Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
pretix Stored Cross-site Scripting vulnerability CVE-2024-8113, GHSA-45rp-q25w-4426, PYSEC-2024-180 | High | 0.3% | 23 Aug, 2024 | PyPI pretix |
Malicious release: Malicious code in bananaholder (PyPI) MAL-2024-12213 | Malicious | Not scored | 22 Aug, 2024 | PyPI bananaholder |
Malicious release: Malicious code in audit-themis-i18n (PyPI) MAL-2024-12210 | Malicious | Not scored | 22 Aug, 2024 | PyPI audit-themis-i18n |
Malicious release: Malicious code in byted-rtc-robot-api-v2 (PyPI) MAL-2024-12222 | Malicious | Not scored | 22 Aug, 2024 | PyPI byted-rtc-robot-api-v2 |
Malicious release: Malicious code in byterec-models (PyPI) MAL-2024-12223 | Malicious | Not scored | 22 Aug, 2024 | PyPI byterec-models |
Malicious release: Malicious code in kmvn-ekjvnbwkhjbewv (PyPI) MAL-2024-12298 | Malicious | Not scored | 22 Aug, 2024 | PyPI kmvn-ekjvnbwkhjbewv |
Malicious release: Malicious code in subsys-counter (PyPI) MAL-2024-12353 | Malicious | Not scored | 22 Aug, 2024 | PyPI subsys-counter |
Malicious release: Malicious code in tiktok-session-lite-sdk (PyPI) MAL-2024-12364 | Malicious | Not scored | 22 Aug, 2024 | PyPI tiktok-session-lite-sdk |
Malicious release: Malicious code in ttat-api (PyPI) MAL-2024-12366 | Malicious | Not scored | 22 Aug, 2024 | PyPI ttat-api |
Malicious release: Malicious code in ttat-api-test (PyPI) MAL-2024-12367 | Malicious | Not scored | 22 Aug, 2024 | PyPI ttat-api-test |
Malicious release: Malicious code in byted-tbs (PyPI) MAL-2024-9957 | Malicious | Not scored | 22 Aug, 2024 | PyPI byted-tbs |
LlamaIndex includes an exec call for `import {cls_name}` CVE-2024-45201, GHSA-fxc2-8m62-m85x, PYSEC-2024-192, PYSEC-2026-395 | Critical | 0.5% | 22 Aug, 2024 | PyPI llama-index PyPI llama-index-core |
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users CVE-2024-8072, GHSA-cgrq-wvfj-v28j, PYSEC-2026-1598 | Medium | 0.6% | 22 Aug, 2024 | PyPI mage-ai |
Apache Airflow Cross-site Scripting Vulnerability BIT-airflow-2024-41937, CVE-2024-41937, GHSA-w7cp-g8v7-r54m, PYSEC-2024-181 | Medium | 1.7% | 21 Aug, 2024 | PyPI apache-airflow |
Potential access to sensitive URLs via CKAN extensions (SSRF) CVE-2024-43371, GHSA-g9ph-j5vj-f8wm, PYSEC-2026-1252 | Medium | 0.4% | 21 Aug, 2024 | PyPI ckan |
CKAN has Cross-site Scripting vector in the Datatables view plugin CVE-2024-41675, GHSA-r3jc-vhf4-6v32, PYSEC-2026-1253 | Medium | 0.4% | 21 Aug, 2024 | PyPI ckan |
CKAN may leak Solr credentials via error message in package_search action CVE-2024-41674, GHSA-2rqw-cfhc-35fh, PYSEC-2026-1248 | Medium | 0.4% | 21 Aug, 2024 | PyPI ckan |
Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature) CVE-2024-43396, GHSA-cf72-vg59-4j4h, PYSEC-2026-1492 | Medium | 0.5% | 20 Aug, 2024 | PyPI khoj |
LF Edge eKuiper has a SQL Injection in sqlKvStore CVE-2024-43406, GHSA-r5ph-4jxm-6j9p, GO-2024-3078, PYSEC-2024-72 | High | 0.9% | 20 Aug, 2024 | Go github.com/lf-edge/ekuiper PyPI ekuiper |
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files CVE-2024-43399, GHSA-4hh3-vj32-gr6j, PYSEC-2026-1665 | Critical | 1.0% | 19 Aug, 2024 | PyPI mobsf |
Malicious release: Malicious code in assistant-threader (PyPI) MAL-2024-12208 | Malicious | Not scored | 19 Aug, 2024 | PyPI assistant-threader |
Malicious release: Malicious code in assisting-threading (PyPI) MAL-2024-12209 | Malicious | Not scored | 19 Aug, 2024 | PyPI assisting-threading |
Malicious release: Malicious code in thethreadingassistant (PyPI) MAL-2024-12362 | Malicious | Not scored | 19 Aug, 2024 | PyPI thethreadingassistant |
Malicious release: Malicious code in threading-assistant (PyPI) MAL-2024-12363 | Malicious | Not scored | 19 Aug, 2024 | PyPI threading-assistant |
Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default CVE-2024-6221, GHSA-hxwh-jpp2-84pm, PYSEC-2024-260, PYSEC-2024-71 | High | 0.7% | 18 Aug, 2024 | PyPI Flask-Cors PyPI flask-cors |
