Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history CVE-2026-88002, GHSA-jqhh-cjmq-vmv6, PYSEC-2026-3879 | Medium | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets CVE-2026-88001, GHSA-5x7x-4c3c-qf5w, PYSEC-2026-3878 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree CVE-2026-88000, GHSA-3cgp-3cqx-j8w2, PYSEC-2026-3877 | Medium | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch CVE-2026-87999, GHSA-34r3-9m95-vq73, PYSEC-2026-4116 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion CVE-2026-87998, GHSA-2724-6cpj-gf3v, PYSEC-2026-4115 | High | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions CVE-2026-87997, GHSA-3pf7-q2g3-wj28, PYSEC-2026-4118 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader CVE-2026-87996, GHSA-4v28-j6q3-5m4r, PYSEC-2026-4120 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin CVE-2026-87995, GHSA-jmc6-2wr8-h3wj, PYSEC-2026-4123 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint CVE-2026-87994, GHSA-fmqh-xp37-5hr8, PYSEC-2026-4122 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends CVE-2026-87017, GHSA-pcvc-8vrv-8q6w, PYSEC-2026-4125 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite CVE-2026-87016, GHSA-wpmr-8h3q-fwj7, PYSEC-2026-4128 | High | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication CVE-2026-87015, GHSA-p78m-89r6-pgf7, PYSEC-2026-4124 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes CVE-2026-87014, GHSA-wjwr-xfp9-r66p, PYSEC-2026-4127 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle CVE-2026-87013, GHSA-8r35-5x5r-hv74, PYSEC-2026-4121 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value CVE-2026-87012, GHSA-v39v-59xw-j98g, PYSEC-2026-4126 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout CVE-2026-87011, GHSA-3g9q-v48f-hh9w, PYSEC-2026-4117 | High | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Malicious release: Malicious code in bq-sdist-probe-vrp (PyPI) MAL-2026-16099 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-sdist-probe-vrp |
Malicious release: Malicious code in bq-build-probe-vrp-2026 (PyPI) MAL-2026-16098 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-build-probe-vrp-2026 |
weasyprint Has Server-Side Request Forgery (SSRF) CVE-2026-55073, GHSA-jf6q-chmf-3h3v, PYSEC-2026-3940 | Medium | 0.2% | 09 Sep, 2026 | PyPI weasyprint |
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list` CVE-2026-54529, GHSA-ccg5-9c8w-xh6v, PYSEC-2026-3922 | Medium | 0.4% | 09 Sep, 2026 | PyPI sqladmin |
GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server CVE-2026-50024, GHSA-hr3m-4qwq-3mgc, PYSEC-2026-3835 | Medium | 0.5% | 09 Sep, 2026 | PyPI githacker |
Malicious release: Malicious code in websetup (PyPI) MAL-2026-16121 | Malicious | Not scored | 09 Sep, 2026 | PyPI websetup |
GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing CVE-2026-87819, GHSA-g5vv-9gxw-82hx, PYSEC-2026-3984 | High | 0.5% | 09 Sep, 2026 | PyPI GitPython PyPI gitpython |
GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle CVE-2026-87818, GHSA-rw58-wc66-99g4, GHSA-whh4-5q6c-9v3x, PYSEC-2026-3983 | High | 0.4% | 09 Sep, 2026 | PyPI gitpython |
GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution CVE-2026-87817, GHSA-239g-whfq-7xj9, PYSEC-2026-3982 | High | 0.4% | 09 Sep, 2026 | PyPI gitpython |
Malicious release: Malicious code in databricks-webapp-navigation-homepage (PyPI) MAL-2026-16080 | Malicious | Not scored | 09 Sep, 2026 | PyPI databricks-webapp-navigation-homepage |
Snowflake drivers writes sensitive information to logs CVE-2026-86597, GHSA-qqj6-54q6-cxv6, GO-2026-6665, PYSEC-2026-4301 | Medium | 0.1% | 08 Sep, 2026 | Go github.com/snowflakedb/gosnowflake Go github.com/snowflakedb/gosnowflake/v2 Maven net.snowflake:snowflake-jdbc Maven net.snowflake:snowflake-jdbc-fips +3 more |
Malicious release: Malicious code in telegram-helper (PyPI) MAL-2026-16017 | Malicious | Not scored | 07 Sep, 2026 | PyPI telegram-helper |
Malicious release: Malicious code in cv-train (PyPI) MAL-2026-16016 | Malicious | Not scored | 07 Sep, 2026 | PyPI cv-train |
Malicious release: Malicious code in dac-tools (PyPI) MAL-2026-15938 | Malicious | Not scored | 06 Sep, 2026 | PyPI dac-tools |
Malicious release: Malicious code in minecraftmodes (PyPI) MAL-2026-15937 | Malicious | Not scored | 06 Sep, 2026 | PyPI minecraftmodes |
Malicious release: Malicious code in trongridew (PyPI) MAL-2026-15936 | Malicious | Not scored | 05 Sep, 2026 | PyPI trongridew |
Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit GHSA-3xjw-9qpc-53mh, PYSEC-2026-4010 | Not scored | 05 Sep, 2026 | PyPI local-operator | |
Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator GHSA-22mg-8gw7-636x, PYSEC-2026-4009 | Not scored | 05 Sep, 2026 | PyPI local-operator | |
Malicious release: Malicious code in proxycer (PyPI) MAL-2026-15935 | Malicious | Not scored | 05 Sep, 2026 | PyPI proxycer |
Malicious release: Malicious code in dbt-sa-cli (PyPI) MAL-2026-15934 | Malicious | Not scored | 05 Sep, 2026 | PyPI dbt-sa-cli |
Malicious release: Malicious code in houdus (PyPI) MAL-2026-15933 | Malicious | Not scored | 04 Sep, 2026 | PyPI houdus |
Malicious release: Malicious code in chartkit-core (PyPI) MAL-2026-15932 | Malicious | Not scored | 04 Sep, 2026 | PyPI chartkit-core |
Malicious release: Malicious code in metricboxlite (PyPI) MAL-2026-15931 | Malicious | Not scored | 04 Sep, 2026 | PyPI metricboxlite |
Malicious release: Malicious code in olympuslib (PyPI) MAL-2026-15928 | Malicious | Not scored | 04 Sep, 2026 | PyPI olympuslib |
Malicious release: Malicious code in pymaas (PyPI) MAL-2026-15929 | Malicious | Not scored | 04 Sep, 2026 | PyPI pymaas |
Malicious release: Malicious code in tpu-raiden-jax (PyPI) MAL-2026-15930 | Malicious | Not scored | 04 Sep, 2026 | PyPI tpu-raiden-jax |
Malicious release: Malicious code in qoeoe (PyPI) MAL-2026-15927 | Malicious | Not scored | 04 Sep, 2026 | PyPI qoeoe |
Malicious release: Malicious code in astlsi (PyPI) MAL-2026-15926 | Malicious | Not scored | 04 Sep, 2026 | PyPI astlsi |
Malicious release: Malicious code in timeweave (PyPI) MAL-2026-15910 | Malicious | Not scored | 04 Sep, 2026 | PyPI timeweave |
Malicious release: Malicious code in tsshare (PyPI) MAL-2026-16044 | Malicious | Not scored | 04 Sep, 2026 | PyPI tsshare |
Malicious release: Malicious code in asti (PyPI) MAL-2026-15864 | Malicious | Not scored | 03 Sep, 2026 | PyPI asti |
Malicious release: Malicious code in py-1requests (PyPI) MAL-2026-15861 | Malicious | Not scored | 03 Sep, 2026 | PyPI py-1requests |
Malicious release: Malicious code in py-2equests (PyPI) MAL-2026-15862 | Malicious | Not scored | 03 Sep, 2026 | PyPI py-2equests |
Malicious release: Malicious code in py-0requests (PyPI) MAL-2026-15860 | Malicious | Not scored | 03 Sep, 2026 | PyPI py-0requests |