Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MobSF vulnerable to Open Redirect in Login Redirect CVE-2024-41955, GHSA-8m9j-2f32-2vx4, PYSEC-2026-1669 | Medium | 1.0% | 31 Jul, 2024 | PyPI mobsf |
PheonixAppAPI has visible Encoding Maps CVE-2024-41951, GHSA-258h-f687-4226, PYSEC-2026-1779 | Medium | 0.2% | 31 Jul, 2024 | PyPI PheonixAppAPI PyPI pheonixappapi |
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE CVE-2024-41950, GHSA-hx9v-6r9f-w677, PYSEC-2026-1447 | High | 1.2% | 31 Jul, 2024 | PyPI haystack-ai |
Weave server API vulnerable to arbitrary file leak CVE-2024-7340, GHSA-r49h-6qxq-624f, PYSEC-2026-2035 | High | 5.0% | 31 Jul, 2024 | PyPI weave |
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.json` and `ds_config_chatbot.json`. This issue arises due to improper validation of file paths, enabl CVE-2024-6255, PYSEC-2024-73 | Critical | 13.7% | 31 Jul, 2024 | PyPI chuanhuchatgpt |
TensorFlow has segfault in array_ops.upper_bound BIT-tensorflow-2023-33976, CVE-2023-33976, GHSA-gjh7-xx4r-x345, PYSEC-2026-1962, PYSEC-2026-3190, PYSEC-2026-3331 | High | 0.4% | 30 Jul, 2024 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Malicious release: Malicious code in kongstrong (PyPI) MAL-2024-10039 | Malicious | Not scored | 29 Jul, 2024 | PyPI kongstrong |
Malicious release: Malicious code in strongkong (PyPI) MAL-2024-10168 | Malicious | Not scored | 29 Jul, 2024 | PyPI strongkong |
Malicious release: Malicious code in solgpt (PyPI) MAL-2024-10166 | Malicious | Not scored | 29 Jul, 2024 | PyPI solgpt |
Aim Stored Cross-site Scripting Vulnerability CVE-2024-6578, GHSA-p9f2-jg9w-cx69, PYSEC-2026-1092 | Medium | 0.3% | 29 Jul, 2024 | PyPI aim |
Twisted vulnerable to HTML injection in HTTP redirect body CVE-2024-41810, GHSA-cf56-g6w6-pqq2, PYSEC-2024-75 | Medium | 1.2% | 29 Jul, 2024 | PyPI twisted |
twisted.web has disordered HTTP pipeline response CVE-2024-41671, GHSA-c8m8-j448-xjx7, PYSEC-2026-1992 | High | 0.9% | 29 Jul, 2024 | PyPI twisted |
Malicious release: Malicious code in a-oder (PyPI) MAL-2024-12186 | Malicious | Not scored | 28 Jul, 2024 | PyPI a-oder |
Malicious release: Malicious code in ebe (PyPI) MAL-2024-12262 | Malicious | Not scored | 28 Jul, 2024 | PyPI ebe |
Malicious release: Malicious code in ebell (PyPI) MAL-2024-12263 | Malicious | Not scored | 28 Jul, 2024 | PyPI ebell |
Malicious release: Malicious code in soal (PyPI) MAL-2024-12345 | Malicious | Not scored | 28 Jul, 2024 | PyPI soal |
Malicious release: Malicious code in soali (PyPI) MAL-2024-12346 | Malicious | Not scored | 28 Jul, 2024 | PyPI soali |
Malicious release: Malicious code in graphcore-cloud-tools (PyPI) MAL-2024-10032 | Malicious | Not scored | 26 Jul, 2024 | PyPI graphcore-cloud-tools |
Malicious release: Malicious code in manojmacpy (PyPI) MAL-2024-10040 | Malicious | Not scored | 26 Jul, 2024 | PyPI manojmacpy |
Malicious release: Malicious code in this-is-poc-fortesting-dontinstall-12345 (PyPI) MAL-2024-10174 | Malicious | Not scored | 26 Jul, 2024 | PyPI this-is-poc-fortesting-dontinstall-12345 |
Malicious release: Malicious code in blab111 (PyPI) MAL-2024-10236 | Malicious | Not scored | 26 Jul, 2024 | PyPI blab111 |
Malicious release: Malicious code in 123bla (PyPI) MAL-2024-10238 | Malicious | Not scored | 26 Jul, 2024 | PyPI 123bla |
Malicious release: Malicious code in debug-toolbar (PyPI) MAL-2024-10239 | Malicious | Not scored | 26 Jul, 2024 | PyPI debug-toolbar |
Malicious release: Malicious code in nvidia-clara-sim (PyPI) MAL-2024-10315 | Malicious | Not scored | 26 Jul, 2024 | PyPI nvidia-clara-sim |
Malicious release: Malicious code in some-random-package-33 (PyPI) MAL-2024-10895 | Malicious | Not scored | 26 Jul, 2024 | PyPI some-random-package-33 |
Malicious release: Malicious code in aiopbotocore (PyPI) MAL-2024-11519 | Malicious | Not scored | 26 Jul, 2024 | PyPI aiopbotocore |
Malicious release: Malicious code in akh-py (PyPI) MAL-2024-11520 | Malicious | Not scored | 26 Jul, 2024 | PyPI akh-py |
Malicious release: Malicious code in appsec-script-py (PyPI) MAL-2024-11523 | Malicious | Not scored | 26 Jul, 2024 | PyPI appsec-script-py |
Malicious release: Malicious code in arnold-toolbox (PyPI) MAL-2024-11525 | Malicious | Not scored | 26 Jul, 2024 | PyPI arnold-toolbox |
Malicious release: Malicious code in chain00x (PyPI) MAL-2024-11555 | Malicious | Not scored | 26 Jul, 2024 | PyPI chain00x |
Malicious release: Malicious code in check-codeowners (PyPI) MAL-2024-11556 | Malicious | Not scored | 26 Jul, 2024 | PyPI check-codeowners |
Malicious release: Malicious code in cmdb-worker-pckg (PyPI) MAL-2024-11558 | Malicious | Not scored | 26 Jul, 2024 | PyPI cmdb-worker-pckg |
Malicious release: Malicious code in golden-gates (PyPI) MAL-2024-11602 | Malicious | Not scored | 26 Jul, 2024 | PyPI golden-gates |
Malicious release: Malicious code in hawzebisdzazf (PyPI) MAL-2024-11605 | Malicious | Not scored | 26 Jul, 2024 | PyPI hawzebisdzazf |
Malicious release: Malicious code in layoutspecs (PyPI) MAL-2024-11624 | Malicious | Not scored | 26 Jul, 2024 | PyPI layoutspecs |
Malicious release: Malicious code in matlibplot (PyPI) MAL-2024-11630 | Malicious | Not scored | 26 Jul, 2024 | PyPI matlibplot |
Malicious release: Malicious code in matplotlibp (PyPI) MAL-2024-11631 | Malicious | Not scored | 26 Jul, 2024 | PyPI matplotlibp |
Malicious release: Malicious code in optimux (PyPI) MAL-2024-11649 | Malicious | Not scored | 26 Jul, 2024 | PyPI optimux |
Malicious release: Malicious code in oracle-tools (PyPI) MAL-2024-11650 | Malicious | Not scored | 26 Jul, 2024 | PyPI oracle-tools |
Malicious release: Malicious code in orion-algo-extrapol (PyPI) MAL-2024-11651 | Malicious | Not scored | 26 Jul, 2024 | PyPI orion-algo-extrapol |
Malicious release: Malicious code in pckaging (PyPI) MAL-2024-11655 | Malicious | Not scored | 26 Jul, 2024 | PyPI pckaging |
Malicious release: Malicious code in pd-py-cli (PyPI) MAL-2024-11656 | Malicious | Not scored | 26 Jul, 2024 | PyPI pd-py-cli |
Malicious release: Malicious code in platform-harness-ecr-configmap (PyPI) MAL-2024-11659 | Malicious | Not scored | 26 Jul, 2024 | PyPI platform-harness-ecr-configmap |
Malicious release: Malicious code in puffionerlolpo2131 (PyPI) MAL-2024-11665 | Malicious | Not scored | 26 Jul, 2024 | PyPI puffionerlolpo2131 |
Malicious release: Malicious code in pysbark (PyPI) MAL-2024-11675 | Malicious | Not scored | 26 Jul, 2024 | PyPI pysbark |
Malicious release: Malicious code in python-drgn-commons-all (PyPI) MAL-2024-11678 | Malicious | Not scored | 26 Jul, 2024 | PyPI python-drgn-commons-all |
Malicious release: Malicious code in python-drgn-commons-kafka (PyPI) MAL-2024-11679 | Malicious | Not scored | 26 Jul, 2024 | PyPI python-drgn-commons-kafka |
Malicious release: Malicious code in python-drgn-commons-metrics (PyPI) MAL-2024-11680 | Malicious | Not scored | 26 Jul, 2024 | PyPI python-drgn-commons-metrics |
Malicious release: Malicious code in python-drgn-commons-notebooks (PyPI) MAL-2024-11681 | Malicious | Not scored | 26 Jul, 2024 | PyPI python-drgn-commons-notebooks |
Malicious release: Malicious code in python-drgn-commons-pandas (PyPI) MAL-2024-11682 | Malicious | Not scored | 26 Jul, 2024 | PyPI python-drgn-commons-pandas |