Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in unreal-mladapter (PyPI) MAL-2026-6736 | Malicious | Not scored | 02 Jul, 2026 | PyPI unreal-mladapter |
Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB CVE-2026-49360, GHSA-rh62-j648-g5qc, PYSEC-2026-3049 | High | 1.1% | 02 Jul, 2026 | PyPI recce |
Kiwi TCMS's /init-db/ page renders and responds to requests after first use CVE-2026-49292, GHSA-v8rp-6xcv-fwgh, PYSEC-2026-2553 | Low | 0.4% | 02 Jul, 2026 | PyPI kiwitcms |
fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection CVE-2026-52830, GHSA-rxw2-pc8j-vxwm, PYSEC-2026-2473 | Critical | 0.6% | 02 Jul, 2026 | PyPI fast-mcp-telegram |
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments CVE-2026-52817, GHSA-8w6w-23mq-h8rg, PYSEC-2026-2595 | High | 0.2% | 02 Jul, 2026 | PyPI linuxfabrik-lib |
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) CVE-2026-49852, GHSA-gg9x-qcx2-xmrh, PYSEC-2026-2528 | High | 0.2% | 02 Jul, 2026 | PyPI joserfc |
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read CVE-2026-50180, GHSA-pmch-g965-grmr, PYSEC-2026-2580 | High | 0.7% | 02 Jul, 2026 | PyPI langroid |
Malicious release: Malicious code in dt-validator (PyPI) MAL-2026-6728 | Malicious | Not scored | 02 Jul, 2026 | PyPI dt-validator |
Langroid: Path traversal in the file tools allows read/write outside configured current directory CVE-2026-50181, GHSA-fg23-3346-88f5, PYSEC-2026-2578 | High | 0.2% | 02 Jul, 2026 | PyPI langroid |
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete CVE-2026-50027, GHSA-84hp-mqvj-3p8h, PYSEC-2026-2624 | Critical | 1.0% | 02 Jul, 2026 | PyPI mcp-memory-service |
MLflow: trace API endpoints lack proper authorization validators BIT-mlflow-2026-8147, CVE-2026-8147, GHSA-2cm6-r77w-6g96, PYSEC-2026-3686 | High | 0.5% | 02 Jul, 2026 | PyPI mlflow |
Wagtail: Reflected XSS in dynamic image URL generator view CVE-2026-54263, GHSA-23m2-mghx-vqmf, PYSEC-2026-616 | High | 0.4% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Pages translations can be created without page permissions when using simple_translation CVE-2026-54262, GHSA-8634-mr4j-r72c, PYSEC-2026-615 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Improper permission handling in image preview CVE-2026-54261, GHSA-r6p4-grq7-xm4m, PYSEC-2026-614 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Denial of service via unbounded filter specs in the image preview CVE-2026-54260, GHSA-f2p5-j6fg-5cxf, PYSEC-2026-613 | Medium | 0.4% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Improper restriction handling on Documents and Images chosen endpoints CVE-2026-54259, GHSA-h54r-xq46-qwqm, PYSEC-2026-612 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
Malicious release: Malicious code in starlette-healthcheck (PyPI) MAL-2026-6724 | Malicious | Not scored | 01 Jul, 2026 | PyPI starlette-healthcheck |
Malicious release: Malicious code in twrap-tool (PyPI) MAL-2026-6711 | Malicious | Not scored | 01 Jul, 2026 | PyPI twrap-tool |
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks CVE-2026-49119, GHSA-j36p-7w88-g82j, PYSEC-2026-2179 | High | 0.7% | 01 Jul, 2026 | PyPI gradio |
AWS CLI: Overly permissive File Permissions CVE-2026-13769, GHSA-wfp6-f47h-hxc3, PYSEC-2026-3548 | Medium | 0.2% | 01 Jul, 2026 | PyPI awscli |
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR` CVE-2026-49986, GHSA-gvpp-v77h-5w8g, PYSEC-2026-2676 | High | 0.2% | 01 Jul, 2026 | PyPI neuro-cortex-memory |
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False) CVE-2026-57516, GHSA-hhrp-gw25-jr43, PYSEC-2026-2273 | High | 0.9% | 01 Jul, 2026 | PyPI ray |
Keras: HDF5 virtual datasets can disclose local files CVE-2026-12480, GHSA-26c4-7vv6-867j, PYSEC-2026-3629 | Medium | 0.2% | 01 Jul, 2026 | PyPI keras |
Langflow: Code Injection Vulnerability in Code Validation Endpoint CVE-2026-7873, GHSA-v798-mcc6-2m3m | Critical | 1.6% | 30 Jun, 2026 | PyPI langflow |
