Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits CVE-2026-40148, GHSA-f2h6-7xfr-xm8w, PYSEC-2026-2912 | Medium | 0.2% | 09 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) CVE-2026-40112, GHSA-cfg2-mxfj-j6pw, PYSEC-2026-2910 | Medium | 0.2% | 09 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users GHSA-9gjv-jvm7-vv2v | Medium | Not scored | 09 Apr, 2026 | PyPI gramps-webapi |
FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py CVE-2026-5974, GHSA-fcc8-4q7h-wvwc, PYSEC-2026-2639 | Medium | 2.5% | 09 Apr, 2026 | PyPI metagpt |
FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py CVE-2026-5973, GHSA-qw5f-qpq5-ppfg, PYSEC-2026-2641 | Medium | 2.5% | 09 Apr, 2026 | PyPI metagpt |
FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command CVE-2026-5972, GHSA-wp29-qmvj-frvp, PYSEC-2026-2644 | Medium | 2.6% | 09 Apr, 2026 | PyPI metagpt |
FoundationAgents MetaGPT vulnerable to eval injection CVE-2026-5971, GHSA-3ghp-8r47-4gj4, PYSEC-2026-2638 | Medium | 0.4% | 09 Apr, 2026 | PyPI metagpt |
MetaGPT has an Injection issue CVE-2026-5970, GHSA-g977-h85w-h2xj, PYSEC-2026-2640 | Medium | 0.4% | 09 Apr, 2026 | PyPI metagpt |
Apache Airflow has an authorization bypass in DagRun wait endpoint BIT-airflow-2026-34538, CVE-2026-34538, GHSA-r7vr-m4jw-r794, PYSEC-2026-21 | Medium | 0.7% | 09 Apr, 2026 | PyPI apache-airflow |
LangChain has incomplete f-string validation in prompt templates CVE-2026-40087, GHSA-926x-3r5x-gfhw, PYSEC-2026-2563 | Medium | 0.3% | 08 Apr, 2026 | PyPI langchain-core |
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs CVE-2026-39892, GHSA-p423-j2cm-9vmq, PYSEC-2026-36 | Medium | 0.7% | 08 Apr, 2026 | PyPI cryptography |
pretix: API leaks check-in data between events of the same organizer CVE-2026-5600, GHSA-wr8q-c73g-m7gp, PYSEC-2026-111 | Medium | 0.3% | 08 Apr, 2026 | PyPI pretix |
parisneo/lollms has an insufficient session expiration vulnerability CVE-2026-1163, GHSA-8jg2-726g-xh43, PYSEC-2026-2612 | Medium | 0.2% | 08 Apr, 2026 | PyPI lollms |
pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions CVE-2026-40071, GHSA-rfgh-63mg-8pwm, PYSEC-2026-2997 | Medium | 0.2% | 08 Apr, 2026 | PyPI pyload-ng |
lightrag-hku: JWT Algorithm Confusion Vulnerability CVE-2026-39413, GHSA-8ffj-4hx4-9pgf, PYSEC-2026-2592 | Medium | 0.2% | 08 Apr, 2026 | PyPI lightrag-hku |
justhtml: Mutation XSS with custom foreign-namespace sanitization policies CVE-2026-5751, GHSA-r758-8hxw-4845 | Medium | 0.3% | 08 Apr, 2026 | PyPI justhtml |
JWCrypto: JWE ZIP decompression bomb CVE-2026-39373, GHSA-fjrm-76x2-c4q4, PYSEC-2026-70 | Medium | 0.3% | 07 Apr, 2026 | PyPI jwcrypto |
OpenViking contains a missing authorization vulnerability in the task polling endpoints CVE-2026-22680, GHSA-h336-2wxm-pr6q, PYSEC-2026-2855 | Medium | 0.4% | 07 Apr, 2026 | PyPI OpenViking PyPI openviking |
pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass CVE-2026-35592, GHSA-mvwx-582f-56r7, PYSEC-2026-124 | Medium | 0.3% | 07 Apr, 2026 | PyPI pyload-ng |
pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng CVE-2026-35586, GHSA-ppvx-rwh9-7rj7, PYSEC-2026-123 | Medium | 0.1% | 07 Apr, 2026 | PyPI pyload-ng |
Django has potential DoS via MultiPartParser through crafted multipart uploads BIT-django-2026-33033, CVE-2026-33033, GHSA-5mf9-h53q-7mhq, PYSEC-2026-48 | Medium | 0.9% | 07 Apr, 2026 | PyPI Django PyPI django |
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint BIT-mlflow-2026-33866, CVE-2026-33866, GHSA-46r5-x6jq-v8g6, PYSEC-2026-94 | Medium | 0.4% | 07 Apr, 2026 | PyPI mlflow |
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface BIT-mlflow-2026-33865, CVE-2026-33865, GHSA-fh64-r2vc-xvhr, PYSEC-2026-93 | Medium | 0.2% | 07 Apr, 2026 | PyPI mlflow |
kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write CVE-2026-111170, CVE-2026-35492, GHSA-cjg8-h5qc-hrjv, PYSEC-2026-2545 | Medium | 0.4% | 06 Apr, 2026 | PyPI kedro-datasets |
web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling CVE-2026-111171, CVE-2026-40072, GHSA-5hr4-253g-cpx2, PYSEC-2026-3414 | Medium | 0.3% | 04 Apr, 2026 | PyPI web3 |
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing CVE-2026-34755, GHSA-pq5c-rjhq-qp7p, PYSEC-2026-144 | Medium | 0.5% | 03 Apr, 2026 | PyPI vllm |
vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url ` CVE-2026-34753, GHSA-pf3h-qjgv-vcpr, PYSEC-2026-3410 | Medium | 0.2% | 03 Apr, 2026 | PyPI vllm |
LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) CVE-2026-34052, GHSA-8mxq-7xr7-2fxj, PYSEC-2026-2533 | Medium | 0.3% | 03 Apr, 2026 | PyPI jupyterhub-ltiauthenticator |
JupyterHub has an Open Redirect Vulnerability BIT-jupyterhub-2026-33709, CVE-2026-33709, GHSA-3vff-hjqv-m7h8, PYSEC-2026-2188 | Medium | 0.2% | 03 Apr, 2026 | PyPI jupyterhub |
vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server CVE-2026-34756, GHSA-3mwp-wvh9-7528, PYSEC-2026-2298 | Medium | 0.4% | 03 Apr, 2026 | PyPI vllm |
D-Tale: Remote Code Execution through redis/shelf storage CVE-2026-35052, GHSA-436g-fhfc-9g5w, PYSEC-2026-2460 | Medium | 0.6% | 03 Apr, 2026 | PyPI dtale |
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode CVE-2026-34730, GHSA-hgjq-p8cr-gg4h, PYSEC-2026-2135 | Medium | 0.3% | 01 Apr, 2026 | PyPI copier |
Copier `_subdirectory` allows template root escape via parent-directory traversal CVE-2026-34726, GHSA-85v3-4m8g-hrh6, PYSEC-2026-2134 | Medium | 0.4% | 01 Apr, 2026 | PyPI copier |
AIOHTTP accepts duplicate Host headers CVE-2026-34525, GHSA-c427-h43c-vf67, PYSEC-2026-2103 | Medium | 0.3% | 01 Apr, 2026 | PyPI aiohttp |
AIOHTTP has a Multipart Header Size Bypass CVE-2026-34516, GHSA-m5qp-6w8w-w647, PYSEC-2026-2098 | Medium | 0.5% | 01 Apr, 2026 | PyPI aiohttp |
AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows CVE-2026-34515, GHSA-p998-jp59-783m, PYSEC-2026-2097 | Medium | 0.4% | 01 Apr, 2026 | PyPI aiohttp |
poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645 GHSA-5qvp-pr9f-2g2v | Medium | Not scored | 01 Apr, 2026 | PyPI poetry-plugin-tweak-dependencies-version |
c2cciutils affected by CVE-2022-40896 GHSA-qc22-xmq4-qg46 | Medium | Not scored | 01 Apr, 2026 | PyPI c2cciutils |
aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage CVE-2026-22815, GHSA-w2fm-2cpv-w7v5, PYSEC-2026-2094 | Medium | 0.5% | 01 Apr, 2026 | PyPI aiohttp |
ONNX: External Data Symlink Traversal CVE-2026-34447, GHSA-p433-9wv8-28xj, PYSEC-2026-104 | Medium | 0.3% | 01 Apr, 2026 | PyPI onnx |
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load CVE-2026-34446, GHSA-cmw6-hcpp-c6jp, PYSEC-2026-2241 | Medium | 0.2% | 01 Apr, 2026 | PyPI onnx |
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape CVE-2026-34452, GHSA-w828-4qhx-vxx3, PYSEC-2026-2115 | Medium | 0.1% | 31 Mar, 2026 | PyPI anthropic |
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-34450, GHSA-q5f5-3gjm-7mfm, PYSEC-2026-2114 | Medium | 0.1% | 31 Mar, 2026 | PyPI anthropic |
alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API CVE-2026-34400, GHSA-8prr-286p-4w7j, PYSEC-2026-2341 | Medium | 0.5% | 31 Mar, 2026 | PyPI alerta-server |
Nautobot: Management of users via REST API does not apply configured password validators CVE-2026-34203, GHSA-xmpv-j7p2-j873, PYSEC-2026-2224 | Medium | 0.3% | 31 Mar, 2026 | PyPI nautobot |
OpenStack Glance is affected by Server-Side Request Forgery (SSRF) CVE-2026-34881, GHSA-mc26-q38v-83gv, PYSEC-2026-2492 | Medium | 0.3% | 31 Mar, 2026 | PyPI glance |
Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange CVE-2026-32794, GHSA-wrpj-755p-x363, PYSEC-2026-2357 | Medium | 0.4% | 30 Mar, 2026 | PyPI apache-airflow |
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag CVE-2026-34231, GHSA-w7rv-gfp4-j9j3, PYSEC-2026-2279 | Medium | 0.2% | 30 Mar, 2026 | PyPI slippers |
OpenCC has an Out-of-bounds read when processing truncated UTF-8 input GHSA-7fqq-q52p-2jjg | Medium | Not scored | 29 Mar, 2026 | PyPI OpenCC PyPI opencc npm opencc |
python-ecdsa: Denial of Service via improper DER length validation in crafted private keys CVE-2026-33936, GHSA-9f5j-8jwj-x28g, PYSEC-2026-2467 | Medium | 0.5% | 27 Mar, 2026 | PyPI ecdsa |