Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Django vulnerable to Denial of Service BIT-django-2024-38875, CVE-2024-38875, GHSA-qg2p-9jwr-mmqf, PYSEC-2024-56 | High | 1.2% | 10 Jul, 2024 | PyPI Django PyPI django |
Django vulnerable to user enumeration attack BIT-django-2024-39329, CVE-2024-39329, GHSA-x7q2-wr7g-xqmf, PYSEC-2024-57 | Medium | 0.9% | 10 Jul, 2024 | PyPI Django PyPI django |
Django Path Traversal vulnerability BIT-django-2024-39330, CVE-2024-39330, GHSA-9jmf-237g-qf46, PYSEC-2024-58 | High | 1.0% | 10 Jul, 2024 | PyPI Django PyPI django |
Django vulnerable to Denial of Service BIT-django-2024-39614, CVE-2024-39614, GHSA-f6f8-9mx6-9mx2, PYSEC-2024-59 | High | 28.6% | 10 Jul, 2024 | PyPI Django PyPI django |
Malicious release: Malicious code in deepseek-api (PyPI) MAL-2024-12251 | Malicious | Not scored | 09 Jul, 2024 | PyPI deepseek-api |
Malicious release: Malicious code in hugchats (PyPI) MAL-2024-12289 | Malicious | Not scored | 09 Jul, 2024 | PyPI hugchats |
Malicious release: Malicious code in openai-py3 (PyPI) MAL-2024-12319 | Malicious | Not scored | 09 Jul, 2024 | PyPI openai-py3 |
Malicious release: Malicious code in pystlete (PyPI) MAL-2024-10125 | Malicious | Not scored | 09 Jul, 2024 | PyPI pystlete |
Malicious package. Exfiltrated secrets to a target server. PYSEC-2024-55 | Not scored | 09 Jul, 2024 | PyPI cipherbcrypt | |
zipp Denial of Service vulnerability CVE-2024-5569, GHSA-jfmj-5v4g-7637, PYSEC-2026-2074 | Medium | 0.2% | 09 Jul, 2024 | PyPI zipp |
Aim denial of service vulnerability CVE-2024-6227, GHSA-36h2-g4c8-9xcm, PYSEC-2026-1081 | High | 0.6% | 08 Jul, 2024 | PyPI aim |
Khoj Open Redirect Vulnerability in Login Page GHSA-564j-v29w-rqr6 | Medium | Not scored | 08 Jul, 2024 | PyPI khoj-assistant |
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors GHSA-3v33-3wmw-3785 | Low | Not scored | 08 Jul, 2024 | PyPI yt-dlp |
Malicious release: Malicious code in transformars (PyPI) MAL-2024-12365 | Malicious | Not scored | 07 Jul, 2024 | PyPI transformars |
Malicious release: Malicious code in discord-embedbuilder (PyPI) MAL-2024-12256 | Malicious | Not scored | 06 Jul, 2024 | PyPI discord-embedbuilder |
Malicious release: Malicious code in whoisbuild (PyPI) MAL-2024-12370 | Malicious | Not scored | 06 Jul, 2024 | PyPI whoisbuild |
Malicious release: Malicious code in better-gradient (PyPI) MAL-2024-9949 | Malicious | Not scored | 06 Jul, 2024 | PyPI better-gradient |
Vanna vulnerable to SQL Injection CVE-2024-5753, GHSA-mwxm-35f8-6vg2, PYSEC-2026-2002 | High | 0.6% | 05 Jul, 2024 | PyPI vanna |
Certifi removes GLOBALTRUST root certificate CVE-2024-39689, GHSA-248v-346w-9cwc, PYSEC-2024-230 | High | 1.0% | 05 Jul, 2024 | PyPI certifi |
Malicious release: Malicious code in incaperror (PyPI) MAL-2025-41690 | Malicious | Not scored | 05 Jul, 2024 | PyPI incaperror |
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access CVE-2024-32498, GHSA-r4v4-w9pv-6fph, PYSEC-2026-1708, PYSEC-2026-2414, PYSEC-2026-2493 | High | 0.8% | 05 Jul, 2024 | PyPI cinder PyPI glance PyPI nova |
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL CVE-2024-31223, GHSA-53q7-4874-24qg, PYSEC-2026-1334 | Medium | 1.1% | 03 Jul, 2024 | PyPI ethyca-fides |
Malicious release: Malicious code in python-guild (PyPI) MAL-2024-10133 | Malicious | Not scored | 03 Jul, 2024 | PyPI python-guild |
Malicious release: Malicious code in sol-structs (PyPI) MAL-2024-10161, SNYK-PYTHON-SOLSTRUCTS-7578264 | Malicious | Not scored | 03 Jul, 2024 | PyPI sol-structs |
