Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open WebUI has stored XSS via the HTML renedering view CVE-2026-45303, GHSA-4vrc-m9ch-6m3r, PYSEC-2026-2704 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file CVE-2026-45301, GHSA-r8wh-8m7r-fh33, PYSEC-2026-2753 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override CVE-2026-44541, GHSA-5qrq-9645-g5g2, PYSEC-2026-2470 | High | 0.3% | 14 May, 2026 | PyPI ethyca-fides |
Synapse CPU starvation (Denial of Service) CVE-2026-45078, GHSA-8q93-326v-3m7g, PYSEC-2026-191 | High | 0.1% | 14 May, 2026 | PyPI matrix-synapse |
wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager CVE-2026-43978, GHSA-9qpr-vc49-hqg2, PYSEC-2026-3420 | High | 0.3% | 14 May, 2026 | PyPI wger |
wger Vulnerable to IDOR: Authenticated Users Can Read Any User's Private Workout Session Data via Template Routine API CVE-2026-43977, GHSA-cj9g-27ph-4cgv, PYSEC-2026-3421 | High | 0.3% | 14 May, 2026 | PyPI wger |
wger has an Uncontrolled Resource Consumption issue CVE-2026-86255, GHSA-v25j-wqcw-fvhj | High | 0.4% | 13 May, 2026 | PyPI wger |
Nautobot: GitRepository.current_head field should not be writable through REST API CVE-2026-44798, GHSA-p3hx-pwf3-j8wr, PYSEC-2026-2228 | High | 0.3% | 13 May, 2026 | PyPI nautobot |
Nautobot: Webhook definitions could be used for server-side request forgery (SSRF) CVE-2026-44797, GHSA-c35q-vxrp-ph26, PYSEC-2026-2227 | High | 0.2% | 13 May, 2026 | PyPI nautobot |
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134, GHSA-3644-q5cj-c5c7, PYSEC-2026-2555, PYSEC-2026-2560, PYSEC-2026-2582 | High | 0.2% | 13 May, 2026 | PyPI langchain PyPI langchain-classic PyPI langsmith npm langsmith |
UltraJSON has a Memory Leak in ujson.dump() on Write Failure CVE-2026-44660, GHSA-c38f-wx89-p2xg, PYSEC-2026-2293 | High | 0.4% | 12 May, 2026 | PyPI ujson |
mem0 server lacks authentication and authorization controls for its memory management API endpoints CVE-2026-31240, GHSA-jfv9-68m5-gjjr, PYSEC-2026-2635 | High | 0.4% | 12 May, 2026 | PyPI mem0ai |
Superduper: Remote code execution via unsafe eval in superduper query parsing CVE-2026-31225, GHSA-2799-6g5r-mmc7, PYSEC-2026-3077 | High | 0.4% | 12 May, 2026 | PyPI superduper-framework |
Snorkel MultitaskClassifier.load uses an unsafe torch.load CVE-2026-31224, GHSA-gpx5-7xm4-229w, PYSEC-2026-3070 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel BaseLabeler.load uses an unsafe pickle.load CVE-2026-31223, GHSA-fq92-qc8f-482v, PYSEC-2026-3069 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel Trainer.load uses an unsafe torch.load CVE-2026-31222, GHSA-78cp-f66x-qmh5, PYSEC-2026-3068 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization CVE-2026-31221, GHSA-75m9-98v2-hjpm, PYSEC-2026-3043, PYSEC-2026-3972 | High | 0.4% | 12 May, 2026 | PyPI lightning PyPI pytorch-lightning |
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem BIT-mlflow-2026-2614, CVE-2026-2614, GHSA-42h5-h8qh-vv9v, PYSEC-2026-2654 | High | 3.7% | 11 May, 2026 | PyPI mlflow |
MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability BIT-mlflow-2026-2393, CVE-2026-2393, GHSA-65h7-c7c4-mghx, PYSEC-2026-2219 | High | 0.3% | 11 May, 2026 | PyPI mlflow |
flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism CVE-2026-31253, GHSA-7g5w-pq96-8c5w, PYSEC-2026-2477 | High | 0.2% | 11 May, 2026 | PyPI flash-attn PyPI flash_attn |
Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31248, GHSA-9f4q-q82q-4359, PYSEC-2026-2454 | High | 0.3% | 11 May, 2026 | PyPI docling |
pgAdmin 4 File Manager has symbolic-link path traversal CVE-2026-7819, GHSA-hr4r-fwpv-c95j, PYSEC-2026-2868 | High | 0.3% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager CVE-2026-7818, GHSA-4rhg-h8f2-v4jm, PYSEC-2026-2865 | High | 0.1% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities CVE-2026-7817, GHSA-p58c-q354-6c4f, PYSEC-2026-2871 | High | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: OS command injection vulnerability in Import/Export query export CVE-2026-7816, GHSA-j74f-g7vx-fh4x, PYSEC-2026-2870 | High | 1.4% | 11 May, 2026 | PyPI pgadmin4 |
