Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in artifact-lab-3-package-392c6acd (PyPI) MAL-2024-8017 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-392c6acd |
Malicious release: Malicious code in artifact-lab-3-package-7e532784 (PyPI) MAL-2024-8022 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-7e532784 |
Malicious release: Malicious code in artifact-lab-3-package-b6920ef4 (PyPI) MAL-2024-8023 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-b6920ef4 |
Malicious release: Malicious code in artifact-lab-3-package-b55680cd (PyPI) MAL-2024-8024 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-b55680cd |
Malicious release: Malicious code in artifact-lab-3-package-9fde789f (PyPI) MAL-2024-8026 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-9fde789f |
Malicious release: Malicious code in artifact-lab-3-package-2b6a4744 (PyPI) MAL-2024-8044 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-2b6a4744 |
Malicious release: Malicious code in artifact-lab-3-package-ccd28738 (PyPI) MAL-2024-8045 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-ccd28738 |
Malicious release: Malicious code in artifact-lab-3-package-89883da3 (PyPI) MAL-2024-8046 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-89883da3 |
Malicious release: Malicious code in artifact-lab-3-package-6e10193e (PyPI) MAL-2024-8047 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-6e10193e |
Malicious release: Malicious code in artifact-lab-3-package-76a351f5 (PyPI) MAL-2024-8048 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-76a351f5 |
Malicious release: Malicious code in artifact-lab-3-package-3eef6c2c (PyPI) MAL-2024-8051 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-3eef6c2c |
Malicious release: Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI) MAL-2024-8914 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-4c04b1a2 |
Malicious release: Malicious code in artifact-lab-3-package-db7d716a (PyPI) MAL-2024-8927 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-db7d716a |
Malicious release: Malicious code in lab-3-package-438d82fc (PyPI) MAL-2024-9271 | Malicious | Not scored | 10 Aug, 2024 | PyPI lab-3-package-438d82fc |
Malicious release: Malicious code in artifact-lab-3-package-24ddbc49 (PyPI) MAL-2024-9451 | Malicious | Not scored | 10 Aug, 2024 | PyPI artifact-lab-3-package-24ddbc49 |
Malicious release: Malicious code in jupiter-helper (PyPI) MAL-2024-10037 | Malicious | Not scored | 10 Aug, 2024 | PyPI jupiter-helper |
Malicious release: Malicious code in jupiterhelper (PyPI) MAL-2024-10038 | Malicious | Not scored | 10 Aug, 2024 | PyPI jupiterhelper |
Malicious release: Malicious code in juphelp (PyPI) MAL-2024-12293 | Malicious | Not scored | 10 Aug, 2024 | PyPI juphelp |
Malicious release: Malicious code in juphelper (PyPI) MAL-2024-12294 | Malicious | Not scored | 10 Aug, 2024 | PyPI juphelper |
Malicious release: Malicious code in jupihelp (PyPI) MAL-2024-12295 | Malicious | Not scored | 10 Aug, 2024 | PyPI jupihelp |
Malicious release: Malicious code in jupphelp (PyPI) MAL-2024-12296 | Malicious | Not scored | 10 Aug, 2024 | PyPI jupphelp |
Malicious release: Malicious code in jupsolhelp (PyPI) MAL-2024-12297 | Malicious | Not scored | 10 Aug, 2024 | PyPI jupsolhelp |
Malicious release: Malicious code in aiohttp-libscss (PyPI) MAL-2024-9937 | Malicious | Not scored | 10 Aug, 2024 | PyPI aiohttp-libscss |
Withdrawn Advisory: Litestar has an environment Variable injection in `docs-preview.yml` workflow CVE-2024-42370, GHSA-4hq2-rpgc-r8r7 | High | 0.7% | 09 Aug, 2024 | PyPI litestar |
Malicious release: Malicious code in ethercheck (PyPI) MAL-2024-12264 | Malicious | Not scored | 09 Aug, 2024 | PyPI ethercheck |
