Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Exposure of Sensitive Information to an Unauthorized Actor in httpie CVE-2022-24737, GHSA-9w4w-cpc8-h2fq, PYSEC-2022-34 | Medium | 1.7% | 07 Mar, 2022 | PyPI httpie |
Open Redirect in archivy CVE-2022-0697, GHSA-28mg-98xm-q493, PYSEC-2022-161 | Medium | 0.6% | 06 Mar, 2022 | PyPI archivy |
Open Redirect in django-spirit CVE-2022-0869, GHSA-5p9j-w2wx-qx4c, PYSEC-2026-631 | Medium | 2.6% | 06 Mar, 2022 | PyPI django-spirit |
Ansible discloses sensitive information in traceback error message CVE-2021-3620, GHSA-4r65-35qq-ch8j, PYSEC-2022-164 | Medium | 0.4% | 03 Mar, 2022 | PyPI ansible |
Open Redirect in CPython that affects users of OpenStack Nova CVE-2021-3654, GHSA-vqp6-j452-j6wp, PYSEC-2026-693 | Medium | 26.8% | 02 Mar, 2022 | PyPI nova |
Scrapy cookie-setting is not restricted based on the public suffix list GHSA-mfjm-vh54-3f96 | Medium | Not scored | 01 Mar, 2022 | PyPI scrapy |
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy CVE-2022-0577, GHSA-cjvr-mfj7-j4j8, PYSEC-2022-159 | Medium | 1.2% | 01 Mar, 2022 | PyPI scrapy |
Forwarding of confidentials headers to third parties in fluture-node CVE-2022-24719, GHSA-32x6-qvw6-mxj4, PYSEC-2022-43051, PYSEC-2022-43052 | Medium | 0.8% | 01 Mar, 2022 | PyPI pyquest PyPI request-util npm fluture-node |
Cross-site Scripting in Weblate BIT-weblate-2022-24710, CVE-2022-24710, GHSA-6jp6-9rf9-gc66, PYSEC-2022-35 | Medium | 0.8% | 25 Feb, 2022 | PyPI Weblate PyPI weblate |
Apache Airflow Cross-site Scripting Vulnerability BIT-airflow-2021-45229, CVE-2021-45229, GHSA-65xw-pcqw-hjrh, PYSEC-2022-29 | Medium | 2.6% | 25 Feb, 2022 | PyPI apache-airflow |
b2-sdk-python TOCTOU application key disclosure CVE-2022-23651, GHSA-p867-fxfr-ph2w, PYSEC-2022-33 | Medium | 0.2% | 23 Feb, 2022 | PyPI b2sdk |
B2 Command Line Tool TOCTOU application key disclosure CVE-2022-23653, GHSA-8wr4-2wm6-w3pr, PYSEC-2022-32 | Medium | 0.2% | 23 Feb, 2022 | PyPI b2 |
open redirect in pollbot CVE-2022-0637, GHSA-vg27-hr3v-3cqv, PYSEC-2026-738 | Medium | 0.4% | 16 Feb, 2022 | PyPI pollbot |
Integer Overflow or Wraparound in TensorFlow GHSA-wcv5-vrvr-3rx2 | Medium | Not scored | 09 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory leak in Tensorflow BIT-tensorflow-2022-23578, CVE-2022-23578, GHSA-8r7c-3cm2-3h8f, PYSEC-2022-142, PYSEC-2022-87, PYSEC-2026-3138 | Medium | 0.7% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow BIT-tensorflow-2022-23579, CVE-2022-23579, GHSA-5f2r-qp73-37mr, PYSEC-2022-143, PYSEC-2022-88, PYSEC-2026-3108 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Abort caused by allocating a vector that is too large in Tensorflow BIT-tensorflow-2022-23580, CVE-2022-23580, GHSA-627q-g293-49q7, PYSEC-2022-144, PYSEC-2022-89, PYSEC-2026-3113 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow