Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash CVE-2026-50589, GHSA-q3g8-rjrx-59ph, PYSEC-2026-216 | High | 0.4% | 05 Jun, 2026 | PyPI ironic |
OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake CVE-2026-44393, GHSA-76qh-xr7q-h39m, PYSEC-2026-3492 | High | 0.2% | 04 Jun, 2026 | PyPI oslo-messaging PyPI oslo.messaging |
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image CVE-2026-48681, GHSA-9v62-qx4c-44x5, PYSEC-2026-3470 | High | 0.6% | 04 Jun, 2026 | PyPI ironic |
OpenStack Ironic allows Boot Script Injection CVE-2026-46447, GHSA-jrh2-f5jc-xpgr, PYSEC-2026-3471 | High | 0.3% | 03 Jun, 2026 | PyPI ironic |
Docling Core: Unsafe remote filename resolution CVE-2026-44023, GHSA-jmmv-h3mp-59v8, PYSEC-2026-2457 | High | 0.4% | 03 Jun, 2026 | PyPI docling-core |
Docling Core: Insufficient validation of image reference URIs CVE-2026-44019, GHSA-j5xp-7m2f-49jv, PYSEC-2026-2456 | High | 0.4% | 03 Jun, 2026 | PyPI docling-core |
Docling: Unsafe URI and Path Handling in HTML Backend CVE-2026-47214, GHSA-q29v-xc37-wh5m, PYSEC-2026-2146 | High | 0.4% | 03 Jun, 2026 | PyPI docling |
Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CVE-2026-44020, GHSA-m88r-rg27-5xfg, PYSEC-2026-240 | High | 0.6% | 03 Jun, 2026 | PyPI docling |
Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend CVE-2026-44018, GHSA-r3xg-rg9j-67fv, PYSEC-2026-2144 | High | 0.2% | 03 Jun, 2026 | PyPI docling |
Docling: Unsafe Playwright-based HTML Rendering CVE-2026-44016, GHSA-pj2v-ggqh-cmq2, PYSEC-2026-2142 | High | 0.6% | 03 Jun, 2026 | PyPI docling |
Docling: Unsafe Zip Extraction in EasyOCR Model Download CVE-2026-44017, GHSA-cjqg-rq2h-2fvj, PYSEC-2026-2143 | High | 0.7% | 03 Jun, 2026 | PyPI docling |
Duplicate Advisory: jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used CVE-2026-6657, GHSA-v42x-x7jp-845h, PYSEC-2026-3472 | High | 6.2% | 03 Jun, 2026 | PyPI jupyter-server |
daphne: Unauthenticated attackers can cause excessive memory consumption by sending arbitrarily large WebSocket messages/frames CVE-2026-44545, GHSA-rrc9-mx66-ffcm, PYSEC-2026-213 | High | 0.3% | 03 Jun, 2026 | PyPI daphne |
AIOHTTP is Vulnerable to Deserialization of Untrusted Data CVE-2026-34993, GHSA-jg22-mg44-37j8, PYSEC-2026-2104 | High | 0.2% | 02 Jun, 2026 | PyPI aiohttp |
Duplicate Advisory: Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path() CVE-2026-5422, GHSA-gf7q-q4j7-hp7c, PYSEC-2026-2532 | High | 4.9% | 02 Jun, 2026 | PyPI jupyter-server |
Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready' CVE-2026-3514, GHSA-c635-393c-hcx2, PYSEC-2026-2261 | High | 0.5% | 02 Jun, 2026 | PyPI prefect |
praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id} CVE-2026-47412, GHSA-g8rr-7rj2-f627, PYSEC-2026-2934 | High | 0.5% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR CVE-2026-47415, GHSA-xwq8-frcg-77q8, PYSEC-2026-2939 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR CVE-2026-47417, GHSA-cp4f-5m9r-5jc2, PYSEC-2026-2933 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR CVE-2026-47418, GHSA-943m-6wx2-rc2j, PYSEC-2026-2932 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args BIT-airflow-2026-49298, CVE-2026-49298, GHSA-5j6p-jrrm-6x94, PYSEC-2026-2358 | High | 0.5% | 01 Jun, 2026 | PyPI apache-airflow-core |
