Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Airflow Spark Provider Improper Input Validation vulnerability CVE-2023-40272, GHSA-r2f6-6928-fh8f, PYSEC-2026-1141 | High | 2.1% | 17 Aug, 2023 | PyPI apache-airflow-providers-apache-spark |
FaucetSDN Ryu Denial of Service Vulnerability CVE-2020-35141, GHSA-5x64-925v-h4gv, PYSEC-2026-1878 | High | 1.0% | 11 Aug, 2023 | PyPI ryu |
FaucetSDN Ryu Denial of Service Vulnerability CVE-2020-35139, GHSA-4987-5p3p-9r27, PYSEC-2026-1876 | High | 1.0% | 11 Aug, 2023 | PyPI ryu |
apache-airflow-providers-apache-drill Improper Input Validation vulnerability CVE-2023-39553, GHSA-mq4v-6vg4-796c, PYSEC-2023-136, PYSEC-2026-1137 | High | 2.3% | 11 Aug, 2023 | PyPI apache-airflow PyPI apache-airflow-providers-apache-drill |
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow CVE-2023-27506, GHSA-m2f8-v8q4-3m59, PYSEC-2026-1465, PYSEC-2026-2523, PYSEC-2026-3385 | High | 0.2% | 11 Aug, 2023 | PyPI intel-tensorflow PyPI intel-tensorflow-avx512 PyPI tensorflow-intel |
Excessive Iteration in gRPC CVE-2023-33953, GHSA-496j-2rq6-j6cc, PYSEC-2026-1424 | High | 0.5% | 09 Aug, 2023 | PyPI grpcio RubyGems grpc |
wger Workout Manager Cross-Site Request Forgery vulnerability CVE-2023-38759, GHSA-wrw3-qmqw-4x9w, PYSEC-2023-144 | High | 0.4% | 08 Aug, 2023 | PyPI wger |
ScanCode.io command injection in docker image fetch process CVE-2023-39523, GHSA-2ggp-cmvm-f62f, PYSEC-2026-1904 | High | 2.9% | 07 Aug, 2023 | PyPI scancodeio |
Privilege escalation via ApiTokensEndpoint CVE-2023-39349, GHSA-9jcq-jf57-c62c, PYSEC-2026-1912 | High | 1.1% | 07 Aug, 2023 | PyPI sentry |
Apache Airflow Execution with Unnecessary Privileges BIT-airflow-2023-39508, CVE-2023-39508, GHSA-269x-pg5c-5xgm, PYSEC-2023-134 | High | 2.6% | 05 Aug, 2023 | PyPI apache-airflow |
mlflow vulnerable to OS Command Injection BIT-mlflow-2023-4033, CVE-2023-4033, GHSA-ffw3-6378-cqgp, PYSEC-2023-280 | High | 1.3% | 01 Aug, 2023 | PyPI mlflow |
Float point exception (FPE) in paddlepaddle CVE-2023-38672, GHSA-cv2j-922j-hr56, PYSEC-2023-125 | High | 0.7% | 26 Jul, 2023 | PyPI paddlepaddle |
Null pointer dereference in PaddlePaddle CVE-2023-38670, GHSA-rr46-m366-gm44, PYSEC-2023-123 | High | 0.7% | 26 Jul, 2023 | PyPI paddlepaddle |
Improper authorization on debug and artifact file downloads CVE-2023-36826, GHSA-m4hc-m2v6-hfw8, PYSEC-2023-130 | High | 0.6% | 25 Jul, 2023 | PyPI sentry |
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection CVE-2023-38200, GHSA-pg75-v6fp-8q59, PYSEC-2026-1489 | High | 1.4% | 24 Jul, 2023 | PyPI keylime |
Open Babel has out-of-bounds write in MSI translationVectors[] CVE-2022-46295, GHSA-f8h2-c479-vqxf, PYSEC-2026-2780 | High | 0.9% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) CVE-2022-46294, GHSA-mjmg-352j-f456, PYSEC-2026-2786 | High | 0.9% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) CVE-2022-46293, GHSA-7h6r-6p76-68c9, PYSEC-2026-2775 | High | 0.9% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) CVE-2022-46292, GHSA-55f6-pf8r-c2f4, PYSEC-2026-2771 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in Gaussian translationVectors[] CVE-2022-46291, GHSA-jg3h-pv7c-4f9c, PYSEC-2026-2783 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) CVE-2022-46290, GHSA-5rff-8f7c-8jmw, PYSEC-2026-2773 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in ORCA nAtoms parser CVE-2022-46289, GHSA-rj4c-r689-cm87, PYSEC-2026-2790 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has uninitialized pointer dereference in PQS pFormat CVE-2022-46280, GHSA-8qxc-57hf-hc9j, PYSEC-2026-2777 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has uninitialized pointer dereference in MSI atom parser CVE-2022-44451, GHSA-jr2x-6qf6-q5mc, PYSEC-2026-2784 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in MOL2 attribute/value parser CVE-2022-43607, GHSA-vjg6-gm8m-v5g6, PYSEC-2026-2792 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in PQS coord_file parser CVE-2022-43467, GHSA-f29h-2h58-48r7, PYSEC-2026-2779 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has uninitialized pointer dereference in GRO residue parser CVE-2022-42885, GHSA-mw5r-wq2m-397c, PYSEC-2026-2787 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in CSR PadString (title field) CVE-2022-41793, GHSA-p594-7xw4-g76p, PYSEC-2026-2788 | High | 0.8% | 21 Jul, 2023 | PyPI openbabel |
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser CVE-2022-37331, GHSA-vr3p-gg26-45v9, PYSEC-2026-2793 | High | 0.7% | 21 Jul, 2023 | PyPI openbabel |
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser CVE-2023-37276, GHSA-45c4-8wx5-qw6w, PYSEC-2023-120 | High | 1.3% | 19 Jul, 2023 | PyPI aiohttp |
copyparty vulnerable to path traversal attack CVE-2023-37474, GHSA-pxfv-7rr3-2qjg, PYSEC-2023-127 | High | 44.9% | 14 Jul, 2023 | PyPI copyparty |
cryptography mishandles SSH certificates CVE-2023-38325, GHSA-cf7p-gm2m-833m, PYSEC-2023-112 | High | 0.7% | 14 Jul, 2023 | PyPI cryptography |
Apache Airflow Apache Hive Provider Improper Input Validation vulnerability CVE-2023-37415, GHSA-4q2q-q5pw-2342, PYSEC-2026-1139 | High | 1.6% | 13 Jul, 2023 | PyPI apache-airflow-providers-apache-hive |
Apache Airflow information disclosure vulnerability BIT-airflow-2022-46651, CVE-2022-46651, GHSA-xvw9-3mhm-xjqq, PYSEC-2023-103 | High | 1.2% | 12 Jul, 2023 | PyPI apache-airflow |
Apache Airflow Path Traversal vulnerability BIT-airflow-2023-22887, CVE-2023-22887, GHSA-ggwr-4vr8-g7wv, PYSEC-2023-104 | High | 1.8% | 12 Jul, 2023 | PyPI apache-airflow |
Apache Airflow Improper Input Validation vulnerability BIT-airflow-2023-22888, CVE-2023-22888, GHSA-5946-8p38-vffp, PYSEC-2023-105 | High | 1.4% | 12 Jul, 2023 | PyPI apache-airflow |
Apache Airflow Incorrect Authorization vulnerability BIT-airflow-2023-35908, CVE-2023-35908, GHSA-2h84-3crq-vgfj, PYSEC-2023-119 | High | 1.0% | 12 Jul, 2023 | PyPI apache-airflow |
Apache Airflow Improper Input Validation vulnerability BIT-airflow-2023-36543, CVE-2023-36543, GHSA-3h4m-m55v-gx4m, PYSEC-2023-106 | High | 1.6% | 12 Jul, 2023 | PyPI apache-airflow |
yt-dlp File Downloader cookie leak CVE-2023-35934, GHSA-v8mc-9377-rwjj, PYSEC-2026-2067 | High | 1.0% | 06 Jul, 2023 | PyPI yt-dlp |
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code CVE-2023-36830, GHSA-jqhc-m2j3-fjrx, PYSEC-2023-111 | High | 0.4% | 06 Jul, 2023 | PyPI sqlfluff |
langchain SQL Injection vulnerability CVE-2023-36189, GHSA-7q94-qpjr-xpgm, PYSEC-2023-110 | High | 1.2% | 06 Jul, 2023 | PyPI langchain |
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox CVE-2023-36809, GHSA-jpgw-2r9m-8qfw, PYSEC-2026-1499 | High | 0.7% | 05 Jul, 2023 | PyPI kiwitcms |
ethyca-fides Webserver API Path Traversal vulnerability CVE-2023-36827, GHSA-r25m-cr6v-p9hq, PYSEC-2023-107 | High | 1.5% | 05 Jul, 2023 | PyPI ethyca-fides |
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form CVE-2023-34457, GHSA-x456-3ccm-m6j4, PYSEC-2023-108 | High | 1.1% | 05 Jul, 2023 | PyPI MechanicalSoup PyPI mechanicalsoup |
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module CVE-2023-36814, GHSA-4hpj-8rhv-9x87, PYSEC-2023-113 | High | 0.7% | 03 Jul, 2023 | PyPI Products.CMFCore PyPI products-cmfcore |
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator BIT-django-2023-36053, CVE-2023-36053, GHSA-jh3w-4vvf-mjgr, PYSEC-2023-100 | High | 3.0% | 03 Jul, 2023 | PyPI Django PyPI django |
requests-xml XML External Entity Injection vulnerability CVE-2020-26708, GHSA-ccrc-9x59-3vc4, PYSEC-2023-96 | High | 0.7% | 29 Jun, 2023 | PyPI requests-xml |
py-xml XML External Entity Injection vulnerability CVE-2020-26709, GHSA-j6v2-mwxm-f952, PYSEC-2023-95 | High | 0.8% | 29 Jun, 2023 | PyPI py-xml |
easy-parse XML External Entity Injection vulnerability CVE-2020-26710, GHSA-vv6q-6hwp-vrgp, PYSEC-2023-97 | High | 0.8% | 29 Jun, 2023 | PyPI easy-parse |
Apache Airflow JDBC Provider Improper Input Validation vulnerability CVE-2023-22886, GHSA-mm87-c3x2-6f89, PYSEC-2026-1149 | High | 1.5% | 29 Jun, 2023 | PyPI apache-airflow-providers-jdbc |