Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing CVE-2026-47781, GHSA-qq6c-99pv-prvf, PYSEC-2026-2863 | High | 0.2% | 11 Jun, 2026 | PyPI pdm |
Malicious release: Malicious code in bibip-bip (PyPI) MAL-2026-5649 | Malicious | Not scored | 11 Jun, 2026 | PyPI bibip-bip |
vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method CVE-2026-5497, GHSA-wcwg-c5fc-9vrc, PYSEC-2026-2302 | High | 0.5% | 11 Jun, 2026 | PyPI vllm |
Malicious release: Malicious code in acme-widget-layout-utils (PyPI) MAL-2026-5545 | Malicious | Not scored | 11 Jun, 2026 | PyPI acme-widget-layout-utils |
Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload CVE-2026-52726, GHSA-gfhv-vqv2-4544, PYSEC-2026-2465 | High | 0.4% | 10 Jun, 2026 | PyPI dulwich |
Malicious release: Malicious code in icinga (PyPI) MAL-2026-5532 | Malicious | Not scored | 10 Jun, 2026 | PyPI icinga |
kafka-python vulnerable to denial of service through an unbounded SCRAM iteration count CVE-2026-10143, GHSA-2jcm-hq8r-84wx, PYSEC-2026-2191 | High | 0.5% | 10 Jun, 2026 | PyPI kafka-python |
kafka-python vulnerable to denial of service through an unvalidated protocol frame length CVE-2026-10142, GHSA-m3px-q5gj-j9x7, PYSEC-2026-2190 | High | 0.3% | 10 Jun, 2026 | PyPI kafka-python |
PDM wheel installation leads to Path Traversal via overridden write_to_fs CVE-2026-47764, GHSA-78v8-vpjp-cjqh, PYSEC-2026-2861 | High | 0.2% | 10 Jun, 2026 | PyPI pdm |
PDM: Project-Local State and Config Writes Follow Symlinks CVE-2026-47763, GHSA-ghq2-5c67-fprm, PYSEC-2026-2862 | Medium | 0.2% | 10 Jun, 2026 | PyPI pdm |
Weblate SSRF: outbound URL guard misses some private ranges CVE-2026-50127, GHSA-vmfc-9982-2m45, PYSEC-2026-3416 | Medium | 0.3% | 10 Jun, 2026 | PyPI weblate |
Malicious release: Malicious code in telegramlite (PyPI) MAL-2026-5531 | Malicious | Not scored | 10 Jun, 2026 | PyPI telegramlite |
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header CVE-2026-48061, GHSA-3qmc-cj7q-62hv, PYSEC-2026-2603 | Medium | 0.4% | 10 Jun, 2026 | PyPI litestar |
Litestar has HTML Injection Through its CSRF Token CVE-2026-48060, GHSA-542p-wvx7-72m4, PYSEC-2026-2604 | High | 0.4% | 10 Jun, 2026 | PyPI litestar |
Malicious release: Malicious code in hello-dynamic (PyPI) MAL-2026-5518 | Malicious | Not scored | 10 Jun, 2026 | PyPI hello-dynamic |
Malicious release: Malicious code in requests-toolbelt-plus (PyPI) MAL-2026-5519 | Malicious | Not scored | 10 Jun, 2026 | PyPI requests-toolbelt-plus |
vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors CVE-2026-47155, GHSA-3ww4-5jv9-j5gm, PYSEC-2026-2301 | Medium | 0.2% | 10 Jun, 2026 | PyPI vllm |
Malicious release: Malicious code in bittensor-emission-tracker (PyPI) MAL-2026-5489 | Malicious | Not scored | 09 Jun, 2026 | PyPI bittensor-emission-tracker |
Malicious release: Malicious code in tao-subnet-metrics (PyPI) MAL-2026-5457 | Malicious | Not scored | 09 Jun, 2026 | PyPI tao-subnet-metrics |
Malicious release: Malicious code in ultimate-ai-power (PyPI) MAL-2026-5458 | Malicious | Not scored | 09 Jun, 2026 | PyPI ultimate-ai-power |
Malicious release: Malicious code in cubifyanything (PyPI) MAL-2026-5404 | Malicious | Not scored | 09 Jun, 2026 | PyPI cubifyanything |
awxkit has a path traversal vulnerability CVE-2026-52902, GHSA-g29c-rgq6-gxgj, PYSEC-2026-3550 | Medium | 0.1% | 09 Jun, 2026 | PyPI awxkit |
Malicious release: Malicious code in dstill (PyPI) MAL-2026-5345 | Malicious | Not scored | 09 Jun, 2026 | PyPI dstill |
Apache Airflow has a Path Traversal issue CVE-2026-49818, GHSA-f6vj-48fm-hmvx, PYSEC-2026-208 | Medium | 0.6% | 09 Jun, 2026 | PyPI apache-airflow-providers-samba |
