Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
LiteLLM: Authentication Bypass via Host Header Injection CVE-2026-49468, GHSA-4xpc-pv4p-pm3w, PYSEC-2026-388 | Critical | 3.0% | 16 Jun, 2026 | PyPI litellm |
yt-dlp: Arbitrary code execution via manifest downloads with aria2c CVE-2026-50574, GHSA-vx4q-3cr2-7cg2, PYSEC-2026-3433 | Critical | 0.5% | 16 Jun, 2026 | PyPI yt-dlp |
Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server CVE-2026-56258, GHSA-7cx2-g3h9-382p, PYSEC-2026-228 | Critical | 0.9% | 16 Jun, 2026 | PyPI crawl4ai |
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) CVE-2026-50023, GHSA-c6mh-fpjc-4pr3, PYSEC-2026-3430 | Critical | 0.7% | 16 Jun, 2026 | PyPI yt-dlp |
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution CVE-2026-56260, CVE-2026-56261, CVE-2026-56262, CVE-2026-56263, CVE-2026-56264, CVE-2026-56265, CVE-2026-56266, GHSA-365w-hqf6-vxfg, GHSA-53rg-46cm-4g2v, GHSA-8qrg-7j2f-rf2h, GHSA-f23g-2f38-gg94, GHSA-g2pv-76hm-j4x9, GHSA-r9hw-78q5-478g, GHSA-xrfj-6m49-wfmm, PYSEC-2026-229, PYSEC-2026-230, PYSEC-2026-239, PYSEC-2026-3443, PYSEC-2026-3449, PYSEC-2026-596, PYSEC-2026-798 | Critical | 2.6% | 16 Jun, 2026 | PyPI crawl4ai |
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVE-2026-53753, GHSA-qxjp-w3pj-48m7, PYSEC-2026-319 | Critical | 2.9% | 16 Jun, 2026 | PyPI crawl4ai |
vLLM: OpenAI auth bypass CVE-2026-48746, GHSA-94f4-hr76-p5j6, PYSEC-2026-226 | Critical | 1.2% | 16 Jun, 2026 | PyPI vllm |
Langflow: Unauthenticated RCE in Shareable Playgrounds CVE-2026-48519, GHSA-v5ff-9q35-q26f, PYSEC-2026-243 | Critical | 0.8% | 16 Jun, 2026 | PyPI langflow |
ChromaDB has a code injection vulnerability CVE-2026-45833, GHSA-36p7-vc44-83pf, PYSEC-2026-3814 | Critical | 0.3% | 12 Jun, 2026 | PyPI chromadb |
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token CVE-2026-48039, GHSA-9gw6-46qc-99vr, PYSEC-2026-413 | Critical | 0.6% | 11 Jun, 2026 | PyPI meta-ads-mcp |
NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker) CVE-2026-47731, GHSA-p462-prxw-mjx4, PYSEC-2026-265 | Critical | 0.9% | 05 Jun, 2026 | PyPI ait-core |
MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper CVE-2026-47708, GHSA-4p62-hqp5-g644, PYSEC-2026-544 | Critical | 0.4% | 04 Jun, 2026 | PyPI stata-mcp |
OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed CVE-2026-41283, GHSA-9hfw-w3f4-c4p8, PYSEC-2026-3486 | Critical | 0.7% | 04 Jun, 2026 | PyPI mistral |
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering CVE-2026-44182, GHSA-cfw7-6c5v-2wjq, PYSEC-2026-362 | Critical | 0.6% | 03 Jun, 2026 | PyPI jupyter-enterprise-gateway PyPI jupyter_enterprise_gateway |
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution CVE-2026-44181, GHSA-f49j-v924-fx9w, PYSEC-2026-364 | Critical | 0.8% | 03 Jun, 2026 | PyPI jupyter-enterprise-gateway PyPI jupyter_enterprise_gateway |
Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass CVE-2026-44180, GHSA-chq7-94j8-cj28, PYSEC-2026-363 | Critical | 0.7% | 03 Jun, 2026 | PyPI jupyter-enterprise-gateway PyPI jupyter_enterprise_gateway |
huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path CVE-2026-5241, GHSA-fgcw-684q-jj6r, PYSEC-2026-2290 | Critical | 0.6% | 03 Jun, 2026 | PyPI transformers |
MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration BIT-mlflow-2026-4035, CVE-2026-4035, GHSA-g35p-px32-whv6, PYSEC-2026-2222 | Critical | 0.5% | 03 Jun, 2026 | PyPI mlflow |
OpenMed vulnerable to remote code injection through privacy-filter model loading path CVE-2026-47117, GHSA-m3v4-v5gx-7wf5, PYSEC-2026-2852 | Critical | 0.9% | 02 Jun, 2026 | PyPI openmed |
praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members CVE-2026-47413, GHSA-8g2p-pqm3-fcfh, PYSEC-2026-480 | Critical | 0.3% | 01 Jun, 2026 | PyPI praisonai-platform |
Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine BIT-airflow-2026-42252, CVE-2026-42252, GHSA-c85c-g9wv-pph2, PYSEC-2026-184 | Critical | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id} CVE-2026-47416, GHSA-c2m8-4gcg-v22g, PYSEC-2026-481 | Critical | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset CVE-2026-47410, GHSA-3qg8-5g3r-79v5, PYSEC-2026-479 | Critical | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation CVE-2026-47407, GHSA-h8q5-cp56-rr65, PYSEC-2026-482 | Critical | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution CVE-2026-47391, GHSA-vg22-4gmj-prxw, PYSEC-2026-478 | Critical | 1.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) CVE-2026-47392, GHSA-4mr5-g6f9-cfrh, PYSEC-2026-463, PYSEC-2026-483 | Critical | 0.9% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default CVE-2026-47393, GHSA-8444-4fhq-fxpq, PYSEC-2026-465 | Critical | 0.6% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset CVE-2026-47396, GHSA-86qc-r5v2-v6x6, PYSEC-2026-466 | Critical | 0.4% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
stigmem-node's federation peer registration lacked explicit out-of-band approval CVE-2026-76242, GHSA-9vp8-3hmv-8fgh | Critical | 0.3% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation CVE-2026-76244, GHSA-jmfc-hfjq-pxcp | Critical | 0.3% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback CVE-2026-76243, GHSA-fp6w-8wpg-74g5 | Critical | 0.6% | 29 May, 2026 | PyPI stigmem-node |
Langroid has Prompt to SQL Injection, Leading to RCE CVE-2026-25879, GHSA-mxfr-6hcw-j9rq, PYSEC-2026-382 | Critical | 0.6% | 27 May, 2026 | PyPI langroid |
MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled BIT-mlflow-2026-2651, CVE-2026-2651, GHSA-8c7q-86fq-vvmh, PYSEC-2026-2220 | Critical | 0.3% | 25 May, 2026 | PyPI mlflow |
Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host CVE-2026-46703, GHSA-f396-4rp4-7v2j, GO-2026-5344, PYSEC-2026-298, RUSTSEC-2026-0148 | Critical | 0.5% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
BoxLite: Permission Bypass Allows Modification of Read-Only Files CVE-2026-46695, GHSA-g6ww-w5j2-r7x3, GO-2026-5392, PYSEC-2026-299, RUSTSEC-2026-0147 | Critical | 0.3% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
Apache Fory PyFory Deserialization of Untrusted Data CVE-2026-48207, GHSA-m5gw-83w2-7749, PYSEC-2026-2984 | Critical | 0.6% | 21 May, 2026 | PyPI pyfory |
APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization CVE-2026-31072, GHSA-9cfw-f3f9-7mm7, PYSEC-2026-282 | Critical | 0.8% | 19 May, 2026 | PyPI apscheduler |
Malicious code in guardrails-ai 0.10.1 (supply chain compromise) CVE-2026-45758, GHSA-xmpw-2vmm-p4p6, PYSEC-2026-206 | Critical | 0.3% | 19 May, 2026 | PyPI guardrails-ai |
rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths CVE-2026-45568, GHSA-jh67-hwqw-m5r7, PYSEC-2026-577 | Critical | 0.5% | 19 May, 2026 | PyPI zrok |
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution BIT-mlflow-2026-2611, CVE-2026-2611, GHSA-67c5-x5mf-rppq, PYSEC-2026-418 | Critical | 0.4% | 19 May, 2026 | PyPI mlflow |
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection CVE-2026-8838, GHSA-29h4-r29x-hchv, PYSEC-2026-521 | Critical | 0.8% | 18 May, 2026 | PyPI redshift-connector |
Malicious dropper in mistralai 2.4.6 PyPI package GHSA-wx9m-wx4f-4cmg | Critical | Not scored | 18 May, 2026 | PyPI mistralai |
ChromaDB Python project has a pre-authentication code injection vulnerability CVE-2026-45829, GHSA-f4j7-r4q5-qw2c, PYSEC-2026-311 | Critical | 15.1% | 18 May, 2026 | PyPI chromadb |
SGLang: Unauthenticated RCE via --enable-custom-logit-processor CVE-2026-7304, GHSA-36m8-w8qf-g76p, PYSEC-2026-535 | Critical | 0.6% | 18 May, 2026 | PyPI sglang |
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability CVE-2026-7302, GHSA-qwrp-wghp-94q2, PYSEC-2026-538 | Critical | 0.4% | 18 May, 2026 | PyPI sglang |
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket CVE-2026-7301, GHSA-gwv6-pq6m-p3rq, PYSEC-2026-536 | Critical | 0.4% | 18 May, 2026 | PyPI sglang |
utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol CVE-2026-45369, GHSA-33p6-5jxp-p3x4, PYSEC-2026-560 | Critical | 0.3% | 14 May, 2026 | PyPI utcp-cli |
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub CVE-2026-31239, GHSA-pq2f-x424-6fjm, PYSEC-2026-406 | Critical | 0.4% | 12 May, 2026 | PyPI mamba-ssm |
Ludwig framework is vulnerable to insecure deserialization in its model serving component CVE-2026-31238, GHSA-xp5q-5q7g-q26r, PYSEC-2026-405 | Critical | 0.5% | 12 May, 2026 | PyPI ludwig |
Ludwig framework is vulnerable to insecure deserialization through its predict() method. CVE-2026-31237, GHSA-wcr3-gm9f-f87q, PYSEC-2026-404 | Critical | 0.6% | 12 May, 2026 | PyPI ludwig |