Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SaltStack Salt Permissions Bypass CVE-2022-22941, GHSA-qcr3-hr2f-6557, PYSEC-2022-174 | High | 1.3% | 29 Mar, 2022 | PyPI salt |
MotionEye allows attackers to access sensitive information CVE-2022-25568, GHSA-2c7w-v459-cwgf, PYSEC-2022-43141 | High | 6.9% | 24 Mar, 2022 | PyPI motioneye |
Use of insecure temporary file in Horovod CVE-2022-0315, GHSA-47wv-vhj2-g66m, PYSEC-2022-175 | High | 1.0% | 24 Mar, 2022 | PyPI horovod |
Insertion of Sensitive Information into Log File in Jupyter notebook CVE-2022-24757, GHSA-p737-p57g-4cpr, PYSEC-2022-179 | High | 1.3% | 23 Mar, 2022 | PyPI jupyter-server |
Race Condition in Paramiko CVE-2022-24302, GHSA-f8q4-jwww-x3wv, PYSEC-2022-166 | High | 2.1% | 17 Mar, 2022 | PyPI paramiko |
Allocation of Resources Without Limits or Throttling in nvflare CVE-2022-21822, GHSA-jx8f-cpx7-fv47, PYSEC-2026-695 | High | 1.1% | 17 Mar, 2022 | PyPI nvflare |
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging CVE-2022-24770, GHSA-f8xq-q7px-wg8c, PYSEC-2022-229 | High | 1.3% | 17 Mar, 2022 | PyPI gradio |
HTTP Request Smuggling in waitress CVE-2022-24761, GHSA-4f7p-27jc-3c36, PYSEC-2022-169 | High | 1.8% | 17 Mar, 2022 | PyPI waitress |
Command injection in guake CVE-2021-23556, GHSA-7x48-7466-3g33, PYSEC-2022-165, SNYK-PYTHON-GUAKE-2386334 | High | 1.1% | 17 Mar, 2022 | PyPI guake |
Nicotine+ DoS on Null Character in Download Request CVE-2021-45848, GHSA-p4v2-r99v-wjc2, PYSEC-2026-687 | High | 1.6% | 15 Mar, 2022 | PyPI nicotine-plus |
Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI CVE-2022-25512, GHSA-9988-f88m-mr42, PYSEC-2026-638 | High | 1.1% | 11 Mar, 2022 | PyPI FreeTAKServer-UI PyPI freetakserver-ui |
Improper Authentication in FreeTAKServer CVE-2022-25508, GHSA-hggv-mcp4-vxc5, PYSEC-2022-43054 | High | 1.0% | 11 Mar, 2022 | PyPI FreeTAKServer PyPI freetakserver |
Hard coded credentials in FreeTAKServer CVE-2022-25510, GHSA-f897-875p-23x7, PYSEC-2022-43135 | High | 1.1% | 11 Mar, 2022 | PyPI FreeTAKServer PyPI freetakserver |
XML Entity Expansion in trytond and proteus CVE-2022-26662, GHSA-pm3h-mm62-pwm8, PYSEC-2022-43171, PYSEC-2026-3392, PYSEC-2026-741 | High | 2.0% | 10 Mar, 2022 | PyPI proteus PyPI tryton PyPI trytond |
Authentication Bypass by Capture-replay in Apache Spark BIT-spark-2021-38296, CVE-2021-38296, GHSA-9rr6-jpg7-9jg6, PYSEC-2022-186 | High | 1.8% | 10 Mar, 2022 | Maven org.apache.spark:spark-core PyPI pyspark |
Duplicate Advisory: Command injection in Weblate BIT-weblate-2022-23915, CVE-2022-23915, CVE-2022-24727, GHSA-3872-f48p-pxqj, GHSA-h2g5-2rhx-ffgj, PYSEC-2022-162, PYSEC-2022-31, SNYK-PYTHON-WEBLATE-2414088 | High | 3.1% | 04 Mar, 2022 | PyPI Weblate PyPI weblate |
Twisted SSH client and server deny of service during SSH handshake. CVE-2022-21716, GHSA-rv6r-3f5q-9rgx, PYSEC-2022-160 | High | 3.5% | 03 Mar, 2022 | PyPI twisted |
OS Command injection in Apache Airflow BIT-airflow-2022-24288, CVE-2022-24288, GHSA-3v7g-4pg3-7r6j, PYSEC-2022-30 | High | 77.9% | 25 Feb, 2022 | PyPI apache-airflow |
