Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal CVE-2026-45725, GHSA-g3vg-vx23-3858, PYSEC-2026-2424 | High | 0.5% | 27 May, 2026 | PyPI compliance-trestle |
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username CVE-2026-45309, GHSA-g794-3fmp-753h, PYSEC-2026-2384 | High | 0.6% | 27 May, 2026 | PyPI asyncssh |
Gradio contains a cookie injection vulnerability CVE-2026-48545, GHSA-7hp7-4p35-3cx2, PYSEC-2026-2178 | High | 0.4% | 27 May, 2026 | PyPI gradio |
Taipy contains a path traversal vulnerability CVE-2026-48544, GHSA-28gh-q3gw-pvx8, PYSEC-2026-3081 | High | 0.5% | 27 May, 2026 | PyPI taipy |
OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body CVE-2026-49017, GHSA-g7jq-j257-rww2, PYSEC-2026-3080 | High | 0.4% | 27 May, 2026 | PyPI swift |
GDAL: scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow BIT-gdal-2026-49014, CVE-2026-49014, GHSA-wphc-7cm7-8mf7, PYSEC-2026-193 | High | 0.1% | 27 May, 2026 | PyPI gdal |
OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit relationAdd CVE-2026-44730, GHSA-q537-qhj4-wcjx, PYSEC-2026-167 | High | 0.3% | 26 May, 2026 | PyPI pycti |
Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default CVE-2026-45361, GHSA-g9v5-gjwf-9rwx, PYSEC-2026-166 | High | 0.6% | 25 May, 2026 | PyPI apache-airflow-providers-google |
HuggingFace transformers vulnerable to remote code execution CVE-2026-4372, GHSA-29pf-2h5f-8g72, PYSEC-2026-2289 | High | 0.7% | 24 May, 2026 | PyPI transformers |
Prefect has an Argument Injection issue CVE-2026-3515, GHSA-cw25-2p92-7f75, PYSEC-2026-2957 | High | 0.3% | 24 May, 2026 | PyPI prefect |
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads() CVE-2026-9291, GHSA-g697-2xrc-gc46, PYSEC-2026-2342 | High | 0.4% | 22 May, 2026 | PyPI amazon-braket-sdk |
aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler CVE-2026-70646, GHSA-7m8f-hgjq-8gc9, PYSEC-2026-3626 | High | 0.6% | 22 May, 2026 | PyPI aiosend |
LiteLLM allows a user to modify their own user_role via the /user/update endpoint CVE-2026-47102, GHSA-wpfp-gwwc-vwq6, PYSEC-2026-2600 | High | 0.7% | 21 May, 2026 | PyPI litellm |
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit CVE-2026-47101, GHSA-qrc4-49gv-mv9m, PYSEC-2026-2598 | High | 1.2% | 21 May, 2026 | PyPI litellm |
lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out CVE-2026-46517, GHSA-9xq9-36w5-q796, PYSEC-2026-2608 | High | 0.2% | 21 May, 2026 | PyPI lmdeploy |
LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization CVE-2026-46432, GHSA-m549-qq94-fvhg, PYSEC-2026-2609 | High | 0.1% | 21 May, 2026 | PyPI lmdeploy |
Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS CVE-2026-48989, GHSA-vrxg-gm77-7q5g, PYSEC-2026-3425 | High | 0.4% | 21 May, 2026 | PyPI windows-mcp |
wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None GHSA-mw8f-w6p8-xrf4 | High | Not scored | 20 May, 2026 | PyPI wger |
Diffusers: TOCTOU Trust Remote Code Bypass CVE-2026-45804, GHSA-7wx4-6vff-v64p, PYSEC-2026-2446 | High | 0.4% | 20 May, 2026 | PyPI diffusers |
Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments CVE-2026-27173, GHSA-524w-vq63-2xhf, PYSEC-2026-2365 | High | 0.2% | 19 May, 2026 | PyPI apache-airflow-providers-cncf-kubernetes |
SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser CVE-2026-46374, GHSA-73jc-5mrq-prw7, PYSEC-2026-210 | High | 0.3% | 19 May, 2026 | PyPI sqlfluff |
SQLFluff: Recursive Stack Overflow in Parser CVE-2026-46373, GHSA-wmhf-fqc8-vxhh, PYSEC-2026-209 | High | 0.3% | 19 May, 2026 | PyPI sqlfluff |
ModelScope is vulnerable to arbitrary code injection via a crafted module CVE-2025-51427, GHSA-fhhq-h4hg-549x, PYSEC-2026-2663 | High | 0.5% | 19 May, 2026 | PyPI modelscope |
