Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
django CMS: Clipboard copy IDOR discloses unauthorized plugin content CVE-2026-54622, GHSA-4xfr-4p46-gc6p, PYSEC-2026-3820 | Medium | 0.4% | 20 Aug, 2026 | PyPI django-cms |
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl GHSA-mc9m-6fm9-pghc | Medium | Not scored | 20 Aug, 2026 | PyPI zoo-kcl crates.io kcl-lib |
Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service GHSA-jgvr-6x5w-hx5w | Medium | Not scored | 20 Aug, 2026 | PyPI zoo-kcl crates.io kcl-lib |
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) CVE-2026-54625, GHSA-fwjf-m4qw-9f2x, PYSEC-2026-3824 | Medium | 0.2% | 20 Aug, 2026 | PyPI django-cms |
django CMS: Plugin move endpoint allows cyclic reparenting (DoS) CVE-2026-54623, GHSA-8jj7-4v57-frf5, PYSEC-2026-3822 | High | 0.5% | 20 Aug, 2026 | PyPI django-cms |
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure CVE-2026-55253, GHSA-533j-2v4q-mw5h, PYSEC-2026-3859, PYSEC-2026-3860 | High | 0.5% | 20 Aug, 2026 | PyPI langgraph-checkpoint-mongodb PyPI langgraph-store-mongodb |
asteval has a Sandbox Escape via BaseException Subclasses CVE-2026-55244, GHSA-89v8-rhwq-hf77, PYSEC-2026-3807 | Medium | 0.2% | 20 Aug, 2026 | PyPI asteval |
asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter CVE-2026-102734, GHSA-9w56-46f6-3qhx | Medium | 0.1% | 20 Aug, 2026 | PyPI asteval |
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root CVE-2026-71492, GHSA-x8wg-4xgc-vr54, PYSEC-2026-3810 | Medium | 0.5% | 20 Aug, 2026 | PyPI banks |
unstructured: Server-Side Request Forgery in the URL-based partitioning CVE-2026-71428, GHSA-4mvj-m6j5-pmf7, PYSEC-2026-3930 | Critical | 0.4% | 20 Aug, 2026 | PyPI unstructured |
WebOb: Open redirect in Location header normalization via leading C0 control / space characters CVE-2026-54770, GHSA-6hx8-3wjj-gr8g, PYSEC-2026-3943 | Medium | 0.4% | 20 Aug, 2026 | PyPI webob |
aiosmtplib: STARTTLS response injection CVE-2026-55558, GHSA-vxj7-4xrp-5vr4, PYSEC-2026-3805 | Medium | 0.4% | 20 Aug, 2026 | PyPI aiosmtplib |
Malicious release: Malicious code in libasync (PyPI) MAL-2026-14308 | Malicious | Not scored | 19 Aug, 2026 | PyPI libasync |
Malicious release: Malicious code in rc4-secure (PyPI) MAL-2026-14306 | Malicious | Not scored | 19 Aug, 2026 | PyPI rc4-secure |
GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4) GHSA-p77j-g7h5-r2vw | High | Not scored | 19 Aug, 2026 | PyPI geolens |
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes) CVE-2026-53964, GHSA-w47q-945m-q9pc, PYSEC-2026-3830 | High | 0.5% | 19 Aug, 2026 | PyPI document-merge-service |
langgraph-api: Incomplete assistant authorization in LangGraph Server run creation CVE-2026-55236, GHSA-jfj5-wrj9-63x4, PYSEC-2026-3858 | Medium | 0.3% | 19 Aug, 2026 | PyPI langgraph-api |
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication CVE-2026-55235, GHSA-2c9q-c2q9-qgqv, PYSEC-2026-3857 | Medium | 0.4% | 19 Aug, 2026 | PyPI langgraph-api |
stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address CVE-2026-76239, GHSA-5p3m-vhh6-9236 | Medium | 0.3% | 19 Aug, 2026 | PyPI stigmem-node |
Malicious release: Malicious code in reqcrypt-dev (PyPI) MAL-2026-14274 | Malicious | Not scored | 19 Aug, 2026 | PyPI reqcrypt-dev |
Malicious release: Malicious code in deepface-weight (PyPI) MAL-2026-14158 | Malicious | Not scored | 18 Aug, 2026 | PyPI deepface-weight |
Malicious release: Malicious code in reqcrypt (PyPI) MAL-2026-14133 | Malicious | Not scored | 18 Aug, 2026 | PyPI reqcrypt |
Malicious release: Malicious code in deepface-weights (PyPI) MAL-2026-14132 | Malicious | Not scored | 18 Aug, 2026 | PyPI deepface-weights |
linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) CVE-2026-73974, GHSA-rh9c-rqvg-f7pr, PYSEC-2026-3682 | Medium | 0.2% | 18 Aug, 2026 | PyPI linuxfabrik-lib |
devpi-server may leak database contents CVE-2026-54723, GHSA-m5pq-69xg-vcq3, PYSEC-2026-3661 | Medium | 0.4% | 18 Aug, 2026 | PyPI devpi-server |
MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files CVE-2026-100845, GHSA-wg9g-w2j2-8pgr, PYSEC-2026-4020 | High | 0.2% | 18 Aug, 2026 | PyPI monai |
MONAI vulnerable to OS command injection CVE-2026-100844, GHSA-rghg-q7wp-9767, PYSEC-2026-4019 | High | 0.9% | 18 Aug, 2026 | PyPI MONAI PyPI monai |
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch CVE-2026-100843, GHSA-qxq5-qhx6-94qw, PYSEC-2026-4018 | High | 0.3% | 18 Aug, 2026 | PyPI monai |
Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it CVE-2026-71417, GHSA-pxmc-2ffp-8j67, PYSEC-2026-3678 | High | 0.1% | 18 Aug, 2026 | PyPI lemur |
Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False CVE-2026-71322, GHSA-4h97-p9wq-chqj, PYSEC-2026-3673 | Medium | 0.2% | 18 Aug, 2026 | PyPI lemur |
Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority CVE-2026-71317, GHSA-g7p5-89mh-248h, PYSEC-2026-3677 | Medium | 0.1% | 18 Aug, 2026 | PyPI lemur |
Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates CVE-2026-71308, GHSA-cfh6-pv5c-38jv, PYSEC-2026-3675 | High | 0.3% | 18 Aug, 2026 | PyPI lemur |
Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API CVE-2026-71307, GHSA-6c8m-q6g9-vrw3, PYSEC-2026-3674 | High | 0.3% | 18 Aug, 2026 | PyPI lemur |
Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist CVE-2026-71303, GHSA-v5rc-cpwc-cfpr, PYSEC-2026-3679 | High | 0.3% | 18 Aug, 2026 | PyPI lemur |
Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs CVE-2026-70666, GHSA-xpmj-wjcp-6pww, PYSEC-2026-3680 | High | 0.2% | 18 Aug, 2026 | PyPI lemur |
surfio has an out-of-bounds read CVE-2026-55211, GHSA-rcr2-hggw-43wm, PYSEC-2026-3701 | Critical | 0.7% | 18 Aug, 2026 | PyPI surfio |
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read CVE-2026-55209, GHSA-pr85-w493-9w3x, PYSEC-2026-3694 | Critical | 0.8% | 18 Aug, 2026 | PyPI resdata |
Malicious release: Malicious code in infogram-bot (PyPI) MAL-2026-14131 | Malicious | Not scored | 18 Aug, 2026 | PyPI infogram-bot |
Malicious release: Malicious code in httpz-requests (PyPI) MAL-2026-14130 | Malicious | Not scored | 18 Aug, 2026 | PyPI httpz-requests |
Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95) CVE-2026-70667, GHSA-f3qq-49m6-rw8f, PYSEC-2026-3676 | Medium | 0.2% | 18 Aug, 2026 | PyPI lemur |
MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads CVE-2026-68922, GHSA-8j49-mmcx-4mp5, PYSEC-2026-3689 | Medium | 0.5% | 18 Aug, 2026 | PyPI mobsf |
MobSF's CSRF checks not enforced after Django migration CVE-2026-68923, GHSA-3p54-567p-2wpr, PYSEC-2026-3688 | Medium | 0.3% | 18 Aug, 2026 | PyPI mobsf |
MobSF has SSRF port restriction bypass in assetlinks_check CVE-2026-68927, GHSA-95px-34x5-p37h, PYSEC-2026-3690 | Low | 0.3% | 18 Aug, 2026 | PyPI mobsf |
MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction CVE-2026-68924, GHSA-x768-8642-mmq9, PYSEC-2026-3691 | Medium | 0.6% | 18 Aug, 2026 | PyPI mobsf |
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data CVE-2026-55178, GHSA-p23g-mvhj-jh3j, PYSEC-2026-3662, PYSEC-2026-3663 | High | 0.6% | 18 Aug, 2026 | PyPI geolens PyPI geolens-cli npm @geolens/sdk |
Copyparty vulnerable to file/dirkey confusion CVE-2026-70657, GHSA-x5pq-m9p8-f4vx, PYSEC-2026-3660 | Medium | 0.3% | 18 Aug, 2026 | PyPI copyparty |
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) BIT-mlflow-2026-64849, CVE-2026-64849, GHSA-7gwp-5pfp-969j, PYSEC-2026-3687 | CriticalExploited | 10.0% | 17 Aug, 2026 | PyPI mlflow |
atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard CVE-2026-91987, GHSA-j659-8xh6-5pq5 | High | 0.5% | 17 Aug, 2026 | PyPI atomic-agents-stack |
atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE) CVE-2026-91988, GHSA-xhcr-cqfr-m3hv | Critical | 0.3% | 17 Aug, 2026 | PyPI atomic-agents-stack |
Malicious release: Malicious code in socks5901 (PyPI) MAL-2026-14100 | Malicious | Not scored | 17 Aug, 2026 | PyPI socks5901 |