Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr` BIT-tensorflow-2022-36014, CVE-2022-36014, GHSA-7j3m-8g3c-9qqq, PYSEC-2026-3129, PYSEC-2026-3292, PYSEC-2026-966 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to integer overflow in math ops BIT-tensorflow-2022-36015, CVE-2022-36015, GHSA-rh87-q4vg-m45j, PYSEC-2026-1033, PYSEC-2026-3237, PYSEC-2026-3367 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to assertion fail on MLIR empty edge names BIT-tensorflow-2022-36012, CVE-2022-36012, GHSA-jvhc-5hhr-w3v5, PYSEC-2026-1015, PYSEC-2026-3210, PYSEC-2026-3347 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `DenseBincount` BIT-tensorflow-2022-35987, CVE-2022-35987, GHSA-w62h-8xjm-fv49, PYSEC-2026-1043, PYSEC-2026-3252, PYSEC-2026-3377 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3` BIT-tensorflow-2022-36026, CVE-2022-36026, GHSA-9cr2-8pwr-fhfq, PYSEC-2026-3149, PYSEC-2026-3304, PYSEC-2026-976 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange` BIT-tensorflow-2022-35974, CVE-2022-35974, GHSA-vgvh-2pf4-jr2x, PYSEC-2026-1039, PYSEC-2026-3246, PYSEC-2026-3373 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedMatMul` BIT-tensorflow-2022-35973, CVE-2022-35973, GHSA-689c-r7h2-fv9v, PYSEC-2026-3119, PYSEC-2026-3285, PYSEC-2026-959 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedBiasAdd` BIT-tensorflow-2022-35972, CVE-2022-35972, GHSA-4pc4-m9mj-v2r9, PYSEC-2026-3101, PYSEC-2026-3272, PYSEC-2026-948 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars` BIT-tensorflow-2022-35971, CVE-2022-35971, GHSA-9fpg-838v-wpv7, PYSEC-2026-3150, PYSEC-2026-3305, PYSEC-2026-977 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedInstanceNorm` BIT-tensorflow-2022-35970, CVE-2022-35970, GHSA-g35r-369w-3fqp, PYSEC-2026-3183, PYSEC-2026-3326, PYSEC-2026-995 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput` BIT-tensorflow-2022-35969, CVE-2022-35969, GHSA-q2c3-jpmc-gfjx, PYSEC-2026-1028, PYSEC-2026-3227, PYSEC-2026-3360 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad` BIT-tensorflow-2022-35968, CVE-2022-35968, GHSA-2475-53vw-vp25, PYSEC-2026-3083, PYSEC-2026-3263, PYSEC-2026-940 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedAdd` BIT-tensorflow-2022-35967, CVE-2022-35967, GHSA-v6h3-348g-6h5x, PYSEC-2026-1037, PYSEC-2026-3244, PYSEC-2026-3371 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedAvgPool` BIT-tensorflow-2022-35966, CVE-2022-35966, GHSA-4w68-4x85-mjj9, PYSEC-2026-3103, PYSEC-2026-3273, PYSEC-2026-949 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `LowerBound` and `UpperBound` BIT-tensorflow-2022-35965, CVE-2022-35965, GHSA-qxpx-j395-pw36, PYSEC-2026-1030, PYSEC-2026-3233, PYSEC-2026-3363 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `BlockLSTMGradV2` BIT-tensorflow-2022-35964, CVE-2022-35964, GHSA-f7r5-q7cx-h668, PYSEC-2026-3170, PYSEC-2026-3318, PYSEC-2026-988 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant` BIT-tensorflow-2022-36018, CVE-2022-36018, GHSA-m6cv-4fmf-66xf, PYSEC-2026-1016, PYSEC-2026-3212, PYSEC-2026-3348 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` BIT-tensorflow-2022-36019, CVE-2022-36019, GHSA-9j4v-pp28-mxv7, PYSEC-2026-3152, PYSEC-2026-3306, PYSEC-2026-978 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions BIT-tensorflow-2022-36027, CVE-2022-36027, GHSA-79h2-q768-fpxr, PYSEC-2026-3128, PYSEC-2026-3291, PYSEC-2026-965 | High | 0.8% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failures in `FractionalAvgPoolGrad` BIT-tensorflow-2022-35963, CVE-2022-35963, GHSA-84jm-4cf3-9jfm, PYSEC-2026-3133, PYSEC-2026-3296, PYSEC-2026-969 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation BIT-tensorflow-2022-35960, CVE-2022-35960, GHSA-v5xg-3q2c-c2r4, PYSEC-2026-1036, PYSEC-2026-3243, PYSEC-2026-3370 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad` BIT-tensorflow-2022-35959, CVE-2022-35959, GHSA-wxjj-cgcx-r3vq, PYSEC-2026-1046, PYSEC-2026-3257, PYSEC-2026-3380 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failures in `UnbatchGradOp` BIT-tensorflow-2022-35952, CVE-2022-35952, GHSA-h5vq-gw2c-pq47, PYSEC-2026-1005, PYSEC-2026-3198, PYSEC-2026-3337 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp` BIT-tensorflow-2022-35941, CVE-2022-35941, GHSA-mgmh-g2v6-mqw5, PYSEC-2026-1019, PYSEC-2026-3215, PYSEC-2026-3351 