Insecure Temporary File in mlflow BIT-mlflow-2022-0736, CVE-2022-0736, GHSA-vqj2-4v8m-8vrq, PYSEC-2022-28 | High | 1.6% | 23 Feb, 2022 | PyPI mlflow |
Incorrect Default Permissions in Cobbler CVE-2021-45083, GHSA-5946-mpw5-pqxx, PYSEC-2022-38 | High | 0.3% | 20 Feb, 2022 | PyPI cobbler |
Command Injection in Cobbler CVE-2021-45082, GHSA-6cm4-gm85-972c, PYSEC-2022-37 | High | 0.5% | 19 Feb, 2022 | PyPI cobbler |
Server crash if running Python 3.10 w/ Sanic 20.12 GHSA-7p79-6x2v-5h88 | High | Not scored | 16 Feb, 2022 | PyPI sanic |
Improper Validation of Integrity Check Value in TensorFlow GHSA-43q8-3fv7-pr5x | High | Not scored | 09 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cookie and header exposure in twisted CVE-2022-21712, GHSA-92x2-jw7w-xvvx, PYSEC-2022-27 | High | 1.4% | 07 Feb, 2022 | PyPI Twisted PyPI twisted |
Out of bounds read in Tensorflow BIT-tensorflow-2022-23594, CVE-2022-23594, GHSA-9x52-887g-fhc2, PYSEC-2026-3157, PYSEC-2026-3309, PYSEC-2026-752 | High | 0.1% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite BIT-tensorflow-2022-23557, CVE-2022-23557, GHSA-gf2j-f278-xh4v, PYSEC-2022-121, PYSEC-2022-66, PYSEC-2026-3188 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in TFLite array creation BIT-tensorflow-2022-23558, CVE-2022-23558, GHSA-9gwq-6cwj-47h3, PYSEC-2022-122, PYSEC-2022-67, PYSEC-2026-3151 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in TFLite BIT-tensorflow-2022-23559, CVE-2022-23559, GHSA-98p5-x8x4-c9m5, PYSEC-2022-123, PYSEC-2022-68, PYSEC-2026-3146 | High | 1.2% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Read and Write outside of bounds in TensorFlow BIT-tensorflow-2022-23560, CVE-2022-23560, GHSA-4hvf-hxvg-f67v, PYSEC-2022-124, PYSEC-2022-69, PYSEC-2026-3099 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds write in TFLite BIT-tensorflow-2022-23561, CVE-2022-23561, GHSA-9c78-vcq7-7vxq, PYSEC-2022-125, PYSEC-2022-70, PYSEC-2026-3148 | High | 0.5% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in Tensorflow BIT-tensorflow-2022-23562, CVE-2022-23562, GHSA-qx3f-p745-w4hr, PYSEC-2022-126, PYSEC-2022-71, PYSEC-2026-3232 | High | 0.6% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Insecure temporary file in Tensorflow BIT-tensorflow-2022-23563, CVE-2022-23563, GHSA-wc4g-r73w-x8mm, PYSEC-2022-127, PYSEC-2022-72, PYSEC-2026-3253 | High | 0.1% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reachable Assertion in Tensorflow BIT-tensorflow-2022-23564, CVE-2022-23564, GHSA-8rcj-c8pj-v3m3, PYSEC-2022-128, PYSEC-2022-73, PYSEC-2026-3139 | High | 0.5% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in Tensorflow BIT-tensorflow-2022-23565, CVE-2022-23565, GHSA-4v5p-v5h9-6xjx, PYSEC-2022-129, PYSEC-2022-74, PYSEC-2026-3102 | High | 0.5% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds write in Tensorflow BIT-tensorflow-2022-23566, CVE-2022-23566, GHSA-5qw5-89mw-wcg2, PYSEC-2022-130, PYSEC-2022-75, PYSEC-2026-3109 | High | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null-dereference in Tensorflow BIT-tensorflow-2022-23570, CVE-2022-23570, GHSA-9p77-mmrw-69c7, PYSEC-2022-134, PYSEC-2022-79, PYSEC-2026-3153 | High | 1.0% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reachable Assertion in Tensorflow BIT-tensorflow-2022-23571, CVE-2022-23571, GHSA-j3mj-fhpq-qqjj, PYSEC-2022-135, PYSEC-2022-80, PYSEC-2026-3204 | High | 0.5% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash when type cannot be specialized in Tensorflow BIT-tensorflow-2022-23572, CVE-2022-23572, GHSA-rww7-2gpw-fv6j, PYSEC-2022-136, PYSEC-2022-81, PYSEC-2026-3241 | High | 1.0% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Uninitialized variable access in Tensorflow BIT-tensorflow-2022-23573, CVE-2022-23573, GHSA-q85f-69q7-55h2, PYSEC-2022-137, PYSEC-2022-82, PYSEC-2026-3229 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read and write in Tensorflow BIT-tensorflow-2022-23574, CVE-2022-23574, GHSA-77gp-3h4r-6428, PYSEC-2022-138, PYSEC-2022-83, PYSEC-2026-3127 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in Tensorflow BIT-tensorflow-2022-23575, CVE-2022-23575, GHSA-c94w-c95p-phf8, PYSEC-2022-139, PYSEC-2022-84, PYSEC-2026-3160 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in Tensorflow BIT-tensorflow-2022-23576, CVE-2022-23576, GHSA-wm93-f238-7v37, PYSEC-2022-140, PYSEC-2022-85, PYSEC-2026-3254 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null-dereference in Tensorflow BIT-tensorflow-2022-23577, CVE-2022-23577, GHSA-8cxv-76p7-jxwr, PYSEC-2022-141, PYSEC-2022-86, PYSEC-2026-3135 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use after free in `DecodePng` kernel BIT-tensorflow-2022-23584, CVE-2022-23584, GHSA-24x4-6qmh-88qg, PYSEC-2022-148, PYSEC-2022-93, PYSEC-2026-3085 | High | 0.7% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash due to erroneous `StatusOr` in TensorFlow BIT-tensorflow-2022-23590, CVE-2022-23590, GHSA-pqrv-8r2f-7278, PYSEC-2022-154, PYSEC-2022-99, PYSEC-2026-3225 | High | 1.0% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Stack overflow in TensorFlow BIT-tensorflow-2022-23591, CVE-2022-23591, GHSA-247x-2f9f-5wp7, PYSEC-2022-100, PYSEC-2022-155, PYSEC-2026-3084 | High | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-23592, CVE-2022-23592, GHSA-vq36-27g6-p492, PYSEC-2022-101, PYSEC-2022-156, PYSEC-2026-3249 | High | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in `simplifyBroadcast` in Tensorflow BIT-tensorflow-2022-23593, CVE-2022-23593, GHSA-gwcx-jrx4-92w2, PYSEC-2022-102, PYSEC-2022-157, PYSEC-2026-3193 | High | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap overflow in Tensorflow BIT-tensorflow-2022-21740, CVE-2022-21740, GHSA-44qp-9wwf-734r, PYSEC-2022-119, PYSEC-2022-64, PYSEC-2026-3097 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite BIT-tensorflow-2022-21741, CVE-2022-21741, GHSA-428x-9xc2-m8mj, PYSEC-2022-120, PYSEC-2022-65, PYSEC-2026-3095 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |