Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Hydra legacy target blacklist permits unsafe PyYAML loading GHSA-wf6j-7hvr-gr93 | High | Not scored | 2 days ago | PyPI hydra-core |
Malicious release: Malicious code in @webapp-shared/login-vmok (npm) MAL-2026-18356 | Malicious | Not scored | 2 days ago | npm @webapp-shared/login-vmok |
Malicious release: Malicious code in numprint (PyPI) MAL-2026-18343 | Malicious | Not scored | 2 days ago | PyPI numprint |
Malicious release: Malicious code in adyen-web-v6 (npm) GHSA-r77r-rw3m-rjh5, MAL-2026-18344 | Malicious | Not scored | 2 days ago | npm adyen-web-v6 |
Malicious release: Malicious code in buttoncontent (npm) GHSA-6crh-vwr2-4qfp, MAL-2026-18339 | Malicious | Not scored | 2 days ago | npm buttoncontent |
Malicious release: Malicious code in macro-kernel-record-reader (npm) GHSA-32g3-f74c-pcxq, MAL-2026-18341 | Malicious | Not scored | 2 days ago | npm macro-kernel-record-reader |
Malicious release: Malicious code in fetch-hash-cache-atomic (npm) GHSA-w9mp-cvjp-jfqp, MAL-2026-18340 | Malicious | Not scored | 2 days ago | npm fetch-hash-cache-atomic |
Malicious release: Malicious code in string-target-mapper-hash (npm) GHSA-wfcx-722r-fg5h, MAL-2026-18342 | Malicious | Not scored | 2 days ago | npm string-target-mapper-hash |
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage GHSA-3w55-933p-8pv5 | High | Not scored | 2 days ago | PyPI strands-agents |
Strands Agents: Default FileSessionManager storage is world-readable on shared systems GHSA-763v-5pjm-fx36 | Medium | Not scored | 2 days ago | PyPI strands-agents |
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` GHSA-g5ff-637f-6q2m | High | Not scored | 2 days ago | PyPI litellm |
LiteLLM vulnerable to reflected XSS in /sso/debug/callback GHSA-hhww-mrg2-969h | Medium | Not scored | 2 days ago | PyPI litellm |
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it CVE-2026-117601, GHSA-6jp4-8v48-cc5v | Critical | 0.2% | 2 days ago | PyPI electrum |
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow CVE-2026-49272, GHSA-3jp2-3mrg-2vxc | High | Not scored | 2 days ago | PyPI oauthlib |
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) CVE-2026-48705, GHSA-6hp3-vr39-rqw8 | Critical | Not scored | 2 days ago | PyPI monai |
dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS CVE-2026-46350, GHSA-px68-xx5g-48q5 | Low | Not scored | 2 days ago | npm dcmjs |
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter CVE-2026-33944, GHSA-v5fq-cf5m-vwv7 | High | Not scored | 2 days ago | Packagist dolibarr/dolibarr |
Malicious release: Malicious code in @azure-growth/signup-ux-components (npm) MAL-2026-18338 | Malicious | Not scored | 2 days ago | npm @azure-growth/signup-ux-components |
Malicious release: Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm) GHSA-2w7v-jwxh-w7wc, MAL-2026-18337 | Malicious | Not scored | 2 days ago | npm @camera.ui/camera-ui-nvr-windows-amd64 |
Malicious release: Malicious code in h13t0ry-hello-demo (PyPI) MAL-2026-18336 | Malicious | Not scored | 2 days ago | PyPI h13t0ry-hello-demo |
Datadog dd-trace-py: IAST instrumentation can lead to application DOS CVE-2026-116589, GHSA-p3m5-h5v9-vqj6 | High | 0.3% | 2 days ago | PyPI ddtrace |
Datadog dd-trace-py: ReDoS in URL query string obfuscation CVE-2026-116588, GHSA-3633-r77q-h3v3 | High | 0.5% | 2 days ago | PyPI ddtrace |
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length CVE-2026-116584, GHSA-wp97-x4hv-qvhp | High | 0.4% | 3 days ago | npm seroval |
Seroval: Code injection through a typed array's own constructor property CVE-2026-116583, GHSA-f86p-h4j2-7qgj | Medium | 0.3% | 3 days ago | npm seroval |