BIT-tensorflow-2022-23581, CVE-2022-23581, GHSA-fq86-3f29-px2c, PYSEC-2022-145, PYSEC-2022-90, PYSEC-2026-3175 | Medium | 1.2% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in `TensorByteSize` in Tensorflow BIT-tensorflow-2022-23582, CVE-2022-23582, GHSA-4j82-5ccr-4r8v, PYSEC-2022-146, PYSEC-2022-91, PYSEC-2026-3100 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in binary ops in Tensorflow BIT-tensorflow-2022-23583, CVE-2022-23583, GHSA-gjqc-q9g6-q2j3, PYSEC-2022-147, PYSEC-2022-92, PYSEC-2026-3191 | Medium | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory leak in decoding PNG images BIT-tensorflow-2022-23585, CVE-2022-23585, GHSA-fq6p-6334-8gr4, PYSEC-2022-149, PYSEC-2022-94, PYSEC-2026-3174 | Medium | 1.0% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Multiple `CHECK`-fails in `function.cc` in TensowFlow BIT-tensorflow-2022-23586, CVE-2022-23586, GHSA-43jf-985q-588j, PYSEC-2022-150, PYSEC-2022-95, PYSEC-2026-3096 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fails due to attempting to build a reference tensor BIT-tensorflow-2022-23588, CVE-2022-23588, GHSA-fx5c-h9f6-rv7c, PYSEC-2022-152, PYSEC-2022-97, PYSEC-2026-3181 | Medium | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in Grappler's `IsConstant` BIT-tensorflow-2022-23589, CVE-2022-23589, GHSA-9px9-73fg-3fqp, PYSEC-2022-153, PYSEC-2022-98, PYSEC-2026-3154 | Medium | 1.1% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TensorFlow BIT-tensorflow-2022-23595, CVE-2022-23595, GHSA-fpcp-9h7m-ffpx, PYSEC-2022-103, PYSEC-2022-158, PYSEC-2026-3173 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in Tensorflow BIT-tensorflow-2022-21725, CVE-2022-21725, GHSA-v3f7-j968-4h5f, PYSEC-2022-104, PYSEC-2022-49, PYSEC-2026-3242 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory exhaustion in Tensorflow BIT-tensorflow-2022-21732, CVE-2022-21732, GHSA-c582-c96p-r5cq, PYSEC-2022-111, PYSEC-2022-56, PYSEC-2026-3158 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory exhaustion in Tensorflow BIT-tensorflow-2022-21733, CVE-2022-21733, GHSA-98j8-c9q4-r38g, PYSEC-2022-112, PYSEC-2022-57, PYSEC-2026-3145 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cross-site Scripting in Django BIT-django-2022-22818, CVE-2022-22818, GHSA-95rw-fx8r-36v6, PYSEC-2022-19 | Medium | 3.4% | 03 Feb, 2022 | PyPI django |
Cross-site Scripting and Open Redirect in plone.app.contenttypes GHSA-f7qw-5fgj-247x | Medium | Not scored | 01 Feb, 2022 | PyPI plone-app-contenttypes PyPI plone.app.contenttypes |
Observable Response Discrepancy in Flask-AppBuilder CVE-2022-21659, GHSA-wfjw-w6pv-8p7f, PYSEC-2022-24 | Medium | 1.0% | 31 Jan, 2022 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Cross-site Scripting and Open Redirect in Products.CMFPlone GHSA-8w54-22w9-3g8f | Medium | Not scored | 28 Jan, 2022 | PyPI Products.CMFPlone PyPI products-cmfplone |
