Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
kiwitcms vulnerable to stored XSS via unrestricted files upload CVE-2023-32686, GHSA-x7c2-7wvg-jpx7, PYSEC-2026-1500 | Medium | 0.4% | 22 May, 2023 | PyPI kiwitcms |
Malicious release: Malicious code in opencv-keras (PyPI) MAL-2023-1383 | Malicious | Not scored | 20 May, 2023 | PyPI opencv-keras |
Malicious release: Malicious code in sqlalchemy-os (PyPI) MAL-2023-1414 | Malicious | Not scored | 20 May, 2023 | PyPI sqlalchemy-os |
Malicious release: Malicious code in req-flask (PyPI) MAL-2023-1399 | Malicious | Not scored | 20 May, 2023 | PyPI req-flask |
Malicious release: Malicious code in os-numpy (PyPI) MAL-2023-1384 | Malicious | Not scored | 20 May, 2023 | PyPI os-numpy |
Malicious release: Malicious code in pylint-py (PyPI) MAL-2023-1394 | Malicious | Not scored | 20 May, 2023 | PyPI pylint-py |
Malicious release: Malicious code in pylint-beautifulsoup (PyPI) MAL-2023-1393 | Malicious | Not scored | 20 May, 2023 | PyPI pylint-beautifulsoup |
Malicious release: Malicious code in sqlalchemy-requests (PyPI) MAL-2023-1415 | Malicious | Not scored | 20 May, 2023 | PyPI sqlalchemy-requests |
Malicious release: Malicious code in matplotlib-req (PyPI) MAL-2023-1377 | Malicious | Not scored | 20 May, 2023 | PyPI matplotlib-req |
Malicious release: Malicious code in pygame-install (PyPI) MAL-2023-1389 | Malicious | Not scored | 20 May, 2023 | PyPI pygame-install |
Malicious release: Malicious code in beautifulsoup-numpy (PyPI) MAL-2023-1356 | Malicious | Not scored | 20 May, 2023 | PyPI beautifulsoup-numpy |
Malicious release: Malicious code in selenium-matplotlib (PyPI) MAL-2023-1406 | Malicious | Not scored | 20 May, 2023 | PyPI selenium-matplotlib |
Malicious release: Malicious code in numpy-selenium (PyPI) MAL-2023-1382 | Malicious | Not scored | 20 May, 2023 | PyPI numpy-selenium |
Malicious release: Malicious code in pygame-pytorch (PyPI) MAL-2023-1391 | Malicious | Not scored | 20 May, 2023 | PyPI pygame-pytorch |
Malicious release: Malicious code in pandas-numpy (PyPI) MAL-2023-1385 | Malicious | Not scored | 20 May, 2023 | PyPI pandas-numpy |
Malicious release: Malicious code in pytorch-pandas (PyPI) MAL-2023-1396 | Malicious | Not scored | 20 May, 2023 | PyPI pytorch-pandas |
Malicious release: Malicious code in matplotlib-sqlalchemy (PyPI) MAL-2023-1379 | Malicious | Not scored | 20 May, 2023 | PyPI matplotlib-sqlalchemy |
Malicious release: Malicious code in crypto-pygame (PyPI) MAL-2023-1360 | Malicious | Not scored | 20 May, 2023 | PyPI crypto-pygame |
Malicious release: Malicious code in install-pyyaml (PyPI) MAL-2023-1372 | Malicious | Not scored | 20 May, 2023 | PyPI install-pyyaml |
Malicious release: Malicious code in print-pip (PyPI) MAL-2023-1388 | Malicious | Not scored | 20 May, 2023 | PyPI print-pip |
Malicious release: Malicious code in requests-pandas (PyPI) MAL-2023-1403 | Malicious | Not scored | 20 May, 2023 | PyPI requests-pandas |
Malicious release: Malicious code in scikit-learn-matplotlib (PyPI) MAL-2023-1405 | Malicious | Not scored | 20 May, 2023 | PyPI scikit-learn-matplotlib |
Malicious release: Malicious code in print-django (PyPI) MAL-2023-1387 | Malicious | Not scored | 20 May, 2023 | PyPI print-django |
Malicious release: Malicious code in django-pyyaml (PyPI) MAL-2023-1362 | Malicious | Not scored | 20 May, 2023 | PyPI django-pyyaml |
Malicious release: Malicious code in beautifulsoup-scikit-learn (PyPI) MAL-2023-1358 | Malicious | Not scored | 20 May, 2023 | PyPI beautifulsoup-scikit-learn |