Seroval: Script injection through RegExp sources in serialized output CVE-2026-116582, GHSA-9wx9-5pv9-3349 | Medium | 0.2% | 3 days ago | npm seroval |
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS) CVE-2026-116581, GHSA-97r2-qh9m-474h | High | 0.5% | 3 days ago | npm seroval |
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check CVE-2026-116580, GHSA-7rv5-mrxv-xcr9 | High | 0.3% | 3 days ago | npm seroval |
Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) CVE-2026-116579, GHSA-pjh6-c8mg-3x7m | Medium | 0.4% | 3 days ago | PyPI autobahn |
Tornado: Open redirect in RedirectHandler via protocol-relative URLs CVE-2026-116578, GHSA-pw9p-v7r6-gx4p | Low | 0.5% | 3 days ago | PyPI tornado |
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding CVE-2026-116577, GHSA-pcg2-g6cj-q92c | Medium | 0.4% | 3 days ago | PyPI tornado |
systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks CVE-2026-116576, GHSA-3f7j-7jwc-fxfj | High | 0.1% | 3 days ago | npm systeminformation |
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope) CVE-2026-116575, GHSA-5324-3w58-qpp2 | Medium | 0.1% | 3 days ago | PyPI mem0ai npm mem0ai |
Malicious release: Malicious code in ctf-agent (npm) GHSA-2j3v-rjgw-5wgg, MAL-2026-18335 | Malicious | Not scored | 3 days ago | npm ctf-agent |
Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks CVE-2026-115927, GHSA-r4j5-9xpp-3985 | Medium | 0.4% | 3 days ago | PyPI tornado |
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs CVE-2026-115924, GHSA-qr6x-7v33-6qmg | High | 0.4% | 3 days ago | PyPI rembg |
Malicious release: Malicious code in csvflow-schema (npm) MAL-2026-18357 | Malicious | Not scored | 3 days ago | npm csvflow-schema |
Backstage catalog rules can be bypassed for URL locations using encoded path segments CVE-2026-115923, GHSA-w658-mh9p-ww8f | Medium | 0.3% | 3 days ago | npm @backstage/plugin-catalog-backend |
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs CVE-2026-115922, GHSA-q69g-f4f5-v8m7 | Medium | 0.1% | 3 days ago | PyPI onnx |
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute CVE-2026-115921, GHSA-m4pr-6v3c-6fgr | Medium | 0.1% | 3 days ago | PyPI onnx |
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank CVE-2026-115920, GHSA-6pwm-x34p-fvj2 | Medium | 0.2% | 3 days ago | PyPI onnx |
ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) CVE-2026-115919, GHSA-48m4-24cq-37qf | Medium | 0.2% | 3 days ago | PyPI onnx |
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs CVE-2026-115918, GHSA-x567-49g5-p4cf, PYSEC-2026-4349 | Medium | 0.3% | 3 days ago | PyPI vllm |
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server CVE-2026-115917, GHSA-vvpg-rrww-wpmh, PYSEC-2026-4348 | Medium | 0.2% | 3 days ago | PyPI vllm |
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) CVE-2026-115916, GHSA-q97c-p368-75c4, PYSEC-2026-4347 | Medium | 0.3% | 3 days ago | PyPI vllm |
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE CVE-2026-115915, GHSA-h3rc-j82p-2c3h, PYSEC-2026-4346 | Critical | 0.6% | 3 days ago | PyPI vllm |
vLLM DeepSeek-OCR image processing vulnerable to denial of service CVE-2026-115914, GHSA-gq5q-89c7-vhvx | Medium | 0.4% | 3 days ago | PyPI vllm |
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine CVE-2026-115913, GHSA-8397-8qf6-f2gm | Medium | 0.3% | 3 days ago | PyPI vllm |
vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled CVE-2026-115912, GHSA-6757-hggm-hp2w, PYSEC-2026-4345 | High | 0.5% | 3 days ago | PyPI vllm |
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool CVE-2026-115911, GHSA-542m-9234-8gvf, PYSEC-2026-4344 | Medium | 0.3% | 3 days ago | PyPI vllm |
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim CVE-2026-115910, GHSA-h2r5-x5m7-3935 | Medium | 0.2% | 3 days ago | PyPI social-auth-core |