Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Tornado: Open redirect in RedirectHandler via protocol-relative URLs CVE-2026-116578, GHSA-pw9p-v7r6-gx4p | Low | 0.5% | 3 days ago | PyPI tornado |
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database CVE-2026-112913, GHSA-9vhv-jxww-xfm5 | Low | Not scored | 5 days ago | PyPI filelock |
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break CVE-2026-112907, GHSA-567q-5qvw-pf92 | Low | Not scored | 5 days ago | PyPI filelock |
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description GHSA-xmj3-9gf7-h52w | Low | Not scored | 6 days ago | PyPI setuptools |
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation CVE-2026-83813, GHSA-jj36-9pvh-vj5r | Low | 0.1% | 6 days ago | PyPI Twisted PyPI twisted |