Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MobSF allows attackers to read arbitrary files via a crafted HTTP request CVE-2022-41547, GHSA-f42p-vc8p-7x54, PYSEC-2026-848 | High | 1.5% | 18 Oct, 2022 | PyPI mobsf |
Withdrawn Advisory: ReDoS in py library when used with subversion CVE-2022-42969, GHSA-w596-4wvx-j9j6, PYSEC-2022-42969, PYSEC-2022-43183 | High | 2.1% | 16 Oct, 2022 | PyPI py |
Django denial-of-service vulnerability in internationalized URLs BIT-django-2022-41323, CVE-2022-41323, GHSA-qrw5-5h28-6cmg, PYSEC-2022-304 | High | 3.8% | 16 Oct, 2022 | PyPI django |
Powerline Gitstatus vulnerable to arbitrary code execution CVE-2022-42906, GHSA-w67g-6gjv-c599, PYSEC-2026-898 | High | 0.5% | 13 Oct, 2022 | PyPI powerline-gitstatus |
django-mfa2 vulnerable to MFA Replay attack CVE-2022-42731, GHSA-vw39-2wj9-4q86, PYSEC-2022-303 | High | 1.5% | 11 Oct, 2022 | PyPI django-mfa2 |
Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API BIT-airflow-2022-41672, CVE-2022-41672, GHSA-3q8r-f3pj-3gc4, PYSEC-2022-42983 | High | 1.5% | 07 Oct, 2022 | PyPI apache-airflow |
rdiffweb Path Traversal vulnerability CVE-2022-3389, GHSA-hrrm-895h-xh34, PYSEC-2022-302 | High | 1.4% | 06 Oct, 2022 | PyPI rdiffweb |
LIEF vulnerable to denial of service through segmentation fault CVE-2022-40922, GHSA-38hf-c37x-32hv, PYSEC-2022-43138 | High | 0.7% | 03 Oct, 2022 | PyPI lief |
Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module CVE-2022-36551, GHSA-pc6f-259w-w3j6, PYSEC-2022-300 | High | 6.9% | 03 Oct, 2022 | PyPI label-studio |
rdiffweb's lack of token name length limit can result in DoS or memory corruption CVE-2022-3371, GHSA-3fhq-72hw-jqwv, PYSEC-2022-299 | High | 1.3% | 30 Sep, 2022 | PyPI rdiffweb |
rdiffweb's unlimited length Fullname field can lead to DoS CVE-2022-3364, GHSA-fqfg-c577-2vc3, PYSEC-2022-298 | High | 1.2% | 29 Sep, 2022 | PyPI rdiffweb |
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder CVE-2022-39254, GHSA-w4pr-4vjg-hffh, PYSEC-2026-842 | High | 0.7% | 29 Sep, 2022 | PyPI matrix-nio |
ReDoS issue in dparse CVE-2022-39280, GHSA-8fg9-p83m-x5pq, PYSEC-2022-301 | High | 1.3% | 27 Sep, 2022 | PyPI dparse |
rdiffweb vulnerable to potential DoS via memory consumption CVE-2022-3298, GHSA-xhw9-4wqq-x67v, PYSEC-2022-294 | High | 1.2% | 26 Sep, 2022 | PyPI rdiffweb |
rdiffweb's unlimited username field length can lead to DoS CVE-2022-3290, GHSA-5v95-j4rr-6f3c, PYSEC-2022-292, PYSEC-2022-43184 | High | 0.9% | 26 Sep, 2022 | PyPI rdiffweb |
rdiffweb's unlimited length email field can lead to DoS CVE-2022-3272, GHSA-qrj3-hrgj-fm7r, PYSEC-2022-291 | High | 1.8% | 26 Sep, 2022 | PyPI rdiffweb |
rdiffweb allows unlimited length of root directory name, which could result in DoS CVE-2022-3295, GHSA-hrj7-f62f-j7x7, PYSEC-2022-293 | High | 1.2% | 26 Sep, 2022 | PyPI rdiffweb |
rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed CVE-2022-3274, GHSA-gmj8-84r4-h46j, PYSEC-2022-289 | High | 0.5% | 22 Sep, 2022 | PyPI rdiffweb |
protobuf-cpp and protobuf-python have potential Denial of Service issue CVE-2022-1941, GHSA-8gq9-2x98-w8hf, PYSEC-2026-899 | High | 1.5% | 22 Sep, 2022 | PyPI protobuf |
autogluon.multimodal vulnerable to unsafe YAML deserialization GHSA-6h2x-4gjf-jc5w | High | Not scored | 21 Sep, 2022 | PyPI autogluon-multimodal PyPI autogluon.multimodal |
OctoPrint Improper Privilege Management vulnerability CVE-2022-3068, GHSA-2p75-q37p-f852, PYSEC-2022-283 | High | 0.5% | 21 Sep, 2022 | PyPI OctoPrint PyPI octoprint |
Apache Airflow vulnerable to Use of Externally-Controlled Format String BIT-airflow-2022-40604, CVE-2022-40604, GHSA-5rp4-749p-vx26, PYSEC-2022-279 | High | 2.1% | 21 Sep, 2022 | PyPI apache-airflow |
WASM3 Improper Input Validation vulnerability CVE-2022-39974, GHSA-crf8-h2wq-2h9x, PYSEC-2022-43058 | High | 0.9% | 20 Sep, 2022 | PyPI pywasm3 crates.io wasm3 |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` BIT-tensorflow-2022-35990, CVE-2022-35990, GHSA-h7ff-cfc9-wmmh, PYSEC-2026-1006, PYSEC-2026-3199, PYSEC-2026-3338 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `MaxPool` BIT-tensorflow-2022-35989, CVE-2022-35989, GHSA-j43h-pgmg-5hjq, PYSEC-2026-1011, PYSEC-2026-3205, PYSEC-2026-3343 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank` BIT-tensorflow-2022-35988, CVE-2022-35988, GHSA-9vqj-64pv-w55c, PYSEC-2026-3156, PYSEC-2026-3308, PYSEC-2026-980 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `RaggedBincount` BIT-tensorflow-2022-35986, CVE-2022-35986, GHSA-wr9v-g9vf-c74v, PYSEC-2026-938 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow |