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to Int overflow in `RaggedRangeOp` BIT-tensorflow-2022-35940, CVE-2022-35940, GHSA-x989-q2pq-4q5x, PYSEC-2026-1047, PYSEC-2026-3259, PYSEC-2026-3381 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation BIT-tensorflow-2022-35935, CVE-2022-35935, GHSA-97p7-w86h-vcf9, PYSEC-2026-3144, PYSEC-2026-3302, PYSEC-2026-974 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows BIT-tensorflow-2022-35934, CVE-2022-35934, GHSA-f4w6-h4f5-wx45, PYSEC-2026-3168, PYSEC-2026-3316, PYSEC-2026-987 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross` BIT-tensorflow-2022-35997, CVE-2022-35997, GHSA-p7hr-f446-x6qf, PYSEC-2026-1024, PYSEC-2026-3220, PYSEC-2026-3356 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput` BIT-tensorflow-2022-35999, CVE-2022-35999, GHSA-37jf-mjv6-xfqw, PYSEC-2026-3092, PYSEC-2026-3269, PYSEC-2026-946 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access CVE-2022-3221, GHSA-vq4h-xrwc-m639, PYSEC-2022-278 | High | 0.8% | 15 Sep, 2022 | PyPI rdiffweb |
LIEF vulnerable to heap based buffer overflow CVE-2022-38306, GHSA-52xx-r3g2-p8jm, PYSEC-2022-274 | High | 0.3% | 13 Sep, 2022 | PyPI lief |
LIEF vulnerable to heap based buffer overflow via print_binary function CVE-2022-38495, GHSA-42vg-2q93-fj6j, PYSEC-2022-276 | High | 0.3% | 13 Sep, 2022 | PyPI lief |
rdiffweb contains Weak Password Requirements CVE-2022-3179, GHSA-mp5p-g2jv-r8qw, PYSEC-2022-272 | High | 1.0% | 13 Sep, 2022 | PyPI rdiffweb |
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2022-3174, GHSA-mjw4-xvx6-3grg, PYSEC-2022-271 | High | 0.7% | 13 Sep, 2022 | PyPI rdiffweb |
Hyperledger indy-node vulnerable to denial of service CVE-2022-31006, GHSA-x996-7qh9-7ff7, PYSEC-2022-270 | High | 1.1% | 09 Sep, 2022 | PyPI indy-node |
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows CVE-2022-36070, GHSA-j4j9-7hg9-97g6, PYSEC-2022-43179 | High | 0.4% | 07 Sep, 2022 | PyPI poetry |
Poetry Argument Injection can lead to Local Code Execution CVE-2022-36069, GHSA-9xgj-fcgf-x6mw, PYSEC-2022-266 | High | 1.4% | 07 Sep, 2022 | PyPI poetry |
MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS) CVE-2022-37189, GHSA-6xm7-3cc5-47f9, PYSEC-2026-847 | High | 1.4% | 07 Sep, 2022 | PyPI mei2volpiano |
mako is vulnerable to Regular Expression Denial of Service CVE-2022-40023, GHSA-v973-fxgf-6xhp, PYSEC-2022-260 | High | 2.2% | 07 Sep, 2022 | PyPI mako |
Barbican authorization flaw before v14.0.0 CVE-2022-23451, GHSA-p2jg-q8hw-p7gc, PYSEC-2026-786 | High | 1.3% | 06 Sep, 2022 | PyPI barbican |
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as expected." CVE-2022-30331, PYSEC-2022-43064 | High | 1.3% | 05 Sep, 2022 | PyPI pytigergraph |
Apache IoTDB Session Fixation vulnerability CVE-2022-38369, GHSA-g6vm-3ch8-c6jq, PYSEC-2022-43069 | High | 1.3% | 05 Sep, 2022 | Maven org.apache.iotdb:iotdb-server PyPI apache-iotdb |
Indy's NODE_UPGRADE transaction vulnerable to remote code execution CVE-2022-31020, GHSA-r6v9-p59m-gj2p, PYSEC-2022-265 | High | 2.3% | 02 Sep, 2022 | PyPI indy-node |
Denial of service due to incorrect application of event authorization rules CVE-2022-31152, GHSA-jhjh-776m-4765, PYSEC-2022-262 | High | 1.2% | 31 Aug, 2022 | PyPI matrix-synapse |
VTK NULL pointer dereference vulnerability CVE-2021-42521, GHSA-xfhg-9pjg-xg7g, PYSEC-2022-255 | High | 1.3% | 25 Aug, 2022 | PyPI vtk |
Incorrect header handling in mod-wsgi BIT-mod_wsgi-2022-2255, CVE-2022-2255, GHSA-7527-8855-9cf8, PYSEC-2022-254 | High | 0.9% | 25 Aug, 2022 | PyPI mod-wsgi |
ansible-runner vulnerable to shell command injection CVE-2021-4041, GHSA-6j58-grhv-2769, PYSEC-2022-253 | High | 0.3% | 24 Aug, 2022 | PyPI ansible-runner |
Uncontrolled Resource Consumption in asyncua and opcua CVE-2022-25304, GHSA-mfpj-3qhm-976m, PYSEC-2026-2385, PYSEC-2026-888 | High | 1.6% | 23 Aug, 2022 | PyPI asyncua PyPI opcua |
Regular expression denial of service in eth-account CVE-2022-1930, GHSA-v65g-f3cj-fjp4, PYSEC-2026-806 | High | 0.9% | 22 Aug, 2022 | PyPI eth-account |
Unverified Password Change in OctoPrint CVE-2022-2930, GHSA-39gf-864w-pxw4, PYSEC-2022-43142 | High | 0.3% | 22 Aug, 2022 | PyPI OctoPrint PyPI octoprint |