SQL injection vulnerability in pgAdmin 4 Maintenance Tool CVE-2026-7815, GHSA-hp84-p2gq-6fvr, PYSEC-2026-2867 | High | 0.5% | 11 May, 2026 | PyPI pgadmin4 |
Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31247, GHSA-cr42-rg2m-mq4q, PYSEC-2026-2455 | High | 0.4% | 11 May, 2026 | PyPI docling |
python-liquid: Absolute paths escape filesystem loader search path CVE-2026-45017, GHSA-8p4x-wr7x-3788, PYSEC-2026-192 | High | 0.3% | 11 May, 2026 | PyPI python-liquid |
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API CVE-2026-44432, GHSA-mf9v-mfxr-j63j, PYSEC-2026-142 | High | 0.7% | 11 May, 2026 | PyPI urllib3 |
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects CVE-2026-44431, GHSA-qccp-gfcp-xxvc, PYSEC-2026-141 | High | 0.3% | 11 May, 2026 | PyPI urllib3 |
GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration CVE-2026-44971, GHSA-587r-mc96-6f2p, PYSEC-2026-2505 | High | 0.2% | 11 May, 2026 | PyPI guarddog |
Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043) CVE-2026-44346, GHSA-w2pm-x38x-jp44, PYSEC-2026-190 | High | 0.3% | 11 May, 2026 | PyPI bentoml |
BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043) CVE-2026-44345, GHSA-78f9-r8mh-4xm2, PYSEC-2026-189 | High | 0.3% | 11 May, 2026 | PyPI bentoml |
Open WebUI has inconsistent authorization controls within memories API CVE-2026-44570, GHSA-hmjq-crxp-7rjw, PYSEC-2026-2733 | High | 0.3% | 11 May, 2026 | PyPI open-webui |
Open WebUI's Insecure Message Access Breaks Authorization CVE-2026-44569, GHSA-jxwr-g6r6-j3fx, PYSEC-2026-2746 | High | 0.3% | 11 May, 2026 | PyPI open-webui |
Open WebUI Arbitrary File Write, Delete via Path Traversal CVE-2026-44565, GHSA-j3fw-wc48-29g3, PYSEC-2026-2737 | High | 0.5% | 11 May, 2026 | PyPI open-webui |
Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter CVE-2021-47935, GHSA-444r-2whx-3685, PYSEC-2026-131 | High | 0.9% | 10 May, 2026 | PyPI sentry |
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath CVE-2026-67326, GHSA-mv93-w799-cj2w, PYSEC-2026-3980 | High | 0.3% | 08 May, 2026 | PyPI GitPython PyPI gitpython |
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists CVE-2026-44843, GHSA-pjwx-r37v-7724, PYSEC-2026-2564 | High | 0.4% | 08 May, 2026 | PyPI langchain-core |
Open WebUI has Improper Authorization Control CVE-2026-44567, GHSA-4vg5-rp28-gvjf, PYSEC-2026-2703 | High | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS in Excel file preview CVE-2026-44549, GHSA-jwf8-pv5p-vhmc, PYSEC-2026-2744 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI CVE-2026-44209, GHSA-gphh-9q3h-jgpp, PYSEC-2026-2390 | High | 0.4% | 08 May, 2026 | PyPI banks |
Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite CVE-2026-44554, GHSA-7r82-qhg4-6wvj, PYSEC-2026-2710 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI's responses passthrough endpoint lacks access control authorization CVE-2026-44556, GHSA-hp5m-24vp-vq2q, PYSEC-2026-2734 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining CVE-2026-44555, GHSA-9vvh-qmjx-p4q8, PYSEC-2026-2719 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning CVE-2026-44552, GHSA-3x8w-4f7p-xxc2, PYSEC-2026-2696 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access CVE-2026-44553, GHSA-45m8-cpm2-3v65, PYSEC-2026-2697 | High | 0.3% | 08 May, 2026 | PyPI open-webui |
open-webui Vulnerable to Stored XSS via Model Description CVE-2026-44721, GHSA-gf5m-wcrh-7928, PYSEC-2026-2725 | High | 0.3% | 08 May, 2026 | PyPI open-webui npm open-webui |
justhtml introduces denial-of-service hardening CVE-2026-4671, GHSA-r8cj-3554-33mr | High | 0.7% | 08 May, 2026 | PyPI justhtml |
gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense GHSA-52cq-7v8r-62c6 | High | Not scored | 08 May, 2026 | PyPI gmaps-mcp |