Malicious release: Malicious code in raydium (PyPI) MAL-2024-12336 | Malicious | Not scored | 03 Jul, 2024 | PyPI raydium |
Malicious release: Malicious code in raydium-sdk (PyPI) MAL-2024-12337 | Malicious | Not scored | 03 Jul, 2024 | PyPI raydium-sdk |
Malicious release: Malicious code in sol-instruct (PyPI) MAL-2024-12347 | Malicious | Not scored | 03 Jul, 2024 | PyPI sol-instruct |
Malicious release: Malicious code in spl-types (PyPI) MAL-2024-12349 | Malicious | Not scored | 03 Jul, 2024 | PyPI spl-types |
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js CVE-2024-38537, GHSA-cvw4-c69g-7v7m, PYSEC-2026-1339 | Critical | 1.4% | 02 Jul, 2024 | PyPI ethyca-fides |
yt-dlp File system modification and RCE through improper file-extension sanitization CVE-2024-38519, GHSA-79w7-vh3h-8g4j, PYSEC-2026-2065 | High | 0.3% | 02 Jul, 2024 | PyPI yt-dlp |
Malicious release: Malicious code in text-adventure-game (PyPI) MAL-2024-10172 | Malicious | Not scored | 01 Jul, 2024 | PyPI text-adventure-game |
Weblate vulnerable to improper sanitization of project backups CVE-2024-39303, GHSA-jfgp-674x-6q4p, PYSEC-2026-2041 | Medium | 0.3% | 01 Jul, 2024 | PyPI Weblate PyPI weblate |
Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py CVE-2024-39236, GHSA-9v2f-6vcg-3hgv, PYSEC-2024-274 | Critical | 0.9% | 01 Jul, 2024 | PyPI Gradio PyPI gradio |
Reflected Cross-Site Scripting (XSS) in zenml CVE-2024-5062, GHSA-3434-hc3m-8mmm, PYSEC-2024-176 | Medium | 0.4% | 30 Jun, 2024 | PyPI zenml |
Malicious release: Malicious code in zlibxjson (PyPI) MAL-2024-10220 | Malicious | Not scored | 29 Jun, 2024 | PyPI zlibxjson |
Malicious release: Malicious code in etherreeum (PyPI) MAL-2024-10000 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherreeum |
Malicious release: Malicious code in etherreum (PyPI) MAL-2024-10001 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherreum |
Malicious release: Malicious code in etherreumm (PyPI) MAL-2024-10002 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherreumm |
Malicious release: Malicious code in etherrium (PyPI) MAL-2024-10003 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherrium |
Malicious release: Malicious code in etherriuum (PyPI) MAL-2024-10004 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherriuum |
Malicious release: Malicious code in etherriuumm (PyPI) MAL-2024-10005 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherriuumm |
Malicious release: Malicious code in etheruem (PyPI) MAL-2024-10006 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheruem |
Malicious release: Malicious code in etheruemm (PyPI) MAL-2024-10007 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheruemm |
Malicious release: Malicious code in etheruim (PyPI) MAL-2024-10008 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheruim |
Malicious release: Malicious code in etherum (PyPI) MAL-2024-10009 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherum |
Malicious release: Malicious code in etherumm (PyPI) MAL-2024-10010 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherumm |
Malicious release: Malicious code in etherun (PyPI) MAL-2024-10011 | Malicious | Not scored | 28 Jun, 2024 | PyPI etherun |
Malicious release: Malicious code in etheruum (PyPI) MAL-2024-10012 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheruum |
Malicious release: Malicious code in etheum (PyPI) MAL-2024-10013 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheum |
Malicious release: Malicious code in etheurm (PyPI) MAL-2024-10014 | Malicious | Not scored | 28 Jun, 2024 | PyPI etheurm |