Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bytepilot-0-0-15 (PyPI) MAL-2024-10423 | Malicious | Not scored | 06 Nov, 2024 | PyPI bytepilot-0-0-15 |
ansible-core Incorrect Authorization vulnerability CVE-2024-9902, GHSA-32p4-gm2c-wmch, PYSEC-2026-1121 | Medium | 0.3% | 06 Nov, 2024 | PyPI ansible-core |
Malicious release: Malicious code in macaqua (PyPI) MAL-2024-10417 | Malicious | Not scored | 06 Nov, 2024 | PyPI macaqua |
Malicious release: Malicious code in macque (PyPI) MAL-2024-10419 | Malicious | Not scored | 06 Nov, 2024 | PyPI macque |
Malicious release: Malicious code in tiketoken (PyPI) MAL-2024-10421 | Malicious | Not scored | 06 Nov, 2024 | PyPI tiketoken |
Malicious release: Malicious code in dbt-bytedhouse (PyPI) MAL-2024-10413 | Malicious | Not scored | 06 Nov, 2024 | PyPI dbt-bytedhouse |
Malicious release: Malicious code in bytep (PyPI) MAL-2024-10411 | Malicious | Not scored | 06 Nov, 2024 | PyPI bytep |
Malicious release: Malicious code in bytesp (PyPI) MAL-2024-10412 | Malicious | Not scored | 06 Nov, 2024 | PyPI bytesp |
Malicious release: Malicious code in dtb-bytehouse (PyPI) MAL-2024-10415 | Malicious | Not scored | 06 Nov, 2024 | PyPI dtb-bytehouse |
Malicious release: Malicious code in machaque (PyPI) MAL-2024-10418 | Malicious | Not scored | 06 Nov, 2024 | PyPI machaque |
Malicious release: Malicious code in nurset (PyPI) MAL-2024-10420 | Malicious | Not scored | 06 Nov, 2024 | PyPI nurset |
Malicious release: Malicious code in dbt-byteshouse (PyPI) MAL-2024-10414 | Malicious | Not scored | 06 Nov, 2024 | PyPI dbt-byteshouse |
Malicious release: Malicious code in habitmf (PyPI) MAL-2024-10416 | Malicious | Not scored | 06 Nov, 2024 | PyPI habitmf |
Malicious release: Malicious code in bytedps (PyPI) MAL-2024-10410 | Malicious | Not scored | 06 Nov, 2024 | PyPI bytedps |
Malicious release: Malicious code in tktoken (PyPI) MAL-2024-10422 | Malicious | Not scored | 06 Nov, 2024 | PyPI tktoken |
Malicious release: Malicious code in x2vmlgml (PyPI) MAL-2024-10409 | Malicious | Not scored | 06 Nov, 2024 | PyPI x2vmlgml |
Malicious release: Malicious code in asmutation (PyPI) MAL-2024-10405 | Malicious | Not scored | 06 Nov, 2024 | PyPI asmutation |
Malicious release: Malicious code in bytekafka0-0-15 (PyPI) MAL-2024-10406 | Malicious | Not scored | 06 Nov, 2024 | PyPI bytekafka0-0-15 |
Malicious release: Malicious code in lightsuq (PyPI) MAL-2024-10408 | Malicious | Not scored | 06 Nov, 2024 | PyPI lightsuq |
Malicious release: Malicious code in laghtseq (PyPI) MAL-2024-10407 | Malicious | Not scored | 06 Nov, 2024 | PyPI laghtseq |
OctoPrint has API key access in settings without reauthentication CVE-2024-51493, GHSA-cc6x-8cc7-9953, PYSEC-2024-202 | Medium | 0.3% | 05 Nov, 2024 | PyPI OctoPrint PyPI octoprint |
OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates CVE-2024-49377, GHSA-xvxq-g8hw-fx4g, PYSEC-2024-201 | Medium | 0.3% | 05 Nov, 2024 | PyPI OctoPrint PyPI octoprint |
Malicious release: Malicious code in bytesap (PyPI) MAL-2024-10367 | Malicious | Not scored | 05 Nov, 2024 | PyPI bytesap |
Malicious release: Malicious code in byteseep (PyPI) MAL-2024-10368 | Malicious | Not scored | 05 Nov, 2024 | PyPI byteseep |
Malicious release: Malicious code in bytesip (PyPI) MAL-2024-10369 | Malicious | Not scored | 05 Nov, 2024 | PyPI bytesip |
Malicious release: Malicious code in nuest (PyPI) MAL-2024-10372 | Malicious | Not scored | 05 Nov, 2024 | PyPI nuest |