Malicious release: Malicious code in uconst (PyPI) MAL-2024-10179 | Malicious | Not scored | 14 Aug, 2024 | PyPI uconst |
Malicious release: Malicious code in aiotrans (PyPI) MAL-2024-9938 | Malicious | Not scored | 14 Aug, 2024 | PyPI aiotrans |
WebOb's location header normalization during redirect leads to open redirect CVE-2024-42353, GHSA-mg3v-6m49-jhp3, PYSEC-2024-188 | Medium | 0.6% | 14 Aug, 2024 | PyPI webob |
Path traveral in Streamlit on windows CVE-2024-42474, GHSA-rxff-vr5r-8cj5, PYSEC-2024-153 | Medium | 0.6% | 12 Aug, 2024 | PyPI streamlit |
Malicious release: Malicious code in audio-separator-fork (PyPI) MAL-2024-9947 | Malicious | Not scored | 11 Aug, 2024 | PyPI audio-separator-fork |
Malicious release: Malicious code in artifact-lab-3-package-02f73e0e (PyPI) MAL-2024-10473 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-02f73e0e |
Malicious release: Malicious code in artifact-lab-3-package-736f752d (PyPI) MAL-2024-10541 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-736f752d |
Malicious release: Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI) MAL-2024-11527 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-b1ec2b9f |
Malicious release: Malicious code in artifact-lab-3-package-f9dafccc (PyPI) MAL-2024-11528 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-f9dafccc |
Malicious release: Malicious code in artifact-lab-3-package (PyPI) MAL-2024-12192 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package |
Malicious release: Malicious code in artifact-lab-3-package-153c1c1a (PyPI) MAL-2024-12193 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-153c1c1a |
Malicious release: Malicious code in artifact-lab-3-package-1b4d0db5 (PyPI) MAL-2024-12194 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-1b4d0db5 |
Malicious release: Malicious code in artifact-lab-3-package-1f7a39bc (PyPI) MAL-2024-12195 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-1f7a39bc |
Malicious release: Malicious code in artifact-lab-3-package-2387a34d (PyPI) MAL-2024-12196 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-2387a34d |
Malicious release: Malicious code in artifact-lab-3-package-2387cbf7 (PyPI) MAL-2024-12197 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-2387cbf7 |
Malicious release: Malicious code in artifact-lab-3-package-34b21b63 (PyPI) MAL-2024-12198 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-34b21b63 |
Malicious release: Malicious code in artifact-lab-3-package-3ccf47e8 (PyPI) MAL-2024-12199 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-3ccf47e8 |
Malicious release: Malicious code in artifact-lab-3-package-438d82fc (PyPI) MAL-2024-12200 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-438d82fc |
Malicious release: Malicious code in artifact-lab-3-package-77d0c154 (PyPI) MAL-2024-12201 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-77d0c154 |
Malicious release: Malicious code in artifact-lab-3-package-b9485a2f (PyPI) MAL-2024-12202 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-b9485a2f |
Malicious release: Malicious code in artifact-lab-3-package-d7d52d45 (PyPI) MAL-2024-12203 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-d7d52d45 |
Malicious release: Malicious code in artifact-lab-3-package-e46d5661 (PyPI) MAL-2024-12204 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-e46d5661 |
Malicious release: Malicious code in artifact-lab-3-package-e7ffd2ef (PyPI) MAL-2024-12205 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-e7ffd2ef |
Malicious release: Malicious code in artifact-lab-3-package-f70fc6dd (PyPI) MAL-2024-12206 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-f70fc6dd |
Malicious release: Malicious code in artifact-lab-3-package-f0727516 (PyPI) MAL-2024-8016 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-f0727516 |