Malicious release: Malicious code in pygame-print (PyPI) MAL-2023-1390 | Malicious | Not scored | 20 May, 2023 | PyPI pygame-print |
Malicious release: Malicious code in sys-scikit-learn (PyPI) MAL-2023-1416 | Malicious | Not scored | 20 May, 2023 | PyPI sys-scikit-learn |
Malicious release: Malicious code in matplotlib-requests (PyPI) MAL-2023-1378 | Malicious | Not scored | 20 May, 2023 | PyPI matplotlib-requests |
Malicious release: Malicious code in pyyaml-selenium (PyPI) MAL-2023-1398 | Malicious | Not scored | 20 May, 2023 | PyPI pyyaml-selenium |
Malicious release: Malicious code in req-matplotlib (PyPI) MAL-2023-1400 | Malicious | Not scored | 20 May, 2023 | PyPI req-matplotlib |
Malicious release: Malicious code in matplotlib-flask (PyPI) MAL-2023-1376 | Malicious | Not scored | 20 May, 2023 | PyPI matplotlib-flask |
Malicious release: Malicious code in req-os (PyPI) MAL-2023-1401 | Malicious | Not scored | 20 May, 2023 | PyPI req-os |
Malicious release: Malicious code in beautifulsoup-requests (PyPI) MAL-2023-1357 | Malicious | Not scored | 20 May, 2023 | PyPI beautifulsoup-requests |
Malicious release: Malicious code in requests-flask (PyPI) MAL-2023-1402 | Malicious | Not scored | 20 May, 2023 | PyPI requests-flask |
Malicious release: Malicious code in sys-selenium (PyPI) MAL-2023-1417 | Malicious | Not scored | 20 May, 2023 | PyPI sys-selenium |
Malicious release: Malicious code in pytorch-pygame (PyPI) MAL-2023-1397 | Malicious | Not scored | 20 May, 2023 | PyPI pytorch-pygame |
Malicious release: Malicious code in install-crypto (PyPI) MAL-2023-1370 | Malicious | Not scored | 20 May, 2023 | PyPI install-crypto |
Malicious release: Malicious code in sqlalchemy-install (PyPI) MAL-2023-1413 | Malicious | Not scored | 20 May, 2023 | PyPI sqlalchemy-install |
Malicious release: Malicious code in keras-arg (PyPI) MAL-2023-1373 | Malicious | Not scored | 20 May, 2023 | PyPI keras-arg |
Malicious release: Malicious code in pylint-sys (PyPI) MAL-2023-1395 | Malicious | Not scored | 20 May, 2023 | PyPI pylint-sys |
Malicious release: Malicious code in install-pytest (PyPI) MAL-2023-1371 | Malicious | Not scored | 20 May, 2023 | PyPI install-pytest |
Malicious release: Malicious code in keras-beautifulsoup (PyPI) MAL-2023-1374 | Malicious | Not scored | 20 May, 2023 | PyPI keras-beautifulsoup |
Vyper's nonpayable default functions are sometimes payable CVE-2023-32675, GHSA-vxmm-cwh2-q762, PYSEC-2023-80 | Medium | 0.6% | 19 May, 2023 | PyPI vyper |
Malicious release: Malicious code in pywolle (PyPI) MAL-2023-8590, SNYK-PYTHON-PYWOLLE-6069631 | Malicious | Not scored | 19 May, 2023 | PyPI pywolle |
Malicious release: Malicious code in guiconsoles (PyPI) MAL-2023-1366 | Malicious | Not scored | 18 May, 2023 | PyPI guiconsoles |
transformers has Insecure Temporary File CVE-2023-2800, GHSA-282v-666c-3fvg, PYSEC-2023-299 | Medium | 0.3% | 18 May, 2023 | PyPI transformers |
mlflow Path Traversal vulnerability BIT-mlflow-2023-2780, CVE-2023-2780, GHSA-wjq3-7jxx-whj9, PYSEC-2023-69 | Critical | 6.3% | 17 May, 2023 | PyPI mlflow |
Malicious release: Malicious code in pandasprox (PyPI) MAL-2023-1386 | Malicious | Not scored | 17 May, 2023 | PyPI pandasprox |
Starlette has Path Traversal vulnerability in StaticFiles CVE-2023-29159, GHSA-v5gw-mw7f-84px, PYSEC-2023-83 | High | 2.6% | 17 May, 2023 | PyPI starlette |
Malicious release: Malicious code in pywhool (PyPI) MAL-2023-8589, SNYK-PYTHON-PYWHOOL-6069618 | Malicious | Not scored | 17 May, 2023 | PyPI pywhool |