Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in larchworker (PyPI) MAL-2026-18230 | Malicious | Not scored | 6 days ago | PyPI larchworker |
Malicious release: Malicious code in thornqueue (PyPI) MAL-2026-18240 | Malicious | Not scored | 6 days ago | PyPI thornqueue |
Malicious release: Malicious code in thistlerun (PyPI) MAL-2026-18239 | Malicious | Not scored | 6 days ago | PyPI thistlerun |
Malicious release: Malicious code in juniperrun (PyPI) MAL-2026-18229 | Malicious | Not scored | 6 days ago | PyPI juniperrun |
Malicious release: Malicious code in flintqueue (PyPI) MAL-2026-18227 | Malicious | Not scored | 6 days ago | PyPI flintqueue |
Malicious release: Malicious code in kestreljob (PyPI) MAL-2026-18221 | Malicious | Not scored | 6 days ago | PyPI kestreljob |
Malicious release: Malicious code in onsokets (PyPI) MAL-2026-18219 | Malicious | Not scored | 6 days ago | PyPI onsokets |
Malicious release: Malicious code in qowa (PyPI) MAL-2026-18218 | Malicious | Not scored | 6 days ago | PyPI qowa |
Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF CVE-2026-114620, GHSA-x4rv-c3wx-4cr8 | Medium | 0.3% | 7 days ago | PyPI authlib |
Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens CVE-2026-114619, GHSA-q686-2qmg-hqc7 | Medium | 0.2% | 7 days ago | PyPI authlib |
Authlib: Default JWT bearer grant accepts assertions for the wrong audience CVE-2026-114618, GHSA-fch4-3c6x-j4gc | Medium | 0.2% | 7 days ago | PyPI authlib |
Authlib: ID token can disable its own nonce validation via the nonce_supported claim CVE-2026-114617, GHSA-c5mf-xmp2-59rc | Medium | 0.2% | 7 days ago | PyPI authlib |
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512) CVE-2026-114616, GHSA-8m4g-j4wp-wgcg | Critical | 0.2% | 7 days ago | PyPI Authlib PyPI authlib |
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys CVE-2026-114615, GHSA-7vr2-2fgp-9w7p | Critical | 0.2% | 7 days ago | PyPI authlib |
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server CVE-2026-115419, GHSA-4v6f-7vjh-6x4m | High | 0.4% | 7 days ago | PyPI strands-agents npm @strands-agents/sdk |
Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts CVE-2026-114614, GHSA-jj7h-c3hg-m23x | Low | 0.2% | 7 days ago | PyPI authlib |
Malicious release: Malicious code in journey-teste-shellhello (PyPI) MAL-2026-18203 | Malicious | Not scored | 7 days ago | PyPI journey-teste-shellhello |
Mistune: Path Traversal and XSS in Include directive CVE-2026-115355, GHSA-h7ww-273w-6cm8 | High | 0.5% | 7 days ago | PyPI mistune |
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure CVE-2026-114613, GHSA-j586-36cw-2gc2 | High | 0.4% | 7 days ago | PyPI msgpack |
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key CVE-2026-114612, GHSA-7hp6-4w63-5g45 | Critical | 0.3% | 7 days ago | PyPI litellm |
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()' CVE-2026-114610, GHSA-wqw6-wpr3-45rh | Medium | 0.5% | 7 days ago | PyPI fpdf2 |
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content CVE-2026-114609, GHSA-rw7v-4hrq-x6r9 | Medium | 0.3% | 7 days ago | PyPI fpdf2 |
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME CVE-2026-114608, GHSA-22qq-2fwx-7p67 | Medium | 0.1% | 7 days ago | PyPI pylint |
dnspython dns.name.from_wire_parser() excessive CPU use CVE-2026-114605, GHSA-45c3-73f7-pv4m | High | 0.3% | 7 days ago | PyPI dnspython |
Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() GHSA-78g4-xqwv-q3g8 | High | Not scored | 7 days ago | PyPI pillow |
GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit CVE-2026-75508, GHSA-r77w-qph3-7vf8 | High | 0.6% | 7 days ago | PyPI graphql-core |
GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule CVE-2026-75507, GHSA-vj8h-fx38-h3vc | High | 0.6% | 7 days ago | PyPI graphql-core |
Black: GitHub Action installs unvalidated required-version from pyproject.toml CVE-2026-114134, GHSA-cg8m-r9f2-5wm2 | High | Not scored | 7 days ago | PyPI black |
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api CVE-2026-114603, GHSA-xcq7-p3pf-p88h | Medium | 0.5% | 7 days ago | PyPI opentelemetry-api |
PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery GHSA-pxh4-856f-4h89 | High | Not scored | 7 days ago | PyPI pyjwt |
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content CVE-2026-114510, GHSA-vqrg-773h-4wxc | High | 0.2% | 7 days ago | PyPI flexible-graphrag |
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package BIT-brotli-2026-111497, BIT-dotnet-2026-111497, BIT-dotnet-sdk-2026-111497, BIT-node-2026-111497, BIT-node-min-2026-111497, BIT-powershell-2026-111497, CVE-2026-111497, GHSA-9v8h-qqgm-4m35, PYSEC-2026-4322, PYSEC-2026-4323 | CriticalExploited | 82.6% | 7 days ago | PyPI brotli PyPI brotlicffi |
Malicious release: Malicious code in 1h1 (PyPI) MAL-2026-18188 | Malicious | Not scored | 7 days ago | PyPI 1h1 |
Malicious release: Malicious code in aanthropic (PyPI) MAL-2026-18189 | Malicious | Not scored | 7 days ago | PyPI aanthropic |
mem0ai Databricks vector store vulnerable to SQL injection CVE-2026-115324, GHSA-7587-9684-52r6 | Critical | 0.3% | 7 days ago | PyPI mem0ai |
Malicious release: Malicious code in acoustichub (PyPI) MAL-2026-18155 | Malicious | Not scored | 8 days ago | PyPI acoustichub |
Malicious release: Malicious code in phonemeprobe (PyPI) MAL-2026-18164 | Malicious | Not scored | 8 days ago | PyPI phonemeprobe |
Malicious release: Malicious code in ttsflow (PyPI) MAL-2026-18170 | Malicious | Not scored | 8 days ago | PyPI ttsflow |
Malicious release: Malicious code in evalstream (PyPI) MAL-2026-18161 | Malicious | Not scored | 8 days ago | PyPI evalstream |
Malicious release: Malicious code in speakbench (PyPI) MAL-2026-18166 | Malicious | Not scored | 8 days ago | PyPI speakbench |
Malicious release: Malicious code in audiokit (PyPI) MAL-2026-18158 | Malicious | Not scored | 8 days ago | PyPI audiokit |
Malicious release: Malicious code in phonemeforge (PyPI) MAL-2026-18163 | Malicious | Not scored | 8 days ago | PyPI phonemeforge |
Malicious release: Malicious code in vocabbench (PyPI) MAL-2026-18173 | Malicious | Not scored | 8 days ago | PyPI vocabbench |
Malicious release: Malicious code in asrloom (PyPI) MAL-2026-18157 | Malicious | Not scored | 8 days ago | PyPI asrloom |
Malicious release: Malicious code in benchworks (PyPI) MAL-2026-18160 | Malicious | Not scored | 8 days ago | PyPI benchworks |
Malicious release: Malicious code in benchbridge (PyPI) MAL-2026-18159 | Malicious | Not scored | 8 days ago | PyPI benchbridge |
Malicious release: Malicious code in speechprobe (PyPI) MAL-2026-18168 | Malicious | Not scored | 8 days ago | PyPI speechprobe |
Malicious release: Malicious code in soundsocket (PyPI) MAL-2026-18165 | Malicious | Not scored | 8 days ago | PyPI soundsocket |
Malicious release: Malicious code in modelworks (PyPI) MAL-2026-18162 | Malicious | Not scored | 8 days ago | PyPI modelworks |
Malicious release: Malicious code in vocabblend (PyPI) MAL-2026-18174 | Malicious | Not scored | 8 days ago | PyPI vocabblend |