Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in spaysrbdata (PyPI) MAL-2026-5170 | Malicious | Not scored | 02 Jun, 2026 | PyPI spaysrbdata |
OpenMed vulnerable to remote code injection through privacy-filter model loading path CVE-2026-47117, GHSA-m3v4-v5gx-7wf5, PYSEC-2026-2852 | Critical | 0.9% | 02 Jun, 2026 | PyPI openmed |
Malicious release: Malicious code in jules-test-utils (PyPI) MAL-2026-5167 | Malicious | Not scored | 02 Jun, 2026 | PyPI jules-test-utils |
Duplicate Advisory: Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path() CVE-2026-5422, GHSA-gf7q-q4j7-hp7c, PYSEC-2026-2532 | High | 4.9% | 02 Jun, 2026 | PyPI jupyter-server |
Malicious release: Malicious code in bt-signal-utils (PyPI) MAL-2026-5160 | Malicious | Not scored | 02 Jun, 2026 | PyPI bt-signal-utils |
Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready' CVE-2026-3514, GHSA-c635-393c-hcx2, PYSEC-2026-2261 | High | 0.5% | 02 Jun, 2026 | PyPI prefect |
Malicious release: Malicious code in quant-backtest-helpers (PyPI) MAL-2026-5152 | Malicious | Not scored | 02 Jun, 2026 | PyPI quant-backtest-helpers |
MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions BIT-mlflow-2026-3198, CVE-2026-3198, GHSA-r5m9-wm49-959f, PYSEC-2026-2659 | Medium | 0.2% | 02 Jun, 2026 | PyPI mlflow |
FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content() CVE-2026-10566, GHSA-3c3g-7hwg-9qmr, PYSEC-2026-2637 | Low | 0.1% | 02 Jun, 2026 | PyPI metagpt |
Malicious release: Malicious code in parsimonius (PyPI) MAL-2026-5151 | Malicious | Not scored | 02 Jun, 2026 | PyPI parsimonius |
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice CVE-2026-10300, GHSA-m2jr-x4gq-5rmj, PYSEC-2026-3064 | Low | 0.4% | 01 Jun, 2026 | PyPI sglang |
Nanobot contains a server-side request forgery vulnerability in the web_fetch tool CVE-2026-49138, GHSA-434r-7c99-hwf3, PYSEC-2026-3580 | Medium | 0.4% | 01 Jun, 2026 | PyPI nanobot-ai |
pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory CVE-2026-8643, GHSA-wf93-45jw-7689, PYSEC-2026-196 | Medium | 0.3% | 01 Jun, 2026 | PyPI pip |
Malicious release: Malicious code in imgmatrix-analysis (PyPI) MAL-2026-5123 | Malicious | Not scored | 01 Jun, 2026 | PyPI imgmatrix-analysis |
kas checks out SHA-like git branches as valid commits CVE-2026-47191, GHSA-qjwp-hrq6-r26r, PYSEC-2026-2544 | Low | 0.2% | 01 Jun, 2026 | PyPI kas |
praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id} CVE-2026-47412, GHSA-g8rr-7rj2-f627, PYSEC-2026-2934 | High | 0.5% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR CVE-2026-47415, GHSA-xwq8-frcg-77q8, PYSEC-2026-2939 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members CVE-2026-47413, GHSA-8g2p-pqm3-fcfh, PYSEC-2026-480 | Critical | 0.3% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id} CVE-2026-47411, GHSA-rcmc-q9rj-4wmq, PYSEC-2026-2937 | Medium | 0.3% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR CVE-2026-47417, GHSA-cp4f-5m9r-5jc2, PYSEC-2026-2933 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR CVE-2026-47418, GHSA-943m-6wx2-rc2j, PYSEC-2026-2932 | High | 0.4% | 01 Jun, 2026 | PyPI praisonai-platform |
rattler has an entry-point path traversal in noarch:python install (arbitrary file write) CVE-2026-47425, GHSA-q53q-5r4j-5729, PYSEC-2026-2971 | Medium | 0.2% | 01 Jun, 2026 | PyPI py-rattler crates.io rattler |
Malicious release: Malicious code in redteam-qxz7-utils (PyPI) MAL-2026-5120 | Malicious | Not scored | 01 Jun, 2026 | PyPI redteam-qxz7-utils |
Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args BIT-airflow-2026-49298, CVE-2026-49298, GHSA-5j6p-jrrm-6x94, PYSEC-2026-2358 | High | 0.5% | 01 Jun, 2026 | PyPI apache-airflow-core |
