Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Django Potential account hijack via password reset form CVE-2019-19844, GHSA-vfq6-hq5r-27r6, PYSEC-2019-16 | Critical | 53.6% | 18 Dec, 2019 | PyPI Django PyPI django |
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow CVE-2019-16778, GHSA-844w-j86r-4x2j, PYSEC-2019-209, PYSEC-2019-227, PYSEC-2019-234 | Critical | 0.8% | 16 Dec, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Authentication in requests-kerberos CVE-2014-8650, GHSA-wh37-37xw-54hr, PYSEC-2019-200 | Critical | 3.6% | 15 Dec, 2019 | PyPI requests-kerberos |
Inadequate Encryption Strength in python-keystoneclient CVE-2013-2166, GHSA-c3xq-cj8f-7829, PYSEC-2019-197 | Critical | 2.1% | 10 Dec, 2019 | PyPI python-keystoneclient |
Insufficient Verification of Data Authenticity in python-keystoneclient CVE-2013-2167, GHSA-9vg3-cf92-h2h7, PYSEC-2019-161 | Critical | 2.0% | 10 Dec, 2019 | PyPI python-keystoneclient |
Eval injection in Supybot/Limnoria CVE-2019-19010, GHSA-6g88-vr3v-76mf, PYSEC-2019-102 | Critical | 2.3% | 16 Nov, 2019 | PyPI limnoria |
Improper Verification of Cryptographic Signature in matrix-synapse CVE-2019-18835, GHSA-cppw-2mf8-qpm5, PYSEC-2019-186 | Critical | 0.9% | 08 Nov, 2019 | PyPI matrix-synapse |
ReviewBoard and Djblets library are vulnerable to code execution CVE-2013-4409, GHSA-58h8-44mg-r43x, PYSEC-2019-175, PYSEC-2026-524 | Critical | 3.6% | 04 Nov, 2019 | PyPI ReviewBoard PyPI djblets PyPI reviewboard |
python-docutils allows insecure usage of temporary files CVE-2009-5042, GHSA-cg75-6938-wx58, PYSEC-2019-176 | Critical | 1.4% | 31 Oct, 2019 | PyPI docutils |
XML Injection in ReportLab CVE-2019-17626, GHSA-qpg2-vx7j-3869, PYSEC-2019-117 | Critical | 9.5% | 16 Oct, 2019 | PyPI reportlab |
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. CVE-2019-17545, PYSEC-2019-241 | Critical | 2.6% | 14 Oct, 2019 | PyPI gdal |
OpenStack Octavia Amphora-Agent not requiring Client-Certificate CVE-2019-17134, GHSA-r4v4-3jj7-jc29, PYSEC-2026-433 | Critical | 2.3% | 08 Oct, 2019 | PyPI octavia |
Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts CVE-2019-17206, GHSA-vrcf-g539-x6h3, PYSEC-2019-116 | Critical | 3.2% | 05 Oct, 2019 | PyPI rediswrapper |
py-lmdb Invalid write operation CVE-2019-16224, GHSA-9q62-r72g-pvv7, PYSEC-2019-236 | Critical | 1.8% | 11 Sep, 2019 | PyPI lmdb |
py-lmdb Invalid write operation CVE-2019-16225, GHSA-c74c-p4p7-r8q5, PYSEC-2019-237 | Critical | 1.8% | 11 Sep, 2019 | PyPI lmdb |
py-lmdb Invalid write operation CVE-2019-16227, GHSA-pf3p-v9xp-mrvf, PYSEC-2019-239 | Critical | 2.0% | 11 Sep, 2019 | PyPI lmdb |
OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning CVE-2019-15753, GHSA-mcpw-cp35-p3h8, PYSEC-2026-440 | Critical | 2.6% | 28 Aug, 2019 | PyPI os-vif |
Potential memory corruption in arrayfire CVE-2018-20998, GHSA-69fv-gw6g-8ccg, PYSEC-2019-144, RUSTSEC-2018-0011 | Critical | 1.7% | 26 Aug, 2019 | PyPI arrayfire crates.io arrayfire |
Undirectional routing wasn't respected in some cases in Mitogen CVE-2019-15149, GHSA-8rf6-w2mx-4xjh, PYSEC-2019-104 | Critical | 1.6% | 18 Aug, 2019 | PyPI mitogen |
SQL Injection in Django CVE-2019-14234, GHSA-6r97-cj55-9hrq, PYSEC-2019-13 | Critical | 47.7% | 09 Aug, 2019 | PyPI Django PyPI django |
Openstack ironic-inspector has SQL injection vulnerability in node_cache CVE-2019-10141, GHSA-c7fc-cm7p-92r2, PYSEC-2019-152 | Critical | 2.5% | 30 Jul, 2019 | PyPI ironic-inspector |
SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function CVE-2019-1010259, GHSA-h8xp-h3jf-wv4v, PYSEC-2019-119 | Critical | 1.9% | 18 Jul, 2019 | PyPI salt |
Improper Restriction of XML External Entity Reference in ladon CVE-2019-1010268, GHSA-vg35-vc9f-q7x2, PYSEC-2019-184 | Critical | 5.9% | 18 Jul, 2019 | PyPI ladon |
Improper Verification of Cryptographic Signature in django-rest-registration CVE-2019-13177, GHSA-p3w6-jcg4-52xh, PYSEC-2019-20 | Critical | 1.6% | 02 Jul, 2019 | PyPI django-rest-registration |
LinOTP replay vulnerability with auto resynchronization enabled for TOTP token CVE-2019-12887, GHSA-rqg8-xjp2-pg9w, PYSEC-2019-103 | Critical | 1.2% | 27 Jun, 2019 | PyPI LinOTP PyPI linotp |
Openstack Magnum Unsafe Credential Handling CVE-2016-7404, GHSA-793v-r35j-9rp9, PYSEC-2026-437 | Critical | 1.9% | 21 Jun, 2019 | PyPI openstack-magnum |
Improper Certificate Validation in Twisted CVE-2019-12855, GHSA-65rm-h285-5cc5, PYSEC-2019-129 | Critical | 1.8% | 16 Jun, 2019 | PyPI twisted |
aubio Buffer Overflow vulnerability CVE-2018-19800, GHSA-grmf-4fq6-2r79, PYSEC-2019-162 | Critical | 2.2% | 07 Jun, 2019 | PyPI aubio |
Improper Authentication in Buildbot CVE-2019-12300, GHSA-g86p-hgx5-2pfh, PYSEC-2019-6 | Critical | 1.8% | 23 May, 2019 | PyPI buildbot |
Integer Overflow or Wraparound in Google TensorFlow CVE-2018-7575, GHSA-mw6v-crh8-8533, PYSEC-2019-205, PYSEC-2019-223, PYSEC-2019-230 | Critical | 0.6% | 24 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Python-saml allows manipulation of SAML data without invalidation of cryptographic signature CVE-2017-11427, GHSA-j8j8-348v-wfm3, PYSEC-2019-198 | Critical | 4.4% | 17 Apr, 2019 | PyPI python-saml |
Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10 CVE-2019-10844, GHSA-4q2w-rw7m-xqw6, PYSEC-2019-107 | Critical | 1.6% | 04 Apr, 2019 | PyPI nnabla |
ipycache is vulnerable to Code Injection CVE-2019-7539, GHSA-gcm4-q2pg-xw89, PYSEC-2019-180 | Critical | 1.6% | 21 Mar, 2019 | PyPI ipycache |
Donfig Command Injection in collect_yaml method CVE-2019-7537, GHSA-3qr5-h7w4-3gx3, PYSEC-2019-21 | Critical | 3.4% | 21 Mar, 2019 | PyPI donfig |
splunk-sdk does not properly verify untrusted TLS server certificates CVE-2019-5729, GHSA-f58w-649r-qjr9, PYSEC-2019-203 | Critical | 0.7% | 21 Mar, 2019 | PyPI splunk-sdk |
SQLAlchemy vulnerable to SQL Injection via order_by parameter CVE-2019-7164, GHSA-887w-45rq-vxgf, PYSEC-2019-123 | Critical | 3.5% | 20 Feb, 2019 | PyPI SQLAlchemy PyPI sqlalchemy |
SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548, GHSA-38fc-9xqv-7f7q, PYSEC-2019-124 | Critical | 1.8% | 06 Feb, 2019 | PyPI SQLAlchemy PyPI sqlalchemy |
Apache Airflow vulnerable to XSS CVE-2017-17836, GHSA-9gqg-3fxr-9hv7, PYSEC-2019-149 | Critical | 3.2% | 23 Jan, 2019 | PyPI apache-airflow |
Numpy Deserialization of Untrusted Data CVE-2019-6446, GHSA-9fq2-x9r6-wfmf, PYSEC-2019-108 | Critical | 17.5% | 16 Jan, 2019 | PyPI numpy |
modulemd uses an unsafe function for processing externally provided data CVE-2017-1002157, GHSA-jhjh-ghwx-6h7r, PYSEC-2019-153 | Critical | 2.9% | 10 Jan, 2019 | PyPI modulemd |
Code injection in Danijar Definitions CVE-2018-20325, GHSA-v4x4-98cg-wr4g, PYSEC-2018-82 | Critical | 3.5% | 21 Dec, 2018 | PyPI definitions |
Code injection in ymlref CVE-2018-20133, GHSA-8r8j-xvfj-36f9, PYSEC-2018-103 | Critical | 1.8% | 17 Dec, 2018 | PyPI ymlref |
Exposure of Sensitive Information to an Unauthorized Actor in urllib3 CVE-2018-20060, GHSA-www2-v7xj-xrc6, PYSEC-2018-32 | Critical | 4.5% | 11 Dec, 2018 | PyPI urllib3 |
Deserialization of Untrusted Data in superset CVE-2018-8021, GHSA-vxp9-wv2f-wqmw, PYSEC-2018-74 | Critical | 53.4% | 07 Nov, 2018 | PyPI superset |
SaltStack Salt Remote command execution and incorrect access control when using salt-api CVE-2018-15751, GHSA-x549-r7m8-gv63, PYSEC-2018-30 | Critical | 4.9% | 24 Oct, 2018 | PyPI salt |
Mercurial Out-of-bounds Read vulnerability CVE-2018-17983, GHSA-p575-cf9h-wv42, PYSEC-2018-91 | Critical | 2.0% | 04 Oct, 2018 | PyPI mercurial |
Cobbler Improper Validation of Security Tokens CVE-2018-1000226, GHSA-f88q-22g8-frcg, PYSEC-2026-315 | Critical | 12.6% | 20 Aug, 2018 | PyPI cobbler |
Cobbler has Exposed Dangerous Method or Function CVE-2018-10931, GHSA-8787-63px-3m23, PYSEC-2026-313 | Critical | 68.1% | 09 Aug, 2018 | PyPI cobbler |
SQL Injection in pycsw CVE-2016-8640, GHSA-hg4c-rgvm-964g, PYSEC-2018-98 | Critical | 2.3% | 01 Aug, 2018 | PyPI pycsw |
Ansible fails to properly sanitize fact variables sent from the Ansible controller CVE-2016-8628, GHSA-jg4f-jqm5-4mgq, PYSEC-2018-38 | Critical | 3.2% | 31 Jul, 2018 | PyPI ansible |