Cross-site Scripting in calibreweb CVE-2022-0352, GHSA-h56g-v4vp-q9q6, PYSEC-2022-18 | Medium | 0.9% | 28 Jan, 2022 | PyPI calibreweb |
Cross-site Scripting and Open Redirect in Products.ATContentTypes CVE-2022-23599, GHSA-g4c2-ghfg-g5rh, PYSEC-2022-21 | Medium | 0.8% | 28 Jan, 2022 | PyPI Products.ATContentTypes PyPI products-atcontenttypes |
loguru logs sensitive information CVE-2022-0338, GHSA-39ph-wr67-j4xq, PYSEC-2022-14 | Medium | 0.8% | 25 Jan, 2022 | PyPI loguru |
Invalid URL generation in bitlyshortener GHSA-rcrv-228c-gprj | Medium | Not scored | 21 Jan, 2022 | PyPI bitlyshortener |
Improper Privilege Management in apache-airflow BIT-airflow-2021-45230, CVE-2021-45230, GHSA-4jh2-3c85-q67h, PYSEC-2022-11 | Medium | 1.7% | 20 Jan, 2022 | PyPI apache-airflow |
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend CVE-2022-21690, GHSA-ch22-x2v3-v6vq, PYSEC-2022-41 | Medium | 0.8% | 18 Jan, 2022 | PyPI onionshare-cli |
Improper Access Control in Onionshare CVE-2022-21692, GHSA-gjj5-998g-v36v, PYSEC-2022-43 | Medium | 0.8% | 18 Jan, 2022 | PyPI onionshare-cli |
Incorrect Permission Assignment for Critical Resource in OnionShare CVE-2022-21694, GHSA-h29c-wcm8-883h, PYSEC-2022-45 | Medium | 1.3% | 18 Jan, 2022 | PyPI onionshare-cli |
Improper Access Control in Onionshare CVE-2022-21691, GHSA-w9m4-7w72-r766, PYSEC-2022-42 | Medium | 0.7% | 18 Jan, 2022 | PyPI onionshare-cli |
Path traversal in Onionshare CVE-2022-21693, GHSA-jgm9-xpfj-4fq6, PYSEC-2022-44 | Medium | 1.2% | 18 Jan, 2022 | PyPI onionshare-cli |
Improper Access Control in Onionshare CVE-2022-21695, GHSA-99p8-9p2c-49j4, PYSEC-2022-46 | Medium | 0.9% | 18 Jan, 2022 | PyPI onionshare-cli |
Username spoofing in OnionShare CVE-2022-21696, GHSA-68vr-8f46-vc9f, PYSEC-2022-47 | Medium | 0.7% | 18 Jan, 2022 | PyPI onionshare-cli |
Comment reply notifications sent to incorrect users CVE-2022-21683, GHSA-xqxm-2rpm-3889, PYSEC-2022-13 | Medium | 1.0% | 18 Jan, 2022 | PyPI wagtail |
Cross-site Scripting in Ericsson CodeChecker CVE-2021-44217, GHSA-fxmx-pfm2-85m2, PYSEC-2022-43181, PYSEC-2026-625 | Medium | 1.6% | 18 Jan, 2022 | PyPI codechecker |
calibre-web is vulnerable to Cross-site Scripting CVE-2021-4170, GHSA-wrp6-9w7f-3wxg, PYSEC-2026-620 | Medium | 0.8% | 16 Jan, 2022 | PyPI calibreweb |
Cross-site Scripting in django-cms CVE-2021-44649, GHSA-hx7c-qpfq-xcrp, PYSEC-2022-7 | Medium | 0.6% | 12 Jan, 2022 | PyPI django-cms |
Path Traversal in nemo-toolkit CVE-2022-22821, GHSA-9hg3-hmmf-c3gr, GHSA-rpx7-33j2-xx9x, PYSEC-2026-685 | Medium | 0.3% | 10 Jan, 2022 | PyPI nemo-toolkit |
Improper Initialization in Pillow BIT-pillow-2022-22815, CVE-2022-22815, GHSA-pw3c-h7wp-cvhx, PYSEC-2022-8 | Medium | 2.8% | 10 Jan, 2022 | PyPI Pillow PyPI pillow |