In aiohttp, compressed files as symlinks are not protected from path traversal CVE-2024-42367, GHSA-jwhx-xcg6-8xhj, PYSEC-2026-1108 | Medium | 0.7% | 09 Aug, 2024 | PyPI aiohttp |
JupyterHub has a privilege escalation vulnerability with the `admin:users` scope BIT-jupyterhub-2024-41942, CVE-2024-41942, GHSA-9x4q-3gxw-849f, PYSEC-2024-200 | High | 0.6% | 08 Aug, 2024 | PyPI jupyterhub |
Open WebUI Stored Cross-Site Scripting Vulnerability CVE-2024-6706, GHSA-5jp3-wp5v-5363, PYSEC-2026-1722 | Medium | 0.7% | 07 Aug, 2024 | PyPI open-webui |
Pulp incorrectly assigns RBAC permissions in tasks that create objects CVE-2024-7143, GHSA-9m5j-4xx9-44j9, PYSEC-2026-1808 | High | 0.6% | 07 Aug, 2024 | PyPI pulpcore |
Django memory consumption vulnerability BIT-django-2024-41989, CVE-2024-41989, GHSA-jh75-99hh-qvx9, PYSEC-2024-67 | High | 1.2% | 07 Aug, 2024 | PyPI Django PyPI django |
Django vulnerable to a denial-of-service attack BIT-django-2024-41990, CVE-2024-41990, GHSA-795c-9xpc-xw6g, PYSEC-2024-68 | High | 1.3% | 07 Aug, 2024 | PyPI Django PyPI django |
Django vulnerable to denial-of-service attack BIT-django-2024-41991, CVE-2024-41991, GHSA-r836-hh6v-rg5g, PYSEC-2024-69 | High | 1.0% | 07 Aug, 2024 | PyPI Django PyPI django |
Django SQL injection vulnerability BIT-django-2024-42005, CVE-2024-42005, GHSA-pv4p-cwwg-4rph, PYSEC-2024-70 | Critical | 1.5% | 07 Aug, 2024 | PyPI Django PyPI django |
Malicious release: Malicious code in netfetcher (PyPI) MAL-2024-10049, SNYK-PYTHON-NETFETCHER-7924845 | Malicious | Not scored | 07 Aug, 2024 | PyPI netfetcher |
Malicious release: Malicious code in pyfetcher (PyPI) MAL-2024-10115, SNYK-PYTHON-PYFETCHER-7924844 | Malicious | Not scored | 07 Aug, 2024 | PyPI pyfetcher |
Malicious release: Malicious code in pyfetcher-vaaai (PyPI) MAL-2024-10116 | Malicious | Not scored | 07 Aug, 2024 | PyPI pyfetcher-vaaai |
Malicious release: Malicious code in mecit1 (PyPI) MAL-2024-10042 | Malicious | Not scored | 05 Aug, 2024 | PyPI mecit1 |
Malicious release: Malicious code in mecit2 (PyPI) MAL-2024-10043 | Malicious | Not scored | 05 Aug, 2024 | PyPI mecit2 |
Malicious release: Malicious code in mecit3 (PyPI) MAL-2024-10044 | Malicious | Not scored | 05 Aug, 2024 | PyPI mecit3 |
Malicious release: Malicious code in advdef01 (PyPI) MAL-2024-12189 | Malicious | Not scored | 05 Aug, 2024 | PyPI advdef01 |
Malicious release: Malicious code in paquete-5 (PyPI) MAL-2024-12321 | Malicious | Not scored | 05 Aug, 2024 | PyPI paquete-5 |
Malicious release: Malicious code in crypt0graphyy (PyPI) MAL-2025-5108 | Malicious | Not scored | 05 Aug, 2024 | PyPI crypt0graphyy |
Malicious release: Malicious code in fsspecc (PyPI) MAL-2025-5114 | Malicious | Not scored | 05 Aug, 2024 | PyPI fsspecc |
Malicious release: Malicious code in s3ffs (PyPI) MAL-2025-5131 | Malicious | Not scored | 05 Aug, 2024 | PyPI s3ffs |
Malicious release: Malicious code in whee11 (PyPI) MAL-2025-5143 | Malicious | Not scored | 05 Aug, 2024 | PyPI whee11 |
Malicious release: Malicious code in whel (PyPI) MAL-2025-5144 | Malicious | Not scored | 05 Aug, 2024 | PyPI whel |
Malicious release: Malicious code in gandon-pidar1 (PyPI) MAL-2025-928 | Malicious | Not scored | 05 Aug, 2024 | PyPI gandon-pidar1 |
Malicious release: Malicious code in reqests-2 (PyPI) MAL-2024-10154 | Malicious | Not scored | 05 Aug, 2024 | PyPI reqests-2 |
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability CVE-2024-42447, GHSA-62qf-qm3g-fvcw, PYSEC-2024-265, PYSEC-2026-1146 | Critical | 0.9% | 05 Aug, 2024 | PyPI apache-airflow PyPI apache-airflow-providers-fab |
openstack-heat may disclose sensitive information CVE-2024-7319, GHSA-2fqr-cx7q-3ph8, PYSEC-2026-1750 | Medium | 0.4% | 02 Aug, 2024 | PyPI openstack-heat |