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools CVE-2026-58168, GHSA-jg88-rvpc-qvxj, PYSEC-2026-4206 | High | 0.4% | 30 Jun, 2026 | PyPI deeptutor |
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences CVE-2026-12243, GHSA-m42h-3232-vpv3, PYSEC-2026-597 | High | Not scored | 30 Jun, 2026 | PyPI nltk |
Malicious release: Malicious code in django-bkvision (PyPI) MAL-2026-6593 | Malicious | Not scored | 29 Jun, 2026 | PyPI django-bkvision |
Malicious release: Malicious code in skillspector (PyPI) MAL-2026-6561 | Malicious | Not scored | 28 Jun, 2026 | PyPI skillspector |
Malicious release: Malicious code in tdata-grabber (PyPI) MAL-2026-6560 | Malicious | Not scored | 28 Jun, 2026 | PyPI tdata-grabber |
Malicious release: Malicious code in fsociety-tools (PyPI) MAL-2026-6558 | Malicious | Not scored | 28 Jun, 2026 | PyPI fsociety-tools |
Malicious release: Malicious code in pkg-fallback (PyPI) MAL-2026-6557 | Malicious | Not scored | 28 Jun, 2026 | PyPI pkg-fallback |
Malicious release: Malicious code in discord-token-generator (PyPI) MAL-2026-6549 | Malicious | Not scored | 27 Jun, 2026 | PyPI discord-token-generator |
Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers GHSA-75mw-h36v-2jv7 | Medium | Not scored | 26 Jun, 2026 | PyPI dosage |
Flawfinder output manipulation via untrusted filenames and source text CVE-2026-48813, GHSA-4c3c-r6p8-c863, PYSEC-2026-2480 | High | 0.4% | 26 Jun, 2026 | PyPI flawfinder |
python-socketio: Binary attachment accumulation can cause denial of service CVE-2026-48804, GHSA-5w7q-77mv-v69f, PYSEC-2026-3042 | High | 0.5% | 26 Jun, 2026 | PyPI python-socketio |
python-engineio has unbound thread allocation that can cause denial of service CVE-2026-48802, GHSA-cgwc-pv48-fhj5, PYSEC-2026-3032 | High | 0.6% | 26 Jun, 2026 | PyPI python-engineio |
semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin GHSA-98x5-vq43-vc5p | Critical | Not scored | 26 Jun, 2026 | PyPI semantic-router |
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced CVE-2026-48809, GHSA-m9gh-vj53-gvh9, PYSEC-2026-3033 | High | 0.5% | 26 Jun, 2026 | PyPI python-engineio |
nono-py's policy JSON accepts unknown security fields GHSA-m8j6-rc5x-wv36 | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
nono-py vulnerable to authorization bypass / policy confusion GHSA-9j7f-3r4p-pwh6 | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
Malicious release: Malicious code in pdf-converter-pro (PyPI) MAL-2026-6541 | Malicious | Not scored | 26 Jun, 2026 | PyPI pdf-converter-pro |
nono-py has proxy-only network fallback bypass on older Linux kernels GHSA-72w7-mf9g-733p | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
Malicious release: Malicious code in inlifegram (PyPI) MAL-2026-6516 | Malicious | Not scored | 26 Jun, 2026 | PyPI inlifegram |
Malicious release: Malicious code in sqligen (PyPI) MAL-2026-6515 | Malicious | Not scored | 26 Jun, 2026 | PyPI sqligen |
Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P) CVE-2026-49486, GHSA-fgch-86x8-fv43, PYSEC-2026-238 | High | 0.4% | 26 Jun, 2026 | PyPI apache-airflow-providers-ftp |
Malicious release: Malicious code in openblox (PyPI) MAL-2026-6504 | Malicious | Not scored | 26 Jun, 2026 | PyPI openblox |
Malicious release: Malicious code in extra-huggingface (PyPI) MAL-2026-6489 | Malicious | Not scored | 25 Jun, 2026 | PyPI extra-huggingface |
Malicious release: Malicious code in pyext6cc8cd (PyPI) MAL-2026-6488 | Malicious | Not scored | 25 Jun, 2026 | PyPI pyext6cc8cd |
Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise CVE-2026-55166, GHSA-v2wp-frmc-5q3v, PYSEC-2026-384 | Critical | 0.3% | 25 Jun, 2026 | PyPI lemur |
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO CVE-2026-55165, GHSA-r9gp-7f88-9r54, PYSEC-2026-2589 | Medium | 0.2% | 25 Jun, 2026 | PyPI lemur |