Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Synapse pagination Denial of Service CVE-2026-45076, GHSA-6qf2-7x63-mm6v, PYSEC-2026-194 | Medium | 0.4% | 14 May, 2026 | PyPI matrix-synapse |
pyzipper has an encryption bypass for small files encrypted using it CVE-2026-44722, GHSA-crqm-m339-7m2p, PYSEC-2026-3044 | Medium | 0.1% | 14 May, 2026 | PyPI pyzipper |
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices CVE-2026-44919, GHSA-4g73-w726-53h3, PYSEC-2026-2524 | Medium | 0.5% | 14 May, 2026 | PyPI ironic |
Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS) CVE-2026-44796, GHSA-qrpw-gjvh-x5gm, PYSEC-2026-2226 | Medium | 0.3% | 13 May, 2026 | PyPI nautobot |
Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference CVE-2026-44794, GHSA-wpxj-44w3-2j6x, PYSEC-2026-2225 | Medium | 0.2% | 13 May, 2026 | PyPI nautobot |
Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect CVE-2026-44681, GHSA-r95x-qfjj-fjj2, PYSEC-2026-188 | Medium | 0.2% | 13 May, 2026 | PyPI authlib |
mem0 server lacks authentication and authorization controls for its memory creation API endpoint CVE-2026-31245, GHSA-cgx8-qgvr-f7vf, PYSEC-2026-2633 | Medium | 0.3% | 12 May, 2026 | PyPI mem0ai |
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint CVE-2026-31241, GHSA-gq6f-qwv9-rf4j, PYSEC-2026-2634 | Medium | 0.4% | 12 May, 2026 | PyPI mem0ai |
aiwaves-cn agents is vulnerable to resource consumption in the recall_relevant_memories_to_working_memory function CVE-2026-8319, GHSA-ch88-c67q-65r9, PYSEC-2026-2334 | Medium | 0.4% | 11 May, 2026 | PyPI ai-agents |
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`) CVE-2026-43979, GHSA-fj2m-qvh9-jq4q, PYSEC-2026-2610 | Medium | 0.3% | 11 May, 2026 | PyPI local-deep-research |
pgAdmin 4: Improper restriction of excessive authentication attempts CVE-2026-7820, GHSA-hv9p-2pqf-r5w3, PYSEC-2026-2869 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules CVE-2026-7814, GHSA-6p2c-69cv-3fxq, PYSEC-2026-2866 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
GPT-Pilot contains a command injection vulnerability in the Executor.run() method CVE-2026-31246, GHSA-m85w-whwh-qvfx, PYSEC-2026-2501 | Medium | 0.7% | 11 May, 2026 | PyPI gpt-pilot |
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS) GHSA-88q9-cmp2-c2vq | Medium | Not scored | 11 May, 2026 | NuGet OxidizePdf.NET PyPI oxidize-pdf crates.io oxidize-pdf |
GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content CVE-2026-44972, GHSA-m5p4-gvpx-4mvr, PYSEC-2026-2506 | Medium | 0.1% | 11 May, 2026 | PyPI guarddog |
Streamlink has an arbitrary local file read via file:// URI in HLS and DASH CVE-2026-44353, GHSA-hgqw-6m45-hw5f, PYSEC-2026-180 | Medium | 0.4% | 11 May, 2026 | PyPI streamlink |
Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission CVE-2026-44571, GHSA-jgj3-r8hr-9pjw, PYSEC-2026-2739 | Medium | 0.3% | 11 May, 2026 | PyPI open-webui |
Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL CVE-2026-43826, GHSA-xccp-97wp-3gjg, PYSEC-2026-23 | Medium | 0.4% | 11 May, 2026 | PyPI apache-airflow-providers-opensearch |
Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL CVE-2026-41018, GHSA-g3jr-4jrm-jvqv, PYSEC-2026-22 | Medium | 0.4% | 11 May, 2026 | PyPI apache-airflow-providers-elasticsearch |
Mistune Heading ID Attribute has Injection XSS CVE-2026-44897, GHSA-v87v-83h2-53w7, PYSEC-2026-2207 | Medium | 0.2% | 09 May, 2026 | PyPI mistune |
Mistune has XSS via unescaped figclass/figwidth in Figure directive CVE-2026-44896, GHSA-58cw-g322-p94v, PYSEC-2026-168 | Medium | 0.2% | 08 May, 2026 | PyPI mistune |
Mistune Math Plugin has an XSS Escape Bypass CVE-2026-44708, GHSA-8g87-j6q8-g93x, PYSEC-2026-2206 | Medium | 0.2% | 08 May, 2026 | PyPI mistune |
eml_parser has recursion DoS via nested message/rfc822 attachments CVE-2026-44844, GHSA-g47v-rwmh-r9f8, PYSEC-2026-2468 | Medium | 0.4% | 08 May, 2026 | PyPI eml-parser PyPI eml_parser |
Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order CVE-2026-44568, GHSA-fq3v-xjjx-95rc, PYSEC-2026-2724 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Wagtail has improper permission handling when copying pages CVE-2026-44200, GHSA-67rv-mg8q-5pf3, PYSEC-2026-149 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper restriction handling on Documents and Images API CVE-2026-44201, GHSA-p5gm-92h4-6pv6, PYSEC-2026-150 | Medium | 0.3% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when deleting form submissions CVE-2026-44199, GHSA-pwm3-7fv4-g6xx, PYSEC-2026-148 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when viewing page history CVE-2026-44198, GHSA-c4mr-889m-vgf6, PYSEC-2026-147 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when comparing revisions CVE-2026-44197, GHSA-c6wj-9vcj-75pj, PYSEC-2026-146 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search CVE-2026-44560, GHSA-h36f-rqpx-j5wx, PYSEC-2026-2729 | Medium | 0.4% | 08 May, 2026 | PyPI open-webui |
Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels CVE-2026-44561, GHSA-hmgr-67hw-j2cq, PYSEC-2026-2732 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO CVE-2026-44564, GHSA-vrfh-rj4q-rmhr, PYSEC-2026-2762 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show CVE-2026-44563, GHSA-rcvp-6fgw-c7fh, PYSEC-2026-2754 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Model Import Overwrites Any Model Without Ownership Check CVE-2026-44562, GHSA-mqq6-cqcx-38vg, PYSEC-2026-2749 | Medium | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels CVE-2026-44559, GHSA-c7wp-3qh5-55pv, PYSEC-2026-2720 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection CVE-2026-44557, GHSA-6c2x-gcp3-gp73, PYSEC-2026-2707 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants CVE-2026-44558, GHSA-7rjh-px4v-5w55, PYSEC-2026-2711 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts CVE-2026-44550, GHSA-hr43-rjmr-7wmm, PYSEC-2026-2735 | Medium | 0.3% | 08 May, 2026 | PyPI open-webui |
Bunsink has an SSRF bypass in `validate_webhook_url` CVE-2026-44502, GHSA-fp53-qcf8-2xx2, PYSEC-2026-2405 | Medium | 0.3% | 08 May, 2026 | PyPI bugsink |
`potato-annotation` has a Project-Boundary Bypass GHSA-q9m2-fhv9-3jcf | Medium | Not scored | 08 May, 2026 | PyPI potato-annotation |
PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries CVE-2026-44337, GHSA-3643-7v76-5cj2, PYSEC-2026-2897 | Medium | 0.2% | 08 May, 2026 | PyPI PraisonAI PyPI praisonai |
utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol CVE-2026-44661, GHSA-39j6-4867-gg4w, PYSEC-2026-3396 | Medium | 0.2% | 07 May, 2026 | PyPI utcp-http |
OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer CVE-2026-40214, GHSA-mmpc-xjxr-5hf8, PYSEC-2026-2854 | Medium | 0.2% | 07 May, 2026 | PyPI openstack-cyborg |
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context CVE-2026-40610, GHSA-mcfx-4vc6-qgxv, PYSEC-2026-2399 | Medium | 0.3% | 07 May, 2026 | PyPI bentoml |
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler CVE-2026-44520, GHSA-fqph-j6v6-jvgx, PYSEC-2026-2458 | Medium | 0.2% | 07 May, 2026 | PyPI docling-graph |
Weblate vulnerable to XSS via crafted Markdown CVE-2026-44264, GHSA-5cmv-3rc4-7279, PYSEC-2026-2319 | Medium | 0.3% | 07 May, 2026 | PyPI weblate |
Weblate Vulnerable to Private Translation Enumeration via Screenshot API CVE-2026-44263, GHSA-gcg5-86jr-f7jg, PYSEC-2026-2318 | Medium | 0.3% | 07 May, 2026 | PyPI weblate |
Playwright Capture permits access to local files and internal network resources during page capture CVE-2026-44439, GHSA-687h-xw6f-q2qw, PYSEC-2026-2259 | Medium | 0.4% | 06 May, 2026 | PyPI PlaywrightCapture PyPI playwrightcapture |
axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification GHSA-7f4h-6264-89fr | Medium | Not scored | 06 May, 2026 | PyPI axonflow |
pyquorum: Timing side‑channel in mul_mod CVE-2026-44368, GHSA-7r92-3jgr-r65q, PYSEC-2026-3028 | Medium | 0.3% | 06 May, 2026 | PyPI pyquorum |