Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration CVE-2026-12772, GHSA-mf52-j94g-746m, PYSEC-2026-4073 | Low | 0.4% | 21 Jun, 2026 | PyPI litellm |
LiteLLM: M2M JWT Handler Has Improper Authorization CVE-2026-12771, GHSA-qmf3-4767-5fg3, PYSEC-2026-4075 | Low | 0.4% | 21 Jun, 2026 | PyPI litellm |
LiteLLM: Admin Key Handler Has Improper Authorization CVE-2026-12770, GHSA-6qr3-3g89-m4jj, PYSEC-2026-4068 | Low | 0.6% | 21 Jun, 2026 | PyPI litellm |
Malicious release: Malicious code in requests-enhancer (PyPI) MAL-2026-6247 | Malicious | Not scored | 20 Jun, 2026 | PyPI requests-enhancer |
Malicious release: Malicious code in d0rk3r (PyPI) MAL-2026-6246 | Malicious | Not scored | 20 Jun, 2026 | PyPI d0rk3r |
Malicious release: Malicious code in d0rk3r-telemetry (PyPI) MAL-2026-6244 | Malicious | Not scored | 20 Jun, 2026 | PyPI d0rk3r-telemetry |
Malicious release: Malicious code in request-cache-py (PyPI) MAL-2026-6245 | Malicious | Not scored | 20 Jun, 2026 | PyPI request-cache-py |
Malicious release: Malicious code in query-profile (PyPI) MAL-2026-6236 | Malicious | Not scored | 20 Jun, 2026 | PyPI query-profile |
Malicious release: Malicious code in fluent-dashboard-panel-metrics (PyPI) MAL-2026-6233 | Malicious | Not scored | 20 Jun, 2026 | PyPI fluent-dashboard-panel-metrics |
Malicious release: Malicious code in improvado-layout-panel-metrics (PyPI) MAL-2026-6231 | Malicious | Not scored | 19 Jun, 2026 | PyPI improvado-layout-panel-metrics |
Anki's local HTTP server does not sufficiently validate requests CVE-2026-59153, GHSA-869j-r97x-hx2g, PYSEC-2026-3459 | High | 0.3% | 19 Jun, 2026 | PyPI aqt |
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size CVE-2026-58203, GHSA-4xgf-cpjx-pc3j | Medium | 0.2% | 19 Jun, 2026 | PyPI pydantic-settings |
LangSmith SDK TracingMiddleware: Arbitrary server-side file read CVE-2026-59152, GHSA-f4xh-w4cj-qxq8 | High | 0.2% | 19 Jun, 2026 | PyPI langsmith |
Zeep: Server-Side Request Forgery (SSRF) CVE-2026-58501, GHSA-4cc2-g9w2-fhf6, PYSEC-2026-2323 | Medium | 0.4% | 19 Jun, 2026 | PyPI zeep |
Anki: User scripts in iframes have access to the internal Anki API CVE-2026-58266, GHSA-cw6h-ffmh-x6vh | Medium | 0.2% | 19 Jun, 2026 | PyPI aqt |
ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer CVE-2026-58198, GHSA-wvrh-2f4m-924v | Medium | 0.1% | 19 Jun, 2026 | PyPI ChatterBot PyPI chatterbot |
EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id CVE-2026-58499, GHSA-c795-2g9c-j48m | High | 0.5% | 19 Jun, 2026 | PyPI everos |
stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA) CVE-2026-76238, GHSA-6gqw-jqv7-v88m | High | 0.4% | 19 Jun, 2026 | PyPI stigmem-node |
stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA) CVE-2026-76237, GHSA-xhv3-q4xx-349r | High | 0.4% | 19 Jun, 2026 | PyPI stigmem-node |
stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA) CVE-2026-76236, GHSA-x26h-xmv8-gxf7 | High | 0.4% | 19 Jun, 2026 | PyPI stigmem-node |
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error CVE-2026-57585, GHSA-6v7p-g79w-8964, PYSEC-2026-3625 | High | 0.5% | 19 Jun, 2026 | PyPI msgpack |
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit CVE-2026-55447, GHSA-ccv6-r384-xp75, PYSEC-2026-378 | Critical | 0.7% | 19 Jun, 2026 | PyPI langflow |
Langflow: Unauthenticated DoS through multipart form boundary file upload CVE-2026-55446, GHSA-qwqc-p3q8-wcg9, PYSEC-2026-223 | High | 0.6% | 19 Jun, 2026 | PyPI langflow |
Langflow: Logout button does not clear session CVE-2026-55423, GHSA-7hw8-6q6r-4276, PYSEC-2026-222 | Medium | 0.2% | 19 Jun, 2026 | PyPI langflow |
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow CVE-2026-55255, GHSA-qrpv-q767-xqq2, PYSEC-2026-221 | HighExploited | 0.9% | 19 Jun, 2026 | PyPI langflow |
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read() CVE-2026-55206, GHSA-h4gh-22qq-72r7, PYSEC-2026-2973 | High | 0.3% | 19 Jun, 2026 | PyPI py7zr |
py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size CVE-2026-55195, GHSA-gjrg-mpp7-g774, PYSEC-2026-2972 | High | 0.3% | 19 Jun, 2026 | PyPI py7zr |
VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files GHSA-rpj2-4hq8-938g | High | Not scored | 19 Jun, 2026 | PyPI vcrpy |
dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens CVE-2026-55837, GHSA-jr33-mw75-7j8f, PYSEC-2026-2443 | Medium | 0.3% | 19 Jun, 2026 | PyPI dbt-mcp |
Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser GHSA-p5wc-9w9r-m232 | High | Not scored | 19 Jun, 2026 | PyPI ultimate-sitemap-parser |
Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size Limit GHSA-8823-qg2x-pv9f | High | Not scored | 19 Jun, 2026 | PyPI ultimate-sitemap-parser |
Malicious release: Malicious code in django-auth-middleware-plus (PyPI) MAL-2026-6230 | Malicious | Not scored | 19 Jun, 2026 | PyPI django-auth-middleware-plus |
UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() CVE-2026-54911, GHSA-3j69-69wj-xqx2, PYSEC-2026-2294 | Medium | 0.4% | 19 Jun, 2026 | PyPI ujson |
Python Liquid: Infinite loop when parsing malformed `{% case %}` tags CVE-2026-55865, GHSA-vq2f-vcc9-j8mv, PYSEC-2026-3035 | High | 0.5% | 19 Jun, 2026 | PyPI python-liquid |
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories CVE-2026-54528, GHSA-436q-jwfr-rm2h, PYSEC-2026-2539 | High | 0.4% | 19 Jun, 2026 | PyPI jupyterlab-git |
jupyterlab-git extension: Stored XSS leading to RCE CVE-2026-54527, GHSA-f962-v9hr-pfg5, PYSEC-2026-2540, PYSEC-2026-2541 | Critical | 0.5% | 19 Jun, 2026 | PyPI jupyterlab-git PyPI jupyterlab-git-core npm @jupyterlab/git |
Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders CVE-2026-54499, GHSA-v5jw-96jm-7h2c, PYSEC-2026-3075 | High | 0.5% | 19 Jun, 2026 | PyPI stanza |
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN CVE-2026-54317, GHSA-x84v-g949-293w, PYSEC-2026-241 | High | 0.3% | 19 Jun, 2026 | PyPI homeassistant |
py7zr: Arbitrary File Write Vulnerability CVE-2026-23879, GHSA-q6rc-2cgv-63h7, PYSEC-2026-2974 | High | 0.5% | 19 Jun, 2026 | PyPI py7zr |
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call CVE-2026-49291, GHSA-2r68-g678-7qr3, PYSEC-2026-2622 | High | 0.5% | 19 Jun, 2026 | PyPI mcp-memory-service |
ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys CVE-2026-66065, GHSA-jv2h-4p9v-wf5w | High | 0.2% | 19 Jun, 2026 | PyPI ouroboros-ai |
JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol BIT-jupyterlab-2026-67338, CVE-2026-67338, GHSA-vmhf-c436-hxj4 | Medium | 0.3% | 19 Jun, 2026 | PyPI jupyterlab |
agent-coderag: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution CVE-2026-57586, GHSA-wg5p-8h9p-3mr7 | High | 0.2% | 19 Jun, 2026 | PyPI agent-coderag |
Malicious release: Malicious code in fastercoding (PyPI) MAL-2026-6208 | Malicious | Not scored | 19 Jun, 2026 | PyPI fastercoding |
Malicious release: Malicious code in fastercode (PyPI) MAL-2026-6206 | Malicious | Not scored | 19 Jun, 2026 | PyPI fastercode |
Malicious release: Malicious code in shoaib-done-pack (PyPI) MAL-2026-6207 | Malicious | Not scored | 19 Jun, 2026 | PyPI shoaib-done-pack |
Malicious release: Malicious code in fluent-panel-metrics (PyPI) MAL-2026-6182 | Malicious | Not scored | 19 Jun, 2026 | PyPI fluent-panel-metrics |
mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind CVE-2026-49257, GHSA-73cv-556c-w3g6, PYSEC-2026-410 | Critical | 0.6% | 18 Jun, 2026 | PyPI mcp-pinot-server |
Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream) CVE-2026-57573, GHSA-wm69-2pc3-rmmf, PYSEC-2026-2140 | High | 0.4% | 18 Jun, 2026 | PyPI crawl4ai |
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args CVE-2026-57572, GHSA-r253-r9jw-qg44, PYSEC-2026-2139 | Critical | 0.9% | 18 Jun, 2026 | PyPI crawl4ai |