onnx |
ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) CVE-2026-115919, GHSA-48m4-24cq-37qf | Medium | 0.2% | 3 days ago | PyPI onnx |
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs CVE-2026-115918, GHSA-x567-49g5-p4cf, PYSEC-2026-4349 | Medium | 0.3% | 3 days ago | PyPI vllm |
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server CVE-2026-115917, GHSA-vvpg-rrww-wpmh, PYSEC-2026-4348 | Medium | 0.2% | 3 days ago | PyPI vllm |
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) CVE-2026-115916, GHSA-q97c-p368-75c4, PYSEC-2026-4347 | Medium | 0.3% | 3 days ago | PyPI vllm |
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE CVE-2026-115915, GHSA-h3rc-j82p-2c3h, PYSEC-2026-4346 | Critical | 0.6% | 3 days ago | PyPI vllm |
vLLM DeepSeek-OCR image processing vulnerable to denial of service CVE-2026-115914, GHSA-gq5q-89c7-vhvx | Medium | 0.4% | 3 days ago | PyPI vllm |
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine CVE-2026-115913, GHSA-8397-8qf6-f2gm | Medium | 0.3% | 3 days ago | PyPI vllm |