Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution CVE-2026-56260, CVE-2026-56261, CVE-2026-56262, CVE-2026-56263, CVE-2026-56264, CVE-2026-56265, CVE-2026-56266, GHSA-365w-hqf6-vxfg, GHSA-53rg-46cm-4g2v, GHSA-8qrg-7j2f-rf2h, GHSA-f23g-2f38-gg94, GHSA-g2pv-76hm-j4x9, GHSA-r9hw-78q5-478g, GHSA-xrfj-6m49-wfmm, PYSEC-2026-229, PYSEC-2026-230, PYSEC-2026-239, PYSEC-2026-3443, PYSEC-2026-3449, PYSEC-2026-596, PYSEC-2026-798 | Critical | 2.6% | 16 Jun, 2026 | PyPI crawl4ai |
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVE-2026-53753, GHSA-qxjp-w3pj-48m7, PYSEC-2026-319 | Critical | 2.9% | 16 Jun, 2026 | PyPI crawl4ai |
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading CVE-2026-48775, GHSA-fjqc-hq36-qh5p, PYSEC-2026-2573 | Medium | 0.2% | 16 Jun, 2026 | PyPI langgraph-checkpoint |
vLLM: OpenAI auth bypass CVE-2026-48746, GHSA-94f4-hr76-p5j6, PYSEC-2026-226 | Critical | 1.2% | 16 Jun, 2026 | PyPI vllm |
Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read CVE-2026-48520, GHSA-rcjh-r59h-gq37, PYSEC-2026-244 | Medium | 0.4% | 16 Jun, 2026 | PyPI langflow |
Langflow: Unauthenticated RCE in Shareable Playgrounds CVE-2026-48519, GHSA-v5ff-9q35-q26f, PYSEC-2026-243 | Critical | 0.8% | 16 Jun, 2026 | PyPI langflow |
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint CVE-2026-42867, GHSA-79ph-745m-6wxq, PYSEC-2026-2566 | Medium | 0.5% | 16 Jun, 2026 | PyPI langflow |
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution CVE-2026-41523, GHSA-q8gq-377p-jq3r, PYSEC-2026-2300 | High | 0.9% | 16 Jun, 2026 | PyPI vllm |
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints CVE-2026-33760, GHSA-9c59-2mvc-vfr8, PYSEC-2026-242 | High | 0.5% | 16 Jun, 2026 | PyPI langflow |
Galaxy NG: command injection vulnerability CVE-2026-12398, GHSA-6hw7-j4jw-wpff, PYSEC-2026-2486 | High | 0.9% | 16 Jun, 2026 | PyPI galaxy-ng |
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders CVE-2026-55443, GHSA-gr75-jv2w-4656, PYSEC-2026-2192, PYSEC-2026-2556 | Medium | 0.2% | 16 Jun, 2026 | PyPI langchain PyPI langchain-anthropic |
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read CVE-2026-54293, GHSA-p4gq-832x-fm9v, PYSEC-2026-2078 | High | 0.6% | 16 Jun, 2026 | PyPI nltk |
Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes GHSA-gj48-438w-jh9v | Medium | Not scored | 16 Jun, 2026 | PyPI bleach |
Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning GHSA-g75f-g53v-794x | Medium | Not scored | 16 Jun, 2026 | PyPI bleach |
Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output GHSA-8rfp-98v4-mmr6 | Low | Not scored | 16 Jun, 2026 | PyPI bleach |
pypdf: Possible infinite loop when processing outlines/bookmarks in writer CVE-2026-54531, GHSA-m2v9-299j-rv96, PYSEC-2026-3022 | Medium | 0.2% | 16 Jun, 2026 | PyPI pypdf |
pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction CVE-2026-54530, GHSA-52x6-gq3r-vpf4, PYSEC-2026-3009 | Medium | 0.2% | 16 Jun, 2026 | PyPI pypdf |
pypdf: Possible large memory usage for form XObjects during text extraction CVE-2026-49461, GHSA-j543-4vmf-qm7v, PYSEC-2026-3020 | Medium | 0.2% | 16 Jun, 2026 | PyPI pypdf |
pypdf: Inefficient decoding of FlateDecode PNG predictor streams CVE-2026-49460, GHSA-5hgr-hg42-57jg, PYSEC-2026-3010 | Medium | 0.2% | 16 Jun, 2026 | PyPI pypdf |
Malicious release: Malicious code in cache-compat-utils (PyPI) MAL-2026-5878 | Malicious | Not scored | 16 Jun, 2026 | PyPI cache-compat-utils |
Malicious release: Malicious code in temp-development-package-test (PyPI) MAL-2026-5876 | Malicious | Not scored | 16 Jun, 2026 | PyPI temp-development-package-test |
Malicious release: Malicious code in myfirstpackagetestaaa (PyPI) MAL-2026-5875 | Malicious | Not scored | 16 Jun, 2026 | PyPI myfirstpackagetestaaa |
Malicious release: Malicious code in aaaazzzzaz (PyPI) MAL-2026-5874 | Malicious | Not scored | 16 Jun, 2026 | PyPI aaaazzzzaz |
Malicious release: Malicious code in datacamp-light (PyPI) MAL-2026-5868 | Malicious | Not scored | 16 Jun, 2026 | PyPI datacamp-light |
Malicious release: Malicious code in testpackagemanyhttpsgo (PyPI) MAL-2026-5840 | Malicious | Not scored | 15 Jun, 2026 | PyPI testpackagemanyhttpsgo |
Malicious release: Malicious code in twrap-toolkit (PyPI) MAL-2026-5841 | Malicious | Not scored | 15 Jun, 2026 | PyPI twrap-toolkit |
Malicious release: Malicious code in cipherflow (PyPI) MAL-2026-5839 | Malicious | Not scored | 15 Jun, 2026 | PyPI cipherflow |
Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS CVE-2026-54283, GHSA-82w8-qh3p-5jfq, PYSEC-2026-249 | High | 0.5% | 15 Jun, 2026 | PyPI starlette |
Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname CVE-2026-54282, GHSA-jp82-jpqv-5vv3, PYSEC-2026-248 | Medium | 0.3% | 15 Jun, 2026 | PyPI Starlette PyPI starlette |
Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse CVE-2026-91992, GHSA-pw6j-qg29-8w7f | High | 0.2% | 15 Jun, 2026 | PyPI tornado |
python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service CVE-2026-53539, GHSA-5rvq-cxj2-64vf, PYSEC-2026-3036 | High | 0.5% | 15 Jun, 2026 | PyPI python-multipart |
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory CVE-2026-53540, GHSA-v9pg-7xvm-68hf, PYSEC-2026-3040 | Low | 0.3% | 15 Jun, 2026 | PyPI python-multipart |
python-multipart: Semicolon treated as querystring field separator enables parameter smuggling CVE-2026-53538, GHSA-6jv3-5f52-599m, PYSEC-2026-3037 | Low | 0.3% | 15 Jun, 2026 | PyPI python-multipart |
python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters CVE-2026-53537, GHSA-vffw-93wf-4j4q, PYSEC-2026-3041 | Medium | 0.3% | 15 Jun, 2026 | PyPI python-multipart |
Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient CVE-2026-49853, GHSA-3x9g-8vmp-wqvf, PYSEC-2026-3387 | High | 0.4% | 15 Jun, 2026 | PyPI tornado |
tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) CVE-2026-49855, GHSA-mgf9-4vpg-hj56, PYSEC-2026-3389 | High | 0.6% | 15 Jun, 2026 | PyPI tornado |
Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows CVE-2026-48818, GHSA-wqp7-x3pw-xc5r, PYSEC-2026-2281 | High | 0.4% | 15 Jun, 2026 | PyPI starlette |
Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` CVE-2026-48817, GHSA-x746-7m8f-x49c, PYSEC-2026-2280 | Medium | 0.2% | 15 Jun, 2026 | PyPI starlette |
Vulnerable OpenSSL included in cryptography wheels GHSA-537c-gmf6-5ccf | High | Not scored | 15 Jun, 2026 | PyPI cryptography |
aiohttp: Incomplete websocket frame payloads bypass memory limits CVE-2026-54274, GHSA-xcgm-r5h9-7989, PYSEC-2026-2108 | Medium | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections CVE-2026-54275, GHSA-4m7w-qmgq-4wj5, PYSEC-2026-237 | Low | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect CVE-2026-54280, GHSA-9x8q-7h8h-wcw9, PYSEC-2026-2113 | Low | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: HTTP/1 Pipelined Requests Queue Without Limit CVE-2026-54273, GHSA-4fvr-rgm6-gqmc, PYSEC-2026-2107 | Medium | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup CVE-2026-54278, GHSA-g3cq-j2xw-wf74, PYSEC-2026-2111 | Medium | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines CVE-2026-54277, GHSA-63hw-fmq6-xxg2, PYSEC-2026-2110 | Medium | 0.6% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges CVE-2026-54276, GHSA-hpj7-wq8m-9hgp, PYSEC-2026-2109 | Medium | 0.3% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence CVE-2026-54279, GHSA-2fqr-mr3j-6wp8, PYSEC-2026-2112 | Low | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
aiohttp: CRLF injection in multipart headers CVE-2026-50269, GHSA-m6qw-4cw2-hm4m, PYSEC-2026-2106 | Low | 0.5% | 15 Jun, 2026 | PyPI aiohttp |
Malicious release: Malicious code in intel-ai-safety-explainer (PyPI) MAL-2026-5814 | Malicious | Not scored | 15 Jun, 2026 | PyPI intel-ai-safety-explainer |
Malicious release: Malicious code in hello-test-s1 (PyPI) MAL-2026-5812 | Malicious | Not scored | 15 Jun, 2026 | PyPI hello-test-s1 |