Apache Airflow has no certificate validation on SMTP STARTTLS connections BIT-airflow-2026-49267, CVE-2026-49267, GHSA-799x-qp47-8qwq, PYSEC-2026-2346 | Medium | 0.2% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Auth manager doesn't invalidate JWT tokens after users click logout BIT-airflow-2026-48726, CVE-2026-48726, GHSA-vr7m-c6v4-8cx8, PYSEC-2026-187 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has an Authorization Bypass Through User-Controlled Key BIT-airflow-2026-46764, CVE-2026-46764, GHSA-qphr-3mvq-v466, PYSEC-2026-2354 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has an Incorrect Authorization issue BIT-airflow-2026-45426, CVE-2026-45426, GHSA-x5wm-j6wh-2834, PYSEC-2026-174 | Low | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Deserialization of Untrusted Data BIT-airflow-2026-45360, CVE-2026-45360, GHSA-2r5m-76wx-56gx, PYSEC-2026-186 | High | 0.7% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor BIT-airflow-2026-42360, CVE-2026-42360, GHSA-cg3x-89rc-x9mw, PYSEC-2026-172 | Medium | 0.3% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Deserialization of Untrusted Data vulnerability BIT-airflow-2026-42359, CVE-2026-42359, GHSA-wr76-29cr-67w8, PYSEC-2026-185 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor BIT-airflow-2026-42358, CVE-2026-42358, GHSA-33g2-gx67-c2h3, PYSEC-2026-2343 | Medium | 0.3% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine BIT-airflow-2026-42252, CVE-2026-42252, GHSA-c85c-g9wv-pph2, PYSEC-2026-184 | Critical | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key BIT-airflow-2026-41084, CVE-2026-41084, GHSA-mxq5-f9c5-w4p5, PYSEC-2026-183 | High | 0.5% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute BIT-airflow-2026-41017, CVE-2026-41017, GHSA-95v7-h9j5-gvjr, PYSEC-2026-171 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Missing Authorization issue BIT-airflow-2026-41014, CVE-2026-41014, GHSA-x2x7-p37c-43cr, PYSEC-2026-182 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has an Improper Authorization issue BIT-airflow-2026-40963, CVE-2026-40963, GHSA-gprj-xvq8-w53q, PYSEC-2026-2349 | Low | 0.5% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Authenticated users can bypass the `is_safe_url` check BIT-airflow-2026-40961, CVE-2026-40961, GHSA-6hcw-qqr8-pjj8, PYSEC-2026-2345 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Link Following issue BIT-airflow-2026-40861, CVE-2026-40861, GHSA-89cj-xrpx-j79m, PYSEC-2026-181 | Medium | 0.7% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Incomplete redaction allowlist exposes secrets in Connection `extra` to read-permitted users BIT-airflow-2026-45192, CVE-2026-45192, GHSA-2883-wwh7-x57v, PYSEC-2026-173 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
hermes-agent has an Uncontrolled Resource Consumption issue CVE-2026-10224, GHSA-pmqc-57g8-c22c, PYSEC-2026-3576 | Medium | 0.4% | 01 Jun, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-10223, GHSA-33qv-c5qm-799v, PYSEC-2026-3575 | Low | 0.2% | 01 Jun, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-10222, GHSA-mv8x-fg99-32mf, PYSEC-2026-2513 | Low | 0.3% | 01 Jun, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-10221, GHSA-xq8w-9jvx-gm3v, PYSEC-2026-3577 | Medium | 0.3% | 01 Jun, 2026 | PyPI hermes-agent |
AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass CVE-2026-10212, GHSA-r6vm-4xwg-w69h, PYSEC-2026-2383 | Low | 0.2% | 01 Jun, 2026 | PyPI AstrBot PyPI astrbot |
Malicious release: Malicious code in discord-massban (PyPI) MAL-2026-5099 | Malicious | Not scored | 31 May, 2026 | PyPI discord-massban |
Malicious release: Malicious code in obfuscation (PyPI) MAL-2026-5100 | Malicious | Not scored | 31 May, 2026 | PyPI obfuscation |
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint CVE-2026-10177, GHSA-hchg-qm84-cj9p, PYSEC-2026-2336 | Low | 0.2% | 31 May, 2026 | PyPI aider-chat |
Aider is vulnerable to Code Injection via editor_coder.run function CVE-2026-10175, GHSA-7w7m-v5vp-w699, PYSEC-2026-2335 | Low | 0.2% | 31 May, 2026 | PyPI aider-chat |
Malicious release: Malicious code in cscc-glass-house (PyPI) MAL-2026-5096 | Malicious | Not scored | 31 May, 2026 | PyPI cscc-glass-house |