TensorFlow vulnerable to `CHECK` fail in `LRNGrad` BIT-tensorflow-2022-35985, CVE-2022-35985, GHSA-9942-r22v-78cp, PYSEC-2026-3147, PYSEC-2026-3303, PYSEC-2026-975 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal` BIT-tensorflow-2022-35984, CVE-2022-35984, GHSA-p2xf-8hgm-hpw5, PYSEC-2026-1023, PYSEC-2026-3219, PYSEC-2026-3355 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices` BIT-tensorflow-2022-35983, CVE-2022-35983, GHSA-m6vp-8q9j-whx4, PYSEC-2026-1017, PYSEC-2026-3213, PYSEC-2026-3349 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `SparseBincount` BIT-tensorflow-2022-35982, CVE-2022-35982, GHSA-397c-5g2j-qxpv, PYSEC-2026-3093, PYSEC-2026-3270, PYSEC-2026-947 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad` BIT-tensorflow-2022-35981, CVE-2022-35981, GHSA-vxv8-r8q2-63xw, PYSEC-2026-1041, PYSEC-2026-3250, PYSEC-2026-3375 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6` BIT-tensorflow-2022-35979, CVE-2022-35979, GHSA-v7vw-577f-vp8x, PYSEC-2026-1038, PYSEC-2026-3245, PYSEC-2026-3372 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` BIT-tensorflow-2022-35991, CVE-2022-35991, GHSA-vm7x-4qhj-rrcq, PYSEC-2026-1040, PYSEC-2026-3248, PYSEC-2026-3374 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor` BIT-tensorflow-2022-35992, CVE-2022-35992, GHSA-9v8w-xmr4-wgxp, PYSEC-2026-3155, PYSEC-2026-3307, PYSEC-2026-979 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `SetSize` BIT-tensorflow-2022-35993, CVE-2022-35993, GHSA-wq6q-6m32-9rv9, PYSEC-2026-1044, PYSEC-2026-3255, PYSEC-2026-3378 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `CollectiveGather` BIT-tensorflow-2022-35994, CVE-2022-35994, GHSA-fhfc-2q7x-929f, PYSEC-2026-3172, PYSEC-2026-3320, PYSEC-2026-990 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to floating point exception in `Conv2D` BIT-tensorflow-2022-35996, CVE-2022-35996, GHSA-q5jv-m6qw-5g37, PYSEC-2026-1029, PYSEC-2026-3228, PYSEC-2026-3361 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `EmptyTensorList` BIT-tensorflow-2022-35998, CVE-2022-35998, GHSA-qhw4-wwr7-gjc5, PYSEC-2026-937 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow |
TensorFlow vulnerable to null dereference on MLIR on empty function attributes BIT-tensorflow-2022-36000, CVE-2022-36000, GHSA-fqxc-pvf8-2w9v, PYSEC-2026-3177, PYSEC-2026-3322, PYSEC-2026-991 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes` BIT-tensorflow-2022-36001, CVE-2022-36001, GHSA-jqm7-m5q7-3hm5, PYSEC-2026-1014, PYSEC-2026-3209, PYSEC-2026-3346 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Unbatch` BIT-tensorflow-2022-36002, CVE-2022-36002, GHSA-mh3m-62v7-68xg, PYSEC-2026-1020, PYSEC-2026-3216, PYSEC-2026-3352 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` BIT-tensorflow-2022-36013, CVE-2022-36013, GHSA-828c-5j5q-vrjq, PYSEC-2026-3132, PYSEC-2026-3295, PYSEC-2026-968 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to null dereference on MLIR on empty function attributes BIT-tensorflow-2022-36011, CVE-2022-36011, GHSA-fv43-93gv-vm8f, PYSEC-2026-3180, PYSEC-2026-3325, PYSEC-2026-994 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `Requantize` BIT-tensorflow-2022-36017, CVE-2022-36017, GHSA-wqmc-pm8c-2jhc, PYSEC-2026-1045, PYSEC-2026-3256, PYSEC-2026-3379 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2` BIT-tensorflow-2022-36003, CVE-2022-36003, GHSA-cv2p-32v3-vhwq, PYSEC-2026-3162, PYSEC-2026-3311, PYSEC-2026-982 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsGradient` BIT-tensorflow-2022-36005, CVE-2022-36005, GHSA-r26c-679w-mrjm, PYSEC-2026-1031, PYSEC-2026-3234, PYSEC-2026-3364 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2` BIT-tensorflow-2022-35995, CVE-2022-35995, GHSA-g9h5-vr8m-x2h4, PYSEC-2026-3186, PYSEC-2026-3329, PYSEC-2026-998 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma` BIT-tensorflow-2022-36004, CVE-2022-36004, GHSA-mv8m-8x97-937q, PYSEC-2026-1022, PYSEC-2026-3218, PYSEC-2026-3354 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` BIT-tensorflow-2022-36016, CVE-2022-36016, GHSA-g468-qj8g-vcjc, PYSEC-2026-3184, PYSEC-2026-3327, PYSEC-2026-996 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |