Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package BIT-brotli-2026-111497, BIT-dotnet-2026-111497, BIT-dotnet-sdk-2026-111497, BIT-node-2026-111497, BIT-node-min-2026-111497, BIT-powershell-2026-111497, CVE-2026-111497, GHSA-9v8h-qqgm-4m35, PYSEC-2026-4322, PYSEC-2026-4323 | CriticalExploited | 88.0% | 7 days ago | PyPI brotli PyPI brotlicffi |
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) BIT-mlflow-2026-64849, CVE-2026-64849, GHSA-7gwp-5pfp-969j, PYSEC-2026-3687 | CriticalExploited | 10.0% | 17 Aug, 2026 | PyPI mlflow |
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback CVE-2026-59822, GHSA-7488-6r32-c95q, PYSEC-2026-3479 | HighExploited | 0.8% | 08 Jul, 2026 | PyPI litellm |
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow CVE-2026-55255, GHSA-qrpv-q767-xqq2, PYSEC-2026-221 | HighExploited | 0.9% | 19 Jun, 2026 | PyPI langflow |
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710, GHSA-86qp-5c8j-p5mr, PYSEC-2026-161, X41-2026-002 | MediumExploited | 70.3% | 22 May, 2026 | PyPI starlette |
LiteLLM: Authenticated command execution via MCP stdio test endpoints CVE-2026-42271, GHSA-v4p8-mg3p-g94g, PYSEC-2026-2599 | HighExploited | 91.4% | 25 Apr, 2026 | PyPI litellm |
LiteLLM has SQL Injection in Proxy API key verification CVE-2026-42208, GHSA-r75f-5x8p-qvmc, PYSEC-2026-391 | CriticalExploited | 89.4% | 24 Apr, 2026 | PyPI litellm |
Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass CVE-2026-39987, GHSA-2679-6mx9-h9xc, PYSEC-2026-407 | CriticalExploited | 99.6% | 08 Apr, 2026 | PyPI marimo |
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint CVE-2026-33017, GHSA-vwmf-pq79-vjvx, PYSEC-2026-379 | CriticalExploited | 96.2% | 17 Mar, 2026 | PyPI langflow |
Langflow affected by Remote Code Execution via validate_code() exec() CVE-2026-0770, GHSA-g22f-v6f7-2hrh, PYSEC-2026-1525 | CriticalExploited | 62.6% | 23 Jan, 2026 | PyPI langflow |
Langflow CORS misconfiguration enables Account Takeover and RCE CVE-2025-34291, GHSA-577h-p2hh-v4mv, PYSEC-2025-78 | CriticalExploited | 92.8% | 05 Dec, 2025 | PyPI langflow |
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack CVE-2025-62593, GHSA-q279-jhrf-cc6v, PYSEC-2026-520 | CriticalExploited | 60.2% | 26 Nov, 2025 | PyPI ray |
Langflow Unauth RCE CVE-2025-3248, GHSA-rvqx-wpfh-mfx7, PYSEC-2025-36, PYSEC-2026-380 | CriticalExploited | 100.0% | 07 Apr, 2025 | PyPI langflow PyPI langflow-base |
libwebp: OOB write in BuildHuffmanTable A-299477569, ASB-A-299477569, CVE-2023-4863, CVE-2023-5129, GHSA-j7hp-h8jx-5ppr, PYSEC-2026-1794, RUSTSEC-2023-0060, RUSTSEC-2023-0061 | HighExploited | 100.0% | 12 Sep, 2023 | Go github.com/chai2010/webp NuGet SkiaSharp NuGet magick.net-q16-anycpu NuGet magick.net-q16-hdri-anycpu +10 more |
Apache superset missing check for default SECRET_KEY BIT-superset-2023-27524, CVE-2023-27524, GHSA-5cx2-vq3h-x52c, PYSEC-2026-1161 | CriticalExploited | 98.1% | 24 Apr, 2023 | PyPI apache-superset |
Apache Spark UI can allow impersonation if ACLs enabled BIT-spark-2022-33891, CVE-2022-33891, GHSA-4x9r-j582-cgr8, PYSEC-2022-236 | HighExploited | 93.2% | 18 Jul, 2022 | Maven org.apache.spark:spark-parent_2.12 PyPI pyspark |
Authentication bypass in Apache Airflow BIT-airflow-2020-13927, CVE-2020-13927, GHSA-hhx9-p69v-cx2j, PYSEC-2020-18 | CriticalExploited | 99.8% | 10 Nov, 2020 | PyPI apache-airflow |
SaltStack Salt Command Injection in netapi ssh client CVE-2020-16846, GHSA-qr38-h96j-2j3w, PYSEC-2020-104 | CriticalExploited | 99.6% | 06 Nov, 2020 | PyPI salt |
Remote code execution (RCE) in Apache Airflow BIT-airflow-2020-11978, CVE-2020-11978, GHSA-rvmq-4x66-q7j3, PYSEC-2020-14 | HighExploited | 99.2% | 17 Jul, 2020 | PyPI apache-airflow |
SaltStack Salt Unauthenticated Remote Code Execution CVE-2020-11651, GHSA-pjhf-vpx3-33r3, PYSEC-2020-102 | CriticalExploited | 96.6% | 30 Apr, 2020 | PyPI salt |
SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103 | HighExploited | 86.2% | 30 Apr, 2020 | PyPI salt |