Malicious release: Malicious code in nerst (PyPI) MAL-2024-10370 | Malicious | Not scored | 05 Nov, 2024 | PyPI nerst |
Malicious release: Malicious code in nurst (PyPI) MAL-2024-10373 | Malicious | Not scored | 05 Nov, 2024 | PyPI nurst |
Malicious release: Malicious code in nuerst (PyPI) MAL-2024-10371 | Malicious | Not scored | 05 Nov, 2024 | PyPI nuerst |
Malicious release: Malicious code in baibitmf (PyPI) MAL-2024-10365 | Malicious | Not scored | 05 Nov, 2024 | PyPI baibitmf |
Malicious release: Malicious code in bebitmf (PyPI) MAL-2024-10366 | Malicious | Not scored | 05 Nov, 2024 | PyPI bebitmf |
Malicious release: Malicious code in babetmf (PyPI) MAL-2024-10364 | Malicious | Not scored | 05 Nov, 2024 | PyPI babetmf |
Malicious release: Malicious code in x2vml-gml (PyPI) MAL-2024-10363 | Malicious | Not scored | 05 Nov, 2024 | PyPI x2vml-gml |
Malicious release: Malicious code in v2mlx-gml (PyPI) MAL-2024-10361 | Malicious | Not scored | 05 Nov, 2024 | PyPI v2mlx-gml |
Malicious release: Malicious code in v2xlm-gml (PyPI) MAL-2024-10362 | Malicious | Not scored | 05 Nov, 2024 | PyPI v2xlm-gml |
Malicious release: Malicious code in lightsequ (PyPI) MAL-2024-10360 | Malicious | Not scored | 05 Nov, 2024 | PyPI lightsequ |
Malicious release: Malicious code in lightseqe (PyPI) MAL-2024-10359 | Malicious | Not scored | 05 Nov, 2024 | PyPI lightseqe |
Malicious release: Malicious code in bytekafka-0-0-15 (PyPI) MAL-2024-10356 | Malicious | Not scored | 05 Nov, 2024 | PyPI bytekafka-0-0-15 |
Malicious release: Malicious code in bytekafka-0-15 (PyPI) MAL-2024-10357 | Malicious | Not scored | 05 Nov, 2024 | PyPI bytekafka-0-15 |
Malicious release: Malicious code in bytekafka (PyPI) MAL-2024-10355 | Malicious | Not scored | 05 Nov, 2024 | PyPI bytekafka |
Malicious release: Malicious code in lightseeq (PyPI) MAL-2024-10358 | Malicious | Not scored | 05 Nov, 2024 | PyPI lightseeq |
Access control vulnerable to user data deletion by anonynmous users CVE-2024-51734, GHSA-g5vw-3h65-2q3v, PYSEC-2026-2076, PYSEC-2026-2326 | High | 0.4% | 04 Nov, 2024 | PyPI AccessControl PyPI Zope PyPI accesscontrol PyPI zope |
Langflow vulnerable to remote code execution CVE-2024-48061, GHSA-5p5r-57fx-pmfr, PYSEC-2026-1523 | Critical | 1.5% | 04 Nov, 2024 | PyPI langflow |
gradio Server Side Request Forgery vulnerability CVE-2024-48052, GHSA-3gf9-wv65-gwh9, PYSEC-2026-1408 | Medium | 0.5% | 04 Nov, 2024 | PyPI gradio |
AgentScope uses `eval` CVE-2024-48050, GHSA-6p55-qr3j-mpgq, PYSEC-2024-262 | Critical | 0.8% | 04 Nov, 2024 | PyPI agentscope |
changedetection.io Path Traversal CVE-2024-51483, GHSA-cwgg-57xj-g77r, PYSEC-2026-1240 | Medium | 2.3% | 01 Nov, 2024 | PyPI changedetection-io PyPI changedetection.io |
langflow has vulnerability in PythonCodeTool component CVE-2024-42835, GHSA-56m6-4mhw-h3g5, PYSEC-2024-279 | Critical | 1.2% | 31 Oct, 2024 | PyPI langflow |
Malicious release: Malicious code in hmac2 (PyPI) MAL-2024-12287 | Malicious | Not scored | 30 Oct, 2024 | PyPI hmac2 |
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing. BIT-pytorch-2024-48063, CVE-2024-48063, PYSEC-2024-259 | Critical | 1.6% | 29 Oct, 2024 | PyPI torch |
Waitress has request processing race condition in HTTP pipelining with invalid first request CVE-2024-49768, GHSA-9298-4cf8-g4wj, PYSEC-2024-210 | Critical | 0.5% | 29 Oct, 2024 | PyPI waitress |