Dulwich has unbounded memory allocation in receive-pack from crafted thin packs CVE-2026-47734, GHSA-xrvj-v92f-53gj, PYSEC-2026-2466 | Medium | 0.2% | 08 Jun, 2026 | PyPI dulwich |
Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` CVE-2026-47712, GHSA-555p-6grf-mh7f, PYSEC-2026-2462 | Low | 0.1% | 08 Jun, 2026 | PyPI dulwich |
Malicious release: Malicious code in xfoofoox (PyPI) MAL-2026-5340 | Malicious | Not scored | 08 Jun, 2026 | PyPI xfoofoox |
Malicious release: Malicious code in solana-web3-py (PyPI) MAL-2026-5338 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-web3-py |
Malicious release: Malicious code in solana-cli-py (PyPI) MAL-2026-5336 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-cli-py |
Malicious release: Malicious code in solana-web3 (PyPI) MAL-2026-5337 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-web3 |
Malicious release: Malicious code in spl-token-py (PyPI) MAL-2026-5339 | Malicious | Not scored | 08 Jun, 2026 | PyPI spl-token-py |
Malicious release: Malicious code in xfoobar (PyPI) MAL-2026-5335 | Malicious | Not scored | 08 Jun, 2026 | PyPI xfoobar |
Malicious release: Malicious code in spaysrbx (PyPI) MAL-2026-5334 | Malicious | Not scored | 08 Jun, 2026 | PyPI spaysrbx |
Malicious release: Malicious code in nerfstudio-gs (PyPI) MAL-2026-5333 | Malicious | Not scored | 08 Jun, 2026 | PyPI nerfstudio-gs |
Malicious release: Malicious code in bittensor-burn (PyPI) MAL-2026-5331 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn |
Malicious release: Malicious code in xforpy (PyPI) MAL-2026-5332 | Malicious | Not scored | 08 Jun, 2026 | PyPI xforpy |
Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type CVE-2026-41479, GHSA-w8p2-r796-3vmq, PYSEC-2026-2119 | Medium | 0.3% | 08 Jun, 2026 | PyPI authlib |
MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler CVE-2026-11529, GHSA-mvq4-39wx-6h5g, PYSEC-2026-3579 | Low | 0.2% | 08 Jun, 2026 | PyPI mysql-mcp-server |
Malicious release: Malicious code in odoo-addon-spp-base (PyPI) MAL-2026-5367 | Malicious | Not scored | 08 Jun, 2026 | PyPI odoo-addon-spp-base |
Malicious release: Malicious code in bittensor-burn-alert (PyPI) MAL-2026-5330 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn-alert |
Malicious release: Malicious code in spaysdatarbx (PyPI) MAL-2026-5329 | Malicious | Not scored | 08 Jun, 2026 | PyPI spaysdatarbx |
Malicious release: Malicious code in bt-burn-watch (PyPI) MAL-2026-5312 | Malicious | Not scored | 08 Jun, 2026 | PyPI bt-burn-watch |
Malicious release: Malicious code in bittensor-burn-monitor (PyPI) MAL-2026-5311 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn-monitor |
Malicious release: Malicious code in openai-mcp (PyPI) MAL-2026-5320, PYSEC-2026-1072 | Malicious | Not scored | 08 Jun, 2026 | PyPI openai-mcp |
Malicious release: Malicious code in tiktoken-mcp (PyPI) MAL-2026-5326, PYSEC-2026-1075 | Malicious | Not scored | 08 Jun, 2026 | PyPI tiktoken-mcp |
Malicious release: Malicious code in tlask (PyPI) MAL-2026-5305, PYSEC-2026-586 | Malicious | Not scored | 08 Jun, 2026 | PyPI tlask |
Malicious release: Malicious code in rlask (PyPI) MAL-2026-5303, PYSEC-2026-584 | Malicious | Not scored | 08 Jun, 2026 | PyPI rlask |
Malicious release: Malicious code in rsquests (PyPI) MAL-2026-5304 | Malicious | Not scored | 08 Jun, 2026 | PyPI rsquests |
Malicious release: Malicious code in nhmpy (PyPI) MAL-2026-5302, PYSEC-2026-583 | Malicious | Not scored | 08 Jun, 2026 | PyPI nhmpy |
zilliztech deep-searcher has an Incorrect Privilege Assignment issue CVE-2026-11466, GHSA-43px-gpwc-q84v, PYSEC-2026-3567 | Low | 0.3% | 07 Jun, 2026 | PyPI deepsearcher |