Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hell-cipher (PyPI) MAL-2026-5094 | Malicious | Not scored | 31 May, 2026 | PyPI hell-cipher |
Malicious release: Malicious code in h4xupdate (PyPI) MAL-2026-5093 | Malicious | Not scored | 31 May, 2026 | PyPI h4xupdate |
Malicious release: Malicious code in discord-ban (PyPI) MAL-2026-5091 | Malicious | Not scored | 30 May, 2026 | PyPI discord-ban |
Malicious release: Malicious code in neuralforge-ml (PyPI) MAL-2026-5090 | Malicious | Not scored | 30 May, 2026 | PyPI neuralforge-ml |
Malicious release: Malicious code in crypto-helper (PyPI) MAL-2026-5088 | Malicious | Not scored | 30 May, 2026 | PyPI crypto-helper |
Malicious release: Malicious code in cryptolock (PyPI) MAL-2026-5089 | Malicious | Not scored | 30 May, 2026 | PyPI cryptolock |
Malicious release: Malicious code in polymarket-data (PyPI) MAL-2026-5086 | Malicious | Not scored | 30 May, 2026 | PyPI polymarket-data |
praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id} CVE-2026-47416, GHSA-c2m8-4gcg-v22g, PYSEC-2026-481 | Critical | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role CVE-2026-47409, GHSA-w388-2392-px73, PYSEC-2026-2938 | High | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link) CVE-2026-47414, GHSA-5jx9-w35f-vp65, PYSEC-2026-2929 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks CVE-2026-47406, GHSA-4x6r-9v57-3gqw, PYSEC-2026-2928 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset CVE-2026-47410, GHSA-3qg8-5g3r-79v5, PYSEC-2026-479 | Critical | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership CVE-2026-47405, GHSA-h37g-4h4p-9x97, PYSEC-2026-2936 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID CVE-2026-47399, GHSA-6h6v-6m7w-7vxx, PYSEC-2026-2930 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation CVE-2026-47407, GHSA-h8q5-cp56-rr65, PYSEC-2026-482 | Critical | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership CVE-2026-47408, GHSA-27p4-pjqv-whgj, PYSEC-2026-2927 | Medium | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API CVE-2026-48169, GHSA-gv23-xrm3-8c62, PYSEC-2026-2935 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has an Arbitrary File Write in Python API CVE-2026-47397, GHSA-hvhp-v2gc-268q, PYSEC-2026-2916 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution CVE-2026-47391, GHSA-vg22-4gmj-prxw, PYSEC-2026-478 | Critical | 1.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate CVE-2026-47394, GHSA-9cr9-25q5-8prj, PYSEC-2026-2908 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) CVE-2026-47392, GHSA-4mr5-g6f9-cfrh, PYSEC-2026-463, PYSEC-2026-483 | Critical | 0.9% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context CVE-2026-47395, GHSA-5cxw-77wg-jrf3, PYSEC-2026-2903, PYSEC-2026-2942 | Medium | 0.2% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default CVE-2026-47393, GHSA-8444-4fhq-fxpq, PYSEC-2026-465 | Critical | 0.6% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset CVE-2026-47396, GHSA-86qc-r5v2-v6x6, PYSEC-2026-466 | Critical | 0.4% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings CVE-2026-47390, GHSA-5c6w-wwfq-7qqm, PYSEC-2026-2902, PYSEC-2026-2941 | Medium | 0.2% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 CVE-2026-47398, CVE-2026-64824, GHSA-78r8-wwqv-r299, PYSEC-2026-2905 | High | 0.7% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
stigmem-node's federation peer registration lacked explicit out-of-band approval CVE-2026-76242, GHSA-9vp8-3hmv-8fgh | Critical | 0.3% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment CVE-2026-76241, GHSA-w7pm-9g55-mxfm | High | 0.1% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation CVE-2026-76244, GHSA-jmfc-hfjq-pxcp | Critical | 0.3% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's Postgres schema identifier handling required defensive quoting CVE-2026-76240, GHSA-9pc9-4crj-mhpj | High | 0.4% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's federation peer token timestamp validation may reject valid peer tokens CVE-2026-76245, GHSA-xh5j-xjfq-qvvx | High | 0.2% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback CVE-2026-76243, GHSA-fp6w-8wpg-74g5 | Critical | 0.6% | 29 May, 2026 | PyPI stigmem-node |
BoxLite has a Timeout Bypass Vulnerability CVE-2026-47213, GHSA-xjhv-pp2r-6f82, PYSEC-2026-2400 | Medium | 0.3% | 29 May, 2026 | PyPI boxlite |
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env CVE-2026-47211, GHSA-c4m7-2gwp-vw76, PYSEC-2026-2857 | High | 0.2% | 29 May, 2026 | PyPI ouroboros-ai |
zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood CVE-2026-47184, GHSA-rfg2-pjw2-56x2, PYSEC-2026-3439 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion CVE-2026-47183, GHSA-phvx-9mgw-67r5, PYSEC-2026-3437 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service CVE-2026-47180, GHSA-9pgc-3ccv-5297, PYSEC-2026-3436 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
uv is vulnerable to arbitrary file write through entry point names CVE-2026-114109, GHSA-4gg8-gxpx-9rph | High | 0.4% | 29 May, 2026 | PyPI uv crates.io uv |
xiaomusic contains an unauthenticated path traversal vulnerability CVE-2026-10108, GHSA-5j8p-5rrj-8wjg, PYSEC-2026-3429 | High | 0.7% | 29 May, 2026 | PyPI xiaomusic |
agno contains a SQL injection vulnerability CVE-2026-10105, GHSA-82m5-3pcp-hccq, PYSEC-2026-2333 | High | 0.4% | 29 May, 2026 | PyPI agno |
Malicious release: Malicious code in modulebuild3240234t (PyPI) MAL-2026-5029 | Malicious | Not scored | 29 May, 2026 | PyPI modulebuild3240234t |
tuf has platform-dependent delegation path matching GHSA-qp9x-wp8f-qgjj | Medium | Not scored | 28 May, 2026 | PyPI tuf |
Dulwich Vulnerable to Command Injection via Merge Driver Path CVE-2026-42563, GHSA-9277-mp7x-85jf, PYSEC-2026-2464 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows CVE-2026-42305, GHSA-897w-fcg9-f6xj, PYSEC-2026-2463 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
OpenStack Neutron has an Incorrect Authorization issue CVE-2026-49299, GHSA-xv24-hxh9-2hh9, PYSEC-2026-2678 | Medium | 0.3% | 28 May, 2026 | PyPI neutron |
Malicious release: Malicious code in lib-1779997093-yjeeqn (PyPI) MAL-2026-4861 | Malicious | Not scored | 28 May, 2026 | PyPI lib-1779997093-yjeeqn |
Malicious release: Malicious code in veloxml-cli (PyPI) MAL-2026-4862 | Malicious | Not scored | 28 May, 2026 | PyPI veloxml-cli |
Shamefile has an arbitrary file read via shamefile.yaml in shame next CVE-2026-47144, GHSA-x6p3-76f2-xxvh, PYSEC-2026-3065 | Medium | 0.2% | 28 May, 2026 | PyPI shamefile crates.io shamefile npm shamefile |
local-deep-research has an SSRF bypass in `safe_get` CVE-2026-46526, GHSA-g23j-2vwm-5c25, PYSEC-2026-2611 | Medium | 0.3% | 28 May, 2026 | PyPI local-deep-research |
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token CVE-2026-44394, GHSA-whqr-fgm5-x77q, PYSEC-2026-603 | High | 0.2% | 28 May, 2026 | PyPI keystone |