Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in requests-2-32-3 (PyPI) MAL-2024-11689 | Malicious | Not scored | 09 Dec, 2024 | PyPI requests-2-32-3 |
Malicious release: Malicious code in requests99999999 (PyPI) MAL-2024-11690 | Malicious | Not scored | 09 Dec, 2024 | PyPI requests99999999 |
Malicious release: Malicious code in py-colorprinting (PyPI) MAL-2024-11666 | Malicious | Not scored | 09 Dec, 2024 | PyPI py-colorprinting |
Malicious release: Malicious code in otci-openthread (PyPI) MAL-2024-11652 | Malicious | Not scored | 09 Dec, 2024 | PyPI otci-openthread |
Malicious release: Malicious code in notoken887 (PyPI) MAL-2024-11648 | Malicious | Not scored | 09 Dec, 2024 | PyPI notoken887 |
Malicious release: Malicious code in newpipv1 (PyPI) MAL-2024-11645 | Malicious | Not scored | 09 Dec, 2024 | PyPI newpipv1 |
Malicious release: Malicious code in nasrpy (PyPI) MAL-2024-11644 | Malicious | Not scored | 09 Dec, 2024 | PyPI nasrpy |
Malicious release: Malicious code in lib-defender (PyPI) MAL-2024-11625 | Malicious | Not scored | 09 Dec, 2024 | PyPI lib-defender |
Malicious release: Malicious code in infoind (PyPI) MAL-2024-11615 | Malicious | Not scored | 09 Dec, 2024 | PyPI infoind |
Malicious release: Malicious code in frexco-pip-requests (PyPI) MAL-2024-11597 | Malicious | Not scored | 09 Dec, 2024 | PyPI frexco-pip-requests |
Malicious release: Malicious code in ffefesaewad (PyPI) MAL-2024-11595 | Malicious | Not scored | 09 Dec, 2024 | PyPI ffefesaewad |
Malicious release: Malicious code in fake-usragent (PyPI) MAL-2024-11589 | Malicious | Not scored | 09 Dec, 2024 | PyPI fake-usragent |
Malicious release: Malicious code in fabricee (PyPI) MAL-2024-11586 | Malicious | Not scored | 09 Dec, 2024 | PyPI fabricee |
Malicious release: Malicious code in fabrlce (PyPI) MAL-2024-11587 | Malicious | Not scored | 09 Dec, 2024 | PyPI fabrlce |
Malicious release: Malicious code in exodushcate (PyPI) MAL-2024-11585 | Malicious | Not scored | 09 Dec, 2024 | PyPI exodushcate |
Malicious release: Malicious code in eosio-signerz (PyPI) MAL-2024-11583 | Malicious | Not scored | 09 Dec, 2024 | PyPI eosio-signerz |
Malicious release: Malicious code in devilpy (PyPI) MAL-2024-11574 | Malicious | Not scored | 09 Dec, 2024 | PyPI devilpy |
Malicious release: Malicious code in cutepy32 (PyPI) MAL-2024-11569 | Malicious | Not scored | 09 Dec, 2024 | PyPI cutepy32 |
Malicious release: Malicious code in colourema (PyPI) MAL-2024-11561 | Malicious | Not scored | 09 Dec, 2024 | PyPI colourema |
Malicious release: Malicious code in colority (PyPI) MAL-2024-11559 | Malicious | Not scored | 09 Dec, 2024 | PyPI colority |
Malicious release: Malicious code in cipherbcrypto (PyPI) MAL-2024-11557 | Malicious | Not scored | 09 Dec, 2024 | PyPI cipherbcrypto |
Malicious release: Malicious code in ccl-localstoragerss (PyPI) MAL-2024-11554, SNYK-PYTHON-CCLLOCALSTORAGERSS-8145480 | Malicious | Not scored | 09 Dec, 2024 | PyPI ccl-localstoragerss |
Malicious release: Malicious code in ccl-leveldbases (PyPI) MAL-2024-11552, SNYK-PYTHON-CCLLEVELDBASES-8145483 | Malicious | Not scored | 09 Dec, 2024 | PyPI ccl-leveldbases |
Malicious release: Malicious code in ccl-localstoragers (PyPI) MAL-2024-11553 | Malicious | Not scored | 09 Dec, 2024 | PyPI ccl-localstoragers |
Malicious release: Malicious code in ccl-leveldbase (PyPI) MAL-2024-11551 | Malicious | Not scored | 09 Dec, 2024 | PyPI ccl-leveldbase |
Malicious release: Malicious code in bugbounty (PyPI) MAL-2024-11541 | Malicious | Not scored | 09 Dec, 2024 | PyPI bugbounty |
