Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pyaacv (PyPI) MAL-2024-11667 | Malicious | Not scored | 04 Sep, 2024 | PyPI pyaacv |
Malicious release: Malicious code in pycblines (PyPI) MAL-2024-11669 | Malicious | Not scored | 04 Sep, 2024 | PyPI pycblines |
Malicious release: Malicious code in pycordapi (PyPI) MAL-2024-11670 | Malicious | Not scored | 04 Sep, 2024 | PyPI pycordapi |
Malicious release: Malicious code in pydeobf (PyPI) MAL-2024-11671 | Malicious | Not scored | 04 Sep, 2024 | PyPI pydeobf |
Malicious release: Malicious code in pydllcfg (PyPI) MAL-2024-11672 | Malicious | Not scored | 04 Sep, 2024 | PyPI pydllcfg |
Malicious release: Malicious code in pykane (PyPI) MAL-2024-11673 | Malicious | Not scored | 04 Sep, 2024 | PyPI pykane |
Malicious release: Malicious code in pysleek (PyPI) MAL-2024-11676 | Malicious | Not scored | 04 Sep, 2024 | PyPI pysleek |
Malicious release: Malicious code in pysolara (PyPI) MAL-2024-11677 | Malicious | Not scored | 04 Sep, 2024 | PyPI pysolara |
Malicious release: Malicious code in pytkit (PyPI) MAL-2024-11684 | Malicious | Not scored | 04 Sep, 2024 | PyPI pytkit |
Malicious release: Malicious code in pytskcheck (PyPI) MAL-2024-11685 | Malicious | Not scored | 04 Sep, 2024 | PyPI pytskcheck |
Malicious release: Malicious code in pyvantq (PyPI) MAL-2024-11687 | Malicious | Not scored | 04 Sep, 2024 | PyPI pyvantq |
Malicious release: Malicious code in solaraund (PyPI) MAL-2024-11711 | Malicious | Not scored | 04 Sep, 2024 | PyPI solaraund |
Malicious release: Malicious code in websend (PyPI) MAL-2024-11749 | Malicious | Not scored | 04 Sep, 2024 | PyPI websend |
Malicious release: Malicious code in xsilyxd (PyPI) MAL-2024-11750 | Malicious | Not scored | 04 Sep, 2024 | PyPI xsilyxd |
Malicious release: Malicious code in pymatcha (PyPI) MAL-2024-12332 | Malicious | Not scored | 04 Sep, 2024 | PyPI pymatcha |
Malicious release: Malicious code in antibyfron (PyPI) MAL-2024-9940 | Malicious | Not scored | 04 Sep, 2024 | PyPI antibyfron |
Malicious release: Malicious code in artindex (PyPI) MAL-2024-9943 | Malicious | Not scored | 04 Sep, 2024 | PyPI artindex |
Malicious release: Malicious code in automsg (PyPI) MAL-2024-9948 | Malicious | Not scored | 04 Sep, 2024 | PyPI automsg |
Malicious release: Malicious code in dahood (PyPI) MAL-2024-9966 | Malicious | Not scored | 04 Sep, 2024 | PyPI dahood |
Indico has a Cross-Site-Scripting during account creation CVE-2024-45399, GHSA-rrqf-w74j-24ff, PYSEC-2024-90 | Medium | 0.4% | 04 Sep, 2024 | PyPI indico |
Flask-AppBuilder's login form allows browser to cache sensitive fields CVE-2024-45314, GHSA-fw5r-6m3x-rh7p, PYSEC-2026-1382 | Medium | 0.3% | 04 Sep, 2024 | PyPI flask-appbuilder |
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine CVE-2024-45053, GHSA-c34r-238x-f7qx, PYSEC-2026-1338 | High | 1.3% | 04 Sep, 2024 | PyPI ethyca-fides |
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication CVE-2024-45052, GHSA-2h46-8gf5-fmxv, PYSEC-2026-1331 | Medium | 0.6% | 04 Sep, 2024 | PyPI ethyca-fides |
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels GHSA-h4gh-qq45-vh27 | Medium | Not scored | 03 Sep, 2024 | PyPI cryptography |
Malicious release: Malicious code in pojang-resorter (PyPI) MAL-2024-11660 | Malicious | Not scored | 02 Sep, 2024 | PyPI pojang-resorter |
`spam` project on PyPI compromised, malicious releases made GHSA-2r6g-7r83-jg72 | High | Not scored | 30 Aug, 2024 | PyPI spam |
opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 GHSA-qr4w-53vh-m672 | High | Not scored | 30 Aug, 2024 | PyPI opencv-python |
opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 GHSA-cxjf-x6jp-p7mc | High | Not scored | 30 Aug, 2024 | PyPI opencv-contrib-python |
opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 GHSA-jh2j-j4j9-crg3 | High | Not scored | 30 Aug, 2024 | PyPI opencv-python-headless |
opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863 GHSA-w2pj-9cgh-mq2c | High | Not scored | 30 Aug, 2024 | PyPI opencv-contrib-python-headless |
gratient 0.5 contains credential harvesting code GHSA-xm4r-5rj9-2pg3 | High | Not scored | 30 Aug, 2024 | PyPI gratient |
`exotel` project on PyPI compromised, malicious release made GHSA-x6xg-3fj2-4pq3 | High | Not scored | 30 Aug, 2024 | PyPI exotel |
Malicious release: Malicious code in calculator-c08d6d50f5964131 (PyPI) MAL-2024-12229 | Malicious | Not scored | 30 Aug, 2024 | PyPI calculator-c08d6d50f5964131 |
Adyen APIs Library for Python timing attack vulnerability GHSA-f3q4-ggfp-jv34 | Medium | Not scored | 30 Aug, 2024 | PyPI Adyen PyPI adyen |
Malicious release: Malicious code in flophttp (PyPI) MAL-2024-10028 | Malicious | Not scored | 29 Aug, 2024 | PyPI flophttp |
Malicious release: Malicious code in modernreqs (PyPI) MAL-2024-10048 | Malicious | Not scored | 29 Aug, 2024 | PyPI modernreqs |
Malicious release: Malicious code in utilhttp (PyPI) MAL-2024-10184 | Malicious | Not scored | 29 Aug, 2024 | PyPI utilhttp |
Malicious release: Malicious code in assaulthimars (PyPI) MAL-2024-11531 | Malicious | Not scored | 29 Aug, 2024 | PyPI assaulthimars |
Malicious release: Malicious code in assulthimars (PyPI) MAL-2024-11532 | Malicious | Not scored | 29 Aug, 2024 | PyPI assulthimars |
Malicious release: Malicious code in asyncmodules (PyPI) MAL-2024-11533 | Malicious | Not scored | 29 Aug, 2024 | PyPI asyncmodules |
Malicious release: Malicious code in httpsmovements (PyPI) MAL-2024-11609 | Malicious | Not scored | 29 Aug, 2024 | PyPI httpsmovements |
Malicious release: Malicious code in crustyhttp (PyPI) MAL-2024-9264 | Malicious | Not scored | 29 Aug, 2024 | PyPI crustyhttp |
Malicious release: Malicious code in invokehttp (PyPI) MAL-2024-8726 | Malicious | Not scored | 29 Aug, 2024 | PyPI invokehttp |
HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering BIT-jupyter-base-notebook-2024-43805, BIT-jupyter-notebook-2024-43805, BIT-jupyterlab-2024-43805, CVE-2024-43805, GHSA-9q39-rmj3-p4r2, PYSEC-2026-1481, PYSEC-2026-2536 | High | 0.4% | 28 Aug, 2024 | PyPI jupyterlab PyPI notebook |
Malicious release: Malicious code in bitcommit (PyPI) MAL-2024-12219 | Malicious | Not scored | 27 Aug, 2024 | PyPI bitcommit |
Malicious release: Malicious code in c2 (PyPI) MAL-2024-12224 | Malicious | Not scored | 27 Aug, 2024 | PyPI c2 |
Taipy has a Session Cookie without Secure and HTTPOnly flags CVE-2024-47833, GHSA-r3jq-4r5c-j9hp, PYSEC-2024-168 | Medium | 0.3% | 27 Aug, 2024 | PyPI taipy |
Taipy 3.1.1 affected by CVEs on flask-core and pymongo GHSA-pp84-v3mw-gg4w | High | Not scored | 27 Aug, 2024 | PyPI taipy |
FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function CVE-2024-42818, GHSA-grqx-r2q2-j425, PYSEC-2026-1357 | Medium | 0.3% | 26 Aug, 2024 | PyPI fastapi-admin |
FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function CVE-2024-42816, GHSA-22xm-w7r2-834q, PYSEC-2026-1356 | Medium | 0.3% | 26 Aug, 2024 | PyPI fastapi-admin |