Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled BIT-mlflow-2026-2651, CVE-2026-2651, GHSA-8c7q-86fq-vvmh, PYSEC-2026-2220 | Critical | 0.3% | 25 May, 2026 | PyPI mlflow |
Malicious release: Malicious code in pylogkt (PyPI) MAL-2026-4291 | Malicious | Not scored | 25 May, 2026 | PyPI pylogkt |
Malicious release: Malicious code in polymarket-data-fetcher (PyPI) MAL-2026-4286 | Malicious | Not scored | 24 May, 2026 | PyPI polymarket-data-fetcher |
Malicious release: Malicious code in polydata-analytics (PyPI) MAL-2026-4285 | Malicious | Not scored | 24 May, 2026 | PyPI polydata-analytics |
Malicious release: Malicious code in whatsfly-labfox (PyPI) MAL-2026-4776 | Malicious | Not scored | 24 May, 2026 | PyPI whatsfly-labfox |
HuggingFace transformers vulnerable to remote code execution CVE-2026-4372, GHSA-29pf-2h5f-8g72, PYSEC-2026-2289 | High | 0.7% | 24 May, 2026 | PyPI transformers |
hermes-agent has an Incorrect Comparison CVE-2026-9369, GHSA-cv5c-mh6j-wvp9, PYSEC-2026-2512 | Low | 0.2% | 24 May, 2026 | PyPI hermes-agent |
hermes-agent has a sandbox issue CVE-2026-9368, GHSA-wm96-9gfh-vvgq, PYSEC-2026-2515 | Medium | 0.4% | 24 May, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-9366, GHSA-pgp4-xr4j-h5cg, PYSEC-2026-2514 | Medium | 0.3% | 24 May, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-9353, GHSA-238w-f66p-w349, PYSEC-2026-2509 | Medium | 0.3% | 24 May, 2026 | PyPI hermes-agent |
Prefect has an Argument Injection issue CVE-2026-3515, GHSA-cw25-2p92-7f75, PYSEC-2026-2957 | High | 0.3% | 24 May, 2026 | PyPI prefect |
Malicious release: Malicious code in env-loader-cli (PyPI) MAL-2026-4272 | Malicious | Not scored | 24 May, 2026 | PyPI env-loader-cli |
Malicious release: Malicious code in data-pipeline-check (PyPI) MAL-2026-4271 | Malicious | Not scored | 24 May, 2026 | PyPI data-pipeline-check |
Malicious release: Malicious code in git-config-sync (PyPI) MAL-2026-4273 | Malicious | Not scored | 24 May, 2026 | PyPI git-config-sync |
Malicious release: Malicious code in mistral-evals (PyPI) MAL-2026-4269 | Malicious | Not scored | 23 May, 2026 | PyPI mistral-evals |
instagrapi: Unsafe signup challenge path handling in instagrapi GHSA-ggxf-37hm-9wqf | Medium | Not scored | 23 May, 2026 | PyPI instagrapi |
aiograpi: Unsafe signup challenge path handling CVE-2026-47157, GHSA-jh37-x3fv-4x72, PYSEC-2026-2337 | Medium | 0.2% | 23 May, 2026 | PyPI aiograpi |
Malicious release: Malicious code in solidity-build-guard (PyPI) MAL-2026-4262 | Malicious | Not scored | 22 May, 2026 | PyPI solidity-build-guard |
Malicious release: Malicious code in defi-risk-scanner (PyPI) MAL-2026-4260 | Malicious | Not scored | 22 May, 2026 | PyPI defi-risk-scanner |
Malicious release: Malicious code in eth-security-auditor (PyPI) MAL-2026-4261 | Malicious | Not scored | 22 May, 2026 | PyPI eth-security-auditor |
Malicious release: Malicious code in cryptowallet-safety (PyPI) MAL-2026-4259 | Malicious | Not scored | 22 May, 2026 | PyPI cryptowallet-safety |
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads() CVE-2026-9291, GHSA-g697-2xrc-gc46, PYSEC-2026-2342 | High | 0.4% | 22 May, 2026 | PyPI amazon-braket-sdk |
Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance CVE-2026-46715, GHSA-97r5-pg8x-p63p, PYSEC-2026-2478 | Medium | 0.4% | 22 May, 2026 | PyPI Flask-Security-Too PyPI flask-security-too |
aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler CVE-2026-70646, GHSA-7m8f-hgjq-8gc9, PYSEC-2026-3626 | High | 0.6% | 22 May, 2026 | PyPI aiosend |
Malicious release: Malicious code in ml2000 (PyPI) MAL-2026-4756 | Malicious | Not scored | 22 May, 2026 | PyPI ml2000 |
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710, GHSA-86qp-5c8j-p5mr, PYSEC-2026-161, X41-2026-002 | MediumExploited | 70.3% | 22 May, 2026 | PyPI starlette |