MLFlow Creates a Temporary File With Insecure Permissions BIT-mlflow-2026-4137, CVE-2026-4137, GHSA-f2m9-wcf4-cwwx, PYSEC-2026-2655 | High | 0.2% | 18 May, 2026 | PyPI mlflow |
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text() CVE-2026-45553, GHSA-jfrm-rx66-g536, PYSEC-2026-2679 | High | 0.3% | 18 May, 2026 | PyPI nicegui |
CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion CVE-2026-45727, GHSA-mf33-gv72-w2h5, PYSEC-2026-2420 | High | 0.5% | 18 May, 2026 | PyPI cloakbrowser |
eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges GHSA-j5rm-v3vh-vx94 | High | Not scored | 18 May, 2026 | PyPI edumfa |
eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage GHSA-qq2p-4282-cfc5 | High | Not scored | 18 May, 2026 | PyPI edumfa |
Graphite Has a Pickle Deserialization Vulnerability GHSA-qw48-84f6-28gv | High | Not scored | 18 May, 2026 | PyPI graphitedb |
Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree CVE-2026-45539, GHSA-q5pp-gvjg-h7v4, PYSEC-2026-2377 | High | 0.7% | 15 May, 2026 | PyPI apm |
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator CVE-2026-44716, GHSA-3363-2ph6-35wh, PYSEC-2026-2877 | High | 0.4% | 15 May, 2026 | PyPI pipecat-ai |
MLflow: unauthenticated access to certain FastAPI routes BIT-mlflow-2026-2652, CVE-2026-2652, GHSA-75cm-x2w3-8mgf, PYSEC-2026-2221 | High | 20.8% | 15 May, 2026 | PyPI mlflow |
python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection CVE-2026-45370, GHSA-5v57-8rxj-3p2r, PYSEC-2026-3395 | High | 0.2% | 14 May, 2026 | PyPI utcp-cli |
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts CVE-2026-45675, GHSA-h3ww-q6xx-w7x3, PYSEC-2026-2730 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed CVE-2026-45672, GHSA-482j-2pq6-q5w4, PYSEC-2026-2698 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion CVE-2026-45671, GHSA-26g9-27vm-x3q8, PYSEC-2026-2692 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints CVE-2026-45402, GHSA-r472-mw7m-967f, PYSEC-2026-2752 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url CVE-2026-56398, GHSA-3wgj-c2hg-vm6q | High | 0.6% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958) CVE-2026-45401, GHSA-rh5x-h6pp-cjj6, PYSEC-2026-2755 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url` CVE-2026-45400, GHSA-8w7q-q5jp-jvgx, PYSEC-2026-2715 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption CVE-2026-45399, GHSA-8jjp-r2w2-4v22, PYSEC-2026-2714 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls CVE-2026-45398, GHSA-4g37-7p2c-38r9, PYSEC-2026-2699 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI's chat completion API allows tool restrictions to be bypassed CVE-2026-45350, GHSA-4pcg-253r-rf9w, PYSEC-2026-2700 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has Broken Access Control for Completions API CVE-2026-45349, GHSA-gfm2-xm6c-37qc, PYSEC-2026-2726 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal CVE-2026-45348, GHSA-fcjq-435v-jx94, PYSEC-2026-2994 | High | 0.2% | 14 May, 2026 | PyPI pyload-ng |
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) CVE-2026-45338, GHSA-24c9-2m8q-qhmh, PYSEC-2026-2691 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature CVE-2026-45331, GHSA-4v7r-f4w8-8972, PYSEC-2026-2702 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image CVE-2026-45314, GHSA-3856-3vxq-m6fc, PYSEC-2026-2694 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions CVE-2026-45315, GHSA-m8f9-9whg-f4xr, PYSEC-2026-2748 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path CVE-2026-8596, GHSA-7hh5-prp2-mfh5, PYSEC-2026-3059 | High | 0.6% | 14 May, 2026 | PyPI sagemaker |