Apache Airflow Vulnerable to Deserialization of Untrusted Data BIT-airflow-2026-45360, CVE-2026-45360, GHSA-2r5m-76wx-56gx, PYSEC-2026-186 | High | 0.7% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Deserialization of Untrusted Data vulnerability BIT-airflow-2026-42359, CVE-2026-42359, GHSA-wr76-29cr-67w8, PYSEC-2026-185 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key BIT-airflow-2026-41084, CVE-2026-41084, GHSA-mxq5-f9c5-w4p5, PYSEC-2026-183 | High | 0.5% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Authenticated users can bypass the `is_safe_url` check BIT-airflow-2026-40961, CVE-2026-40961, GHSA-6hcw-qqr8-pjj8, PYSEC-2026-2345 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role CVE-2026-47409, GHSA-w388-2392-px73, PYSEC-2026-2938 | High | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link) CVE-2026-47414, GHSA-5jx9-w35f-vp65, PYSEC-2026-2929 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks CVE-2026-47406, GHSA-4x6r-9v57-3gqw, PYSEC-2026-2928 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership CVE-2026-47405, GHSA-h37g-4h4p-9x97, PYSEC-2026-2936 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID CVE-2026-47399, GHSA-6h6v-6m7w-7vxx, PYSEC-2026-2930 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API CVE-2026-48169, GHSA-gv23-xrm3-8c62, PYSEC-2026-2935 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has an Arbitrary File Write in Python API CVE-2026-47397, GHSA-hvhp-v2gc-268q, PYSEC-2026-2916 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate CVE-2026-47394, GHSA-9cr9-25q5-8prj, PYSEC-2026-2908 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 CVE-2026-47398, CVE-2026-64824, GHSA-78r8-wwqv-r299, PYSEC-2026-2905 | High | 0.7% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment CVE-2026-76241, GHSA-w7pm-9g55-mxfm | High | 0.1% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's Postgres schema identifier handling required defensive quoting CVE-2026-76240, GHSA-9pc9-4crj-mhpj | High | 0.4% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's federation peer token timestamp validation may reject valid peer tokens CVE-2026-76245, GHSA-xh5j-xjfq-qvvx | High | 0.2% | 29 May, 2026 | PyPI stigmem-node |
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env CVE-2026-47211, GHSA-c4m7-2gwp-vw76, PYSEC-2026-2857 | High | 0.2% | 29 May, 2026 | PyPI ouroboros-ai |
uv is vulnerable to arbitrary file write through entry point names CVE-2026-114109, GHSA-4gg8-gxpx-9rph | High | 0.4% | 29 May, 2026 | PyPI uv crates.io uv |
xiaomusic contains an unauthenticated path traversal vulnerability CVE-2026-10108, GHSA-5j8p-5rrj-8wjg, PYSEC-2026-3429 | High | 0.7% | 29 May, 2026 | PyPI xiaomusic |
agno contains a SQL injection vulnerability CVE-2026-10105, GHSA-82m5-3pcp-hccq, PYSEC-2026-2333 | High | 0.4% | 29 May, 2026 | PyPI agno |
Dulwich Vulnerable to Command Injection via Merge Driver Path CVE-2026-42563, GHSA-9277-mp7x-85jf, PYSEC-2026-2464 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows CVE-2026-42305, GHSA-897w-fcg9-f6xj, PYSEC-2026-2463 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token CVE-2026-44394, GHSA-whqr-fgm5-x77q, PYSEC-2026-603 | High | 0.2% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone has an Incorrect Authorization issue CVE-2026-43000, GHSA-q623-f4j4-p4xj, PYSEC-2026-601 | High | 0.3% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone has an Authorization Bypass CVE-2026-42999, GHSA-2r23-2g6v-2m5f, PYSEC-2026-600 | High | 0.3% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential CVE-2026-42998, GHSA-8f8m-wrvr-wcvf, PYSEC-2026-599 | High | 0.3% | 28 May, 2026 | PyPI keystone |
compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI) CVE-2026-46439, GHSA-gg2g-p7xc-qqmm, PYSEC-2026-2425 | High | 0.3% | 28 May, 2026 | PyPI compliance-trestle |
compliance-trestle - jinja has an Arbitrary File Write via Path Traversal CVE-2026-46345, GHSA-4q5v-7g7x-j79w, PYSEC-2026-2423 | High | 0.2% | 28 May, 2026 | PyPI compliance-trestle |
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed CVE-2026-48526, GHSA-xgmm-8j9v-c9wx, PYSEC-2026-179 | High | 0.4% | 28 May, 2026 | PyPI pyjwt |