Malicious release: Malicious code in gt-tester-exp-profiler-exp-00000017 (PyPI) MAL-2026-4753 | Malicious | Not scored | 22 May, 2026 | PyPI gt-tester-exp-profiler-exp-00000017 |
Malicious release: Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI) MAL-2026-4752 | Malicious | Not scored | 22 May, 2026 | PyPI gt-tester-exp-profiler-exp-00000015 |
Malicious release: Malicious code in sklern (PyPI) MAL-2026-4768 | Malicious | Not scored | 22 May, 2026 | PyPI sklern |
Malicious release: Malicious code in vulndify-mcp-server (PyPI) MAL-2026-4774 | Malicious | Not scored | 22 May, 2026 | PyPI vulndify-mcp-server |
Malicious release: Malicious code in pylogft (PyPI) MAL-2026-4253 | Malicious | Not scored | 22 May, 2026 | PyPI pylogft |
Malicious release: Malicious code in pylogfmt (PyPI) MAL-2026-4231 | Malicious | Not scored | 22 May, 2026 | PyPI pylogfmt |
Malicious release: Malicious code in mathepy (PyPI) MAL-2026-4755 | Malicious | Not scored | 21 May, 2026 | PyPI mathepy |
Malicious release: Malicious code in fakehuop (PyPI) MAL-2026-4749 | Malicious | Not scored | 21 May, 2026 | PyPI fakehuop |
Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host CVE-2026-46703, GHSA-f396-4rp4-7v2j, GO-2026-5344, PYSEC-2026-298, RUSTSEC-2026-0148 | Critical | 0.5% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
BoxLite: Permission Bypass Allows Modification of Read-Only Files CVE-2026-46695, GHSA-g6ww-w5j2-r7x3, GO-2026-5392, PYSEC-2026-299, RUSTSEC-2026-0147 | Critical | 0.3% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) CVE-2026-46678, GHSA-cqp8-fcvh-x7r3, PYSEC-2026-2978, PYSEC-2026-2982 | Medium | 0.4% | 21 May, 2026 | PyPI pydantic-ai PyPI pydantic-ai-slim |
SQLAdmin: Authorization Bypass on `ajax_lookup` CVE-2026-46645, GHSA-54mc-gghv-4cfj, PYSEC-2026-3073 | Medium | 0.3% | 21 May, 2026 | PyPI sqladmin |
LiteLLM allows a user to modify their own user_role via the /user/update endpoint CVE-2026-47102, GHSA-wpfp-gwwc-vwq6, PYSEC-2026-2600 | High | 0.7% | 21 May, 2026 | PyPI litellm |
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit CVE-2026-47101, GHSA-qrc4-49gv-mv9m, PYSEC-2026-2598 | High | 1.2% | 21 May, 2026 | PyPI litellm |
FlaskBB: SSRF in get_image_info() via unrestricted avatar URL CVE-2026-46556, GHSA-xq32-9g7q-7297, PYSEC-2026-2479 | Medium | 0.4% | 21 May, 2026 | PyPI flaskbb |
pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API CVE-2026-46561, GHSA-8rp3-xc6w-5qp5, PYSEC-2026-2991 | Medium | 0.2% | 21 May, 2026 | PyPI pyload-ng |
lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out CVE-2026-46517, GHSA-9xq9-36w5-q796, PYSEC-2026-2608 | High | 0.2% | 21 May, 2026 | PyPI lmdeploy |
Crawlee for Python: SSRF via sitemap-derived URLs CVE-2026-46497, GHSA-3r75-xc34-5f44, PYSEC-2026-2430 | Low | 0.3% | 21 May, 2026 | PyPI crawlee |
LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization CVE-2026-46432, GHSA-m549-qq94-fvhg, PYSEC-2026-2609 | High | 0.1% | 21 May, 2026 | PyPI lmdeploy |
Apache Fory PyFory Deserialization of Untrusted Data CVE-2026-48207, GHSA-m5gw-83w2-7749, PYSEC-2026-2984 | Critical | 0.6% | 21 May, 2026 | PyPI pyfory |
Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing CVE-2026-46486, GHSA-5h3g-px23-w6vw, PYSEC-2026-2671 | Medium | 0.4% | 21 May, 2026 | PyPI mvt |
Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS CVE-2026-48989, GHSA-vrxg-gm77-7q5g, PYSEC-2026-3425 | High | 0.4% | 21 May, 2026 | PyPI windows-mcp |
Malicious release: Malicious code in lognest (PyPI) MAL-2026-4227 | Malicious | Not scored | 21 May, 2026 | PyPI lognest |
Malicious release: Malicious code in tensor-compute (PyPI) MAL-2026-4223 | Malicious | Not scored | 21 May, 2026 | PyPI tensor-compute |