Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Out-of-bounds Read in Pillow BIT-pillow-2022-22816, CVE-2022-22816, GHSA-xrcv-f9gm-v42c, PYSEC-2022-9 | Medium | 2.1% | 10 Jan, 2022 | PyPI Pillow PyPI pillow |
Directory-traversal in Django BIT-django-2021-45452, CVE-2021-45452, GHSA-jrh2-hc4r-7jwx, PYSEC-2022-3 | Medium | 2.6% | 05 Jan, 2022 | PyPI Django PyPI django |
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment). BIT-gdal-2021-45943, CVE-2021-45943, PYSEC-2022-43065 | Medium | 1.5% | 01 Jan, 2022 | PyPI gdal |
UltraJSON vulnerable to Out-of-bounds Write CVE-2021-45958, GHSA-fh56-85cw-5pq6, PYSEC-2022-25 | Medium | 1.7% | 01 Jan, 2022 | PyPI ujson |
archivy is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4162, GHSA-9236-8w7q-rmrv, PYSEC-2021-869 | Medium | 0.4% | 25 Dec, 2021 | PyPI archivy |
Buffer Copy without Checking Size of Input in NumPy CVE-2021-41496, GHSA-f7c7-j99h-c22f, PYSEC-2021-857 | Medium | 0.4% | 17 Dec, 2021 | PyPI numpy |
NumPy Buffer Overflow (Disputed) CVE-2021-33430, GHSA-6p56-wp2h-9hxr, PYSEC-2021-854 | Medium | 1.2% | 17 Dec, 2021 | PyPI numpy |
Incorrect Comparison in NumPy CVE-2021-34141, GHSA-fpfv-jqm9-f5jm, PYSEC-2021-855 | Medium | 1.7% | 17 Dec, 2021 | PyPI numpy |
Permissions not properly checked in Invenio-Drafts-Resources CVE-2021-43781, GHSA-xr38-w74q-r8jv, PYSEC-2021-836, PYSEC-2021-837, PYSEC-2021-838 | Medium | 0.7% | 06 Dec, 2021 | PyPI invenio-app-rdm PyPI invenio-drafts-resources PyPI invenio-rdm-records |
Cross-site Scripting in CKAN CVE-2021-25967, GHSA-6w9p-88qg-p3g3, PYSEC-2021-841 | Medium | 0.5% | 01 Dec, 2021 | PyPI ckan |
Denial of Service in python-ldap CVE-2021-46823, GHSA-qfr5-wjpw-q4c4, GHSA-r8wq-qrxc-hmcm, PYSEC-2026-912 | Medium | 1.9% | 29 Nov, 2021 | PyPI python-ldap |
S3Scanner allows Directory Traversal CVE-2021-32061, GHSA-qppg-v75c-r5ff, PYSEC-2021-433 | Medium | 1.6% | 29 Nov, 2021 | PyPI s3scanner |
Cross-site Scripting in django-wiki CVE-2021-25986, GHSA-3m3h-v9hv-9j4h, PYSEC-2021-850 | Medium | 0.6% | 23 Nov, 2021 | PyPI wiki |
Deadlock in mutually recursive `tf.function` objects BIT-tensorflow-2021-41213, CVE-2021-41213, GHSA-h67m-xg8f-fxcf, PYSEC-2021-405, PYSEC-2021-622, PYSEC-2021-820 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault due to negative splits in `SplitV` BIT-tensorflow-2021-41222, CVE-2021-41222, GHSA-cpf4-wx82-gxp6, PYSEC-2021-414, PYSEC-2021-631, PYSEC-2021-829 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Arbitrary memory read in `ImmutableConst` BIT-tensorflow-2021-41227, CVE-2021-41227, GHSA-j8c8-67vp-6mx7, PYSEC-2021-419, PYSEC-2021-636, PYSEC-2021-834 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Overflow/crash in `tf.range` BIT-tensorflow-2021-41202, CVE-2021-41202, GHSA-xrqm-fpgr-6hhx, PYSEC-2021-395, PYSEC-2021-612, PYSEC-2021-810 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in `ParallelConcat` BIT-tensorflow-2021-41207, CVE-2021-41207, GHSA-7v94-64hj-m82h, PYSEC-2021-399, PYSEC-2021-616, PYSEC-2021-814 | Medium | 0.1% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in convolutions with zero size filters BIT-tensorflow-2021-41209, CVE-2021-41209, GHSA-6hpv-v2rx-c5g6, PYSEC-2021-401, PYSEC-2021-618, PYSEC-2021-816 | Medium | 0.1% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer division by 0 in `tf.raw_ops.AllToAll` BIT-tensorflow-2021-41218, CVE-2021-41218, GHSA-9crf-c6qr-r273, PYSEC-2021-410, PYSEC-2021-627, PYSEC-2021-825 | Medium | 0.1% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault while copying constant resource tensor BIT-tensorflow-2021-41204, CVE-2021-41204, GHSA-786j-5qwq-r36x, PYSEC-2021-397, PYSEC-2021-614, PYSEC-2021-812 | Medium | 0.1% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer exception in `DeserializeSparse` BIT-tensorflow-2021-41215, CVE-2021-41215, GHSA-x3v8-c8qx-3j3r, PYSEC-2021-407, PYSEC-2021-624, PYSEC-2021-822 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer exception when `Exit` node is not preceded by `Enter` op BIT-tensorflow-2021-41217, CVE-2021-41217, GHSA-5crj-c72x-m7gq, PYSEC-2021-409, PYSEC-2021-626, PYSEC-2021-824 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash in `tf.math.segment_*` operations BIT-tensorflow-2021-41195, CVE-2021-41195, GHSA-cq76-mxrc-vchh, PYSEC-2021-842, PYSEC-2021-844, PYSEC-2021-846 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash in `max_pool3d` when size argument is 0 or negative BIT-tensorflow-2021-41196, CVE-2021-41196, GHSA-m539-j985-hcr8, PYSEC-2021-389, PYSEC-2021-606, PYSEC-2021-804 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes BIT-tensorflow-2021-41197, CVE-2021-41197, GHSA-prcg-wp5q-rv7p, PYSEC-2021-390, PYSEC-2021-607, PYSEC-2021-805 | Medium | 0.3% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Overflow/crash in `tf.tile` when tiling tensor is large BIT-tensorflow-2021-41198, CVE-2021-41198, GHSA-2p25-55c9-h58q, PYSEC-2021-391, PYSEC-2021-608, PYSEC-2021-806 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Overflow/crash in `tf.image.resize` when size is large BIT-tensorflow-2021-41199, CVE-2021-41199, GHSA-5hx2-qx8j-qjqm, PYSEC-2021-392, PYSEC-2021-609, PYSEC-2021-807 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `tf.summary.create_file_writer` BIT-tensorflow-2021-41200, CVE-2021-41200, GHSA-gh8h-7j2j-qv4f, PYSEC-2021-393, PYSEC-2021-610, PYSEC-2021-808 | Medium | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Stored XSS in Jupyter nbdime CVE-2021-41134, GHSA-p6rw-44q7-3fw4, PYSEC-2021-428 | Medium | 0.7% | 03 Nov, 2021 | PyPI nbdime npm nbdime npm nbdime-jupyterlab |
Cross-site scripting vulnerability in TinyMCE plugins CVE-2024-21910, GHSA-r8hm-w5f7-wj39, PYSEC-2026-632 | Medium | 1.0% | 02 Nov, 2021 | NuGet TinyMCE Packagist tinymce/tinymce PyPI django-tinymce npm tinymce |
Apache Superset Cross-site Scripting (XSS) vulnerability on the Explore page BIT-superset-2021-32609, CVE-2021-32609, GHSA-f8vc-f28w-x9c9, PYSEC-2021-377 | Medium | 1.7% | 18 Oct, 2021 | PyPI apache-superset |
Cross-site Scripting in django-unicorn CVE-2021-42134, GHSA-ggmv-6q9p-9gm6, PYSEC-2021-369 | Medium | 0.7% | 11 Oct, 2021 | PyPI django-unicorn |
Cross-site scripting in Unicorn framework CVE-2021-42053, GHSA-c87f-fq5g-63r2, PYSEC-2021-357 | Medium | 2.5% | 07 Oct, 2021 | PyPI django-unicorn |
Scrapy HTTP authentication credentials potentially leaked to target websites CVE-2021-41125, GHSA-jwqp-28gf-p498, PYSEC-2021-363 | Medium | 1.3% | 06 Oct, 2021 | PyPI Scrapy PyPI scrapy |
Verification check bypass in Gate One CVE-2020-19003, GHSA-q6j2-g8qf-wvf7, PYSEC-2021-423 | Medium | 0.8% | 06 Oct, 2021 | PyPI gateone |
missing clamps for decimal args in external functions CVE-2021-41122, GHSA-c7pr-343r-5c46, PYSEC-2021-366 | Medium | 0.8% | 05 Oct, 2021 | PyPI vyper |
Information disclosure vulnerability in OnionShare CVE-2021-41867, GHSA-6rvj-pw9w-jcvc, PYSEC-2026-696 | Medium | 1.8% | 04 Oct, 2021 | PyPI onionshare-cli |
Cross-site Scripting in shuup CVE-2021-25963, GHSA-5pcx-vqjp-p34w, PYSEC-2021-350 | Medium | 1.0% | 30 Sep, 2021 | PyPI shuup |
furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client CVE-2021-31604, GHSA-vw35-c8hf-fwmq, PYSEC-2021-352 | Medium | 0.7% | 27 Sep, 2021 | PyPI openvpn-monitor |
Wrong type for `Linker`-define functions when used across two `Engine`s CVE-2021-39216, CVE-2021-39218, CVE-2021-39219, GHSA-4873-36h9-wv49, GHSA-q879-9g95-56mx, GHSA-v4cp-h94r-m7xf, PYSEC-2021-320, PYSEC-2021-321, PYSEC-2021-322, RUSTSEC-2021-0110 | Medium | 0.4% | 17 Sep, 2021 | PyPI wasmtime crates.io wasmtime |
GNU Mailman Postorius Access Control Issues CVE-2021-40347, GHSA-v83x-78q3-gr2j, PYSEC-2021-319 | Medium | 1.2% | 10 Sep, 2021 | PyPI postorius |
Flask-AppBuilder Open Redirect vulnerability CVE-2021-32805, GHSA-624f-cqvr-3qw4, PYSEC-2021-359 | Medium | 0.7% | 08 Sep, 2021 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Cross Site Scripting (XSS) in Simiki CVE-2020-19000, GHSA-fqr5-qphf-vfr8, PYSEC-2021-347 | Medium | 1.1% | 27 Aug, 2021 | PyPI simiki |
Mezzanine Cross Site Scripting (XSS) vulnerability CVE-2020-19002, GHSA-fpv7-hx6r-9vcx, PYSEC-2021-343 | Medium | 1.1% | 27 Aug, 2021 | PyPI Mezzanine PyPI mezzanine |
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input. CVE-2020-18899, PYSEC-2021-879 | Medium | 1.7% | 19 Aug, 2021 | PyPI exiv2 |
Cross-site scripting in pywb CVE-2021-39286, GHSA-947x-pv47-pp3q, PYSEC-2021-120 | Medium | 0.7% | 18 Aug, 2021 | PyPI pywb |
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability CVE-2020-18699, GHSA-rvf8-c35m-8289, PYSEC-2021-340 | Medium | 1.3% | 16 Aug, 2021 | PyPI lin-cms |
Cross Site Scripting (XSS) in Quokka CVE-2020-18702, GHSA-5m69-3chg-6f8m, PYSEC-2021-143 | Medium | 1.3% | 16 Aug, 2021 | PyPI quokka |
Missing Authorization in Apache Airflow BIT-airflow-2021-35936, CVE-2021-35936, GHSA-m6h2-jx9v-58w6, PYSEC-2021-122 | Medium | 5.5% | 16 Aug, 2021 | PyPI apache-airflow |