Malicious release: Malicious code in artifact-lab-3-package-0c8bce1c (PyPI) MAL-2024-11526 | Malicious | Not scored | 09 Dec, 2024 | PyPI artifact-lab-3-package-0c8bce1c |
Malicious release: Malicious code in arielbogo (PyPI) MAL-2024-11524 | Malicious | Not scored | 09 Dec, 2024 | PyPI arielbogo |
Malicious release: Malicious code in akobo (PyPI) MAL-2024-11521 | Malicious | Not scored | 09 Dec, 2024 | PyPI akobo |
Malicious release: Malicious code in aiocpa (PyPI) MAL-2024-11518, SNYK-PYTHON-AIOCPA-8442272 | Malicious | Not scored | 09 Dec, 2024 | PyPI aiocpa |
Malicious release: Malicious code in afriton-py (PyPI) MAL-2024-11515 | Malicious | Not scored | 09 Dec, 2024 | PyPI afriton-py |
Malicious release: Malicious code in afritonpy (PyPI) MAL-2024-11516 | Malicious | Not scored | 09 Dec, 2024 | PyPI afritonpy |
Malicious release: Malicious code in afrit-name (PyPI) MAL-2024-11513 | Malicious | Not scored | 09 Dec, 2024 | PyPI afrit-name |
Malicious release: Malicious code in afriton (PyPI) MAL-2024-11514 | Malicious | Not scored | 09 Dec, 2024 | PyPI afriton |
Malicious release: Malicious code in 48484efej8id (PyPI) MAL-2024-11512 | Malicious | Not scored | 09 Dec, 2024 | PyPI 48484efej8id |
Django SQL injection in HasKey(lhs, rhs) on Oracle BIT-django-2024-53908, CVE-2024-53908, GHSA-m9g8-fxxm-xg86, PYSEC-2024-157 | Critical | 1.4% | 06 Dec, 2024 | PyPI Django PyPI django |
Django denial-of-service in django.utils.html.strip_tags() BIT-django-2024-53907, CVE-2024-53907, GHSA-8498-2h75-472j, PYSEC-2024-156 | High | 1.4% | 06 Dec, 2024 | PyPI Django PyPI django |
Malicious release: Malicious code in dbsxrchpro (PyPI) MAL-2025-2955 | Malicious | Not scored | 05 Dec, 2024 | PyPI dbsxrchpro |
Malicious release: Malicious code in flamepro (PyPI) MAL-2025-2964 | Malicious | Not scored | 05 Dec, 2024 | PyPI flamepro |
Malicious release: Malicious code in graphicsx (PyPI) MAL-2025-931 | Malicious | Not scored | 05 Dec, 2024 | PyPI graphicsx |
Malicious release: Malicious code in intgraphx (PyPI) MAL-2025-936 | Malicious | Not scored | 05 Dec, 2024 | PyPI intgraphx |
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints CVE-2024-39163, GHSA-pqj8-xhcx-prxm, PYSEC-2026-1842 | High | 0.2% | 04 Dec, 2024 | PyPI pyspider |
Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS CVE-2024-12107, PYSEC-2024-300 | High | 0.5% | 04 Dec, 2024 | PyPI pyd3tn |
Malicious release: Malicious code in huggingleg2 (PyPI) MAL-2025-934 | Malicious | Not scored | 04 Dec, 2024 | PyPI huggingleg2 |
Malicious release: Malicious code in genz-translator (PyPI) MAL-2024-12275 | Malicious | Not scored | 03 Dec, 2024 | PyPI genz-translator |
Synapse Matrix has a partial room state leak via Sliding Sync CVE-2024-53867, GHSA-56w4-5538-8v8h, PYSEC-2026-1610 | Medium | 0.4% | 03 Dec, 2024 | PyPI matrix-synapse |
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders CVE-2024-53863, GHSA-vp6v-whfm-rv3g, PYSEC-2026-1615 | High | 0.6% | 03 Dec, 2024 | PyPI matrix-synapse |
Synapse allows a a malformed invite to break the invitee's `/sync` CVE-2024-52815, GHSA-f3r3-h2mq-hx2h, PYSEC-2026-1611 | High | 0.6% | 03 Dec, 2024 | PyPI matrix-synapse |
Synapse allows unsupported content types to lead to memory exhaustion CVE-2024-52805, GHSA-rfq8-j7rh-8hf2, PYSEC-2026-1613 | High | 0.7% | 03 Dec, 2024 | PyPI matrix-synapse |
Synapse's unauthenticated writes to the media repository allow planting of problematic content CVE-2024-37303, GHSA-gjgr-7834-rhxr, PYSEC-2024-287 | Medium | 0.4% | 03 Dec, 2024 | PyPI matrix-synapse |