Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism CVE-2015-8914, GHSA-3vj4-cvjp-482h, PYSEC-2026-431 | Critical | 4.3% | 17 Jun, 2016 | PyPI neutron |
Pillow Integer overflow in ImagingResampleHorizontal CVE-2016-4009, GHSA-hvr8-466p-75rh, PYSEC-2016-7 | Critical | 7.9% | 13 Apr, 2016 | PyPI pillow |
Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component CVE-2016-1505, GHSA-84cw-mxhv-qvv4, PYSEC-2026-512 | Critical | 2.6% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
Radicale vulnerable to arbitrary file read or write CVE-2015-8747, GHSA-fgqv-96v9-w23m, PYSEC-2016-36 | Critical | 3.0% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
Command Injection in Pygments CVE-2015-8557, GHSA-fff8-4w9p-7v76, PYSEC-2016-32 | Critical | 6.7% | 08 Jan, 2016 | PyPI Pygments PyPI pygments |
Injection vulnerability that affects ironic-discoverd CVE-2015-5306, GHSA-x64g-wjmw-w328, PYSEC-2015-28, PYSEC-2026-505 | Critical | 1.6% | 25 Nov, 2015 | PyPI ironic-inspector PyPI python-ironic-inspector-client |
Improper Input Validation in Jupyter Notebook CVE-2015-7337, GHSA-92mr-v722-f48m, PYSEC-2015-25, PYSEC-2015-27 | Critical | 2.5% | 29 Sep, 2015 | PyPI ipython PyPI notebook |
Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command CVE-2014-9462, GHSA-3pmw-h7j4-rf54, PYSEC-2015-14 | Critical | 4.2% | 31 Mar, 2015 | PyPI mercurial |
Dulwich Arbitrary code execution via commit with directory path starting with .git CVE-2014-9706, GHSA-4j5j-58j7-6c3w, PYSEC-2015-34 | Critical | 5.0% | 31 Mar, 2015 | PyPI dulwich |
Dulwich Buffer Overflow when handling pack files CVE-2015-0838, GHSA-vjjf-3rvg-gv3v, PYSEC-2015-35 | Critical | 3.4% | 31 Mar, 2015 | PyPI dulwich |
Django-piston and Django-tastypie do not properly deserialize YAML data CVE-2011-4103, GHSA-pvhp-v9qp-xf5r, PYSEC-2014-24 | Critical | 2.4% | 27 Oct, 2014 | PyPI django-piston |
Django Tastypie Improper Deserialization of YAML Data CVE-2011-4104, GHSA-qgvw-qc2q-gv5q, PYSEC-2014-25 | Critical | 2.4% | 27 Oct, 2014 | PyPI django-tastypie |
python-gnupg vulnerable to shell injection CVE-2014-1929, GHSA-vcr5-xr9h-mvc5, PYSEC-2014-92 | Critical | 0.4% | 25 Oct, 2014 | PyPI python-gnupg |
Plone python code injection CVE-2012-5495, GHSA-w6pw-5gh5-4952, PYSEC-2014-37 | Critical | 1.7% | 30 Sep, 2014 | PyPI plone |
Django Vulnerable to Cache Poisoning CVE-2014-1418, GHSA-q7q2-qf2q-rw3w, PYSEC-2014-19 | Critical | 2.6% | 16 May, 2014 | PyPI Django PyPI django |
Pillow command injection CVE-2014-3007, GHSA-8m9x-pxwq-j236, PYSEC-2014-87 | Critical | 10.4% | 27 Apr, 2014 | PyPI pillow |
Code Injection in Django CVE-2014-0472, GHSA-rvq6-mrpv-m6rm, PYSEC-2014-1 | Critical | 5.8% | 23 Apr, 2014 | PyPI Django PyPI django |
Python Swift client is vulnerable to Missing SSL Certificate Check CVE-2013-6396, GHSA-p3xv-97g8-4wmj, PYSEC-2014-12 | Critical | 0.7% | 18 Feb, 2014 | PyPI python-swiftclient |
graphite-web is vulnerable to Remote Code Execution via renderLocalView function CVE-2013-5093, GHSA-m923-w2gj-v43g, PYSEC-2013-3 | Critical | 38.7% | 27 Sep, 2013 | PyPI graphite-web |
graphite-web is vulnerable to Remote Code Execution CVE-2013-5942, GHSA-ch3j-w953-hfcm, PYSEC-2013-34 | Critical | 2.1% | 27 Sep, 2013 | PyPI graphite-web |
OpenStack Object Storage (swift) Code Injection vulnerability CVE-2012-4406, GHSA-v7mh-3jgf-r26c, PYSEC-2026-545 | Critical | 6.6% | 22 Oct, 2012 | PyPI swift |
Django Allows Redirect via Data URL CVE-2012-3442, GHSA-78vx-ggch-wghm, PYSEC-2012-2 | Critical | 2.1% | 31 Jul, 2012 | PyPI django |
SQLAlchemy vulnerable to SQL injection CVE-2012-0805, GHSA-hfg2-wf6j-x53p, PYSEC-2012-9 | Critical | 2.9% | 05 Jun, 2012 | PyPI SQLAlchemy PyPI sqlalchemy |
PyWebDAV SQL Injection vulnerability CVE-2011-0432, GHSA-69vw-jfq7-935g, PYSEC-2011-7 | Critical | 1.8% | 14 Mar, 2011 | PyPI pywebdav |
Directory traversal in Django CVE-2011-0698, GHSA-7g9h-c88w-r7h2, PYSEC-2011-12 | Critical | 2.9% | 14 Feb, 2011 | PyPI Django PyPI django |
Plone Privilege Escalation Vulnerability CVE-2011-0720, GHSA-3v28-9jjp-4g5w, PYSEC-2011-13 | Critical | 3.2% | 03 Feb, 2011 | PyPI Plone PyPI plone |
Zope Object Database (ZODB) Arbitrary files reading and deletion CVE-2009-2701, GHSA-m52m-2qpx-9j4j, PYSEC-2009-10 | Critical | 1.0% | 08 Sep, 2009 | PyPI zodb3 |
Zope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage servers CVE-2009-0668, GHSA-4x83-5gw5-q346, PYSEC-2009-8 | Critical | 2.2% | 07 Aug, 2009 | PyPI ZODB3 PyPI zodb3 |
Roundup xml-rpc server improper check of property permissions CVE-2008-1475, GHSA-j59j-h3g7-cpmf, PYSEC-2008-10 | Critical | 1.8% | 24 Mar, 2008 | PyPI roundup |
Plone Arbitrary Code Execution via Unsafe Handling of Pickles CVE-2007-5741, GHSA-hf26-vvmx-x8c8, PYSEC-2007-4 | Critical | 2.2% | 07 Nov, 2007 | PyPI plone |