Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Assertion failure based denial of service in Tensorflow BIT-tensorflow-2022-21737, CVE-2022-21737, GHSA-f2vv-v9cg-qhh7, PYSEC-2022-116, PYSEC-2022-61, PYSEC-2026-3164 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow leading to crash in Tensorflow BIT-tensorflow-2022-21738, CVE-2022-21738, GHSA-x4qx-4fjv-hmw6, PYSEC-2022-117, PYSEC-2022-62, PYSEC-2026-3258 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TensorFlow BIT-tensorflow-2022-21739, CVE-2022-21739, GHSA-3mw4-6rj6-74g5, PYSEC-2022-118, PYSEC-2022-63, PYSEC-2026-3094 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Overflow and uncaught divide by zero in Tensorflow BIT-tensorflow-2022-21729, CVE-2022-21729, GHSA-34f9-hjfq-rr8j, PYSEC-2022-108, PYSEC-2022-53, PYSEC-2026-3090 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in Tensorflow BIT-tensorflow-2022-21734, CVE-2022-21734, GHSA-gcvh-66ff-4mwm, PYSEC-2022-113, PYSEC-2022-58, PYSEC-2026-3187 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in Tensorflow BIT-tensorflow-2022-21735, CVE-2022-21735, GHSA-87v6-crgm-2gfj, PYSEC-2022-114, PYSEC-2022-59, PYSEC-2026-3134 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fails when building invalid tensor shapes in Tensorflow BIT-tensorflow-2022-23569, CVE-2022-23569, GHSA-qj5r-f9mv-rffh, PYSEC-2022-133, PYSEC-2022-78, PYSEC-2026-3230 | High | 0.5% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Type confusion leading to segfault in Tensorflow BIT-tensorflow-2022-21731, CVE-2022-21731, GHSA-m4hf-j54p-p353, PYSEC-2022-110, PYSEC-2022-55, PYSEC-2026-3211 | High | 0.9% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Undefined behavior in `SparseTensorSliceDataset` BIT-tensorflow-2022-21736, CVE-2022-21736, GHSA-pfjj-m3jj-9jc9, PYSEC-2022-115, PYSEC-2022-60, PYSEC-2026-3223 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflows in Tensorflow BIT-tensorflow-2022-23567, CVE-2022-23567, GHSA-rrx2-r989-2c43, PYSEC-2022-131, PYSEC-2022-76, PYSEC-2026-3240 | High | 1.1% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflows in Tensorflow BIT-tensorflow-2022-23568, CVE-2022-23568, GHSA-6445-fm66-fvq2, PYSEC-2022-132, PYSEC-2022-77, PYSEC-2026-3114 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21726, CVE-2022-21726, GHSA-23hm-7w47-xw72, PYSEC-2022-105, PYSEC-2022-50, PYSEC-2026-3082 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in Tensorflow BIT-tensorflow-2022-21727, CVE-2022-21727, GHSA-c6fh-56w7-fvjw, PYSEC-2022-106, PYSEC-2022-51, PYSEC-2026-3159 | High | 0.7% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21728, CVE-2022-21728, GHSA-6gmv-pjp9-p8w8, PYSEC-2022-107, PYSEC-2022-52, PYSEC-2026-3121 | High | 1.1% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21730, CVE-2022-21730, GHSA-vjg4-v33c-ggc4, PYSEC-2022-109, PYSEC-2022-54, PYSEC-2026-3247 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Infinite Loop in Django BIT-django-2022-23833, CVE-2022-23833, GHSA-6cw3-g6wv-c2xv, PYSEC-2022-20 | High | 49.5% | 03 Feb, 2022 | PyPI Django PyPI django |
Insufficiently Protected Credentials in Apache Superset BIT-superset-2021-44451, CVE-2021-44451, GHSA-hhm3-48h2-597v, PYSEC-2022-36 | High | 7.9% | 01 Feb, 2022 | PyPI apache-superset |
Unsafe handling of user-specified cookies in treq CVE-2022-23607, GHSA-fhpf-pp6p-55qc, PYSEC-2022-26 | High | 1.1% | 01 Feb, 2022 | PyPI treq |
Unrestricted Upload of File with Dangerous Type in motionEye CVE-2021-44255, GHSA-m2c7-42rf-c62f, PYSEC-2026-681 | High | 3.1% | 31 Jan, 2022 | PyPI motioneye |
Incorrect Authorization in calibreweb CVE-2022-0273, GHSA-vgmw-9cww-qq99, PYSEC-2022-22 | High | 0.7% | 30 Jan, 2022 | PyPI calibreweb |
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations. CVE-2022-24124, GHSA-m358-g4rp-533r, GO-2022-0303, PYSEC-2022-43189 | High | 55.3% | 29 Jan, 2022 | PyPI casdoor |
Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers CVE-2021-22570, GHSA-77rm-9x9h-xj3g, PYSEC-2022-48 | High | 2.7% | 26 Jan, 2022 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-java NuGet Google.Protobuf Packagist google/protobuf +1 more |
SSRF vulnerability in jupyter-server-proxy CVE-2022-21697, GHSA-gcv9-6737-pjqw, PYSEC-2022-16 | High | 1.1% | 25 Jan, 2022 | PyPI jupyter-server-proxy |
Execution with Unnecessary Privileges in ipython CVE-2022-21699, GHSA-pq7m-3gw7-gq5x, PYSEC-2022-12 | High | 0.7% | 19 Jan, 2022 | PyPI ipython |
Out-of-bounds Read in Onionshare CVE-2022-21688, GHSA-x7wr-283h-5h2v, PYSEC-2022-39 | High | 0.9% | 18 Jan, 2022 | PyPI onionshare-cli |
Denial of Service in Onionshare CVE-2022-21689, GHSA-jh82-c5jw-pxpc, PYSEC-2022-40 | High | 1.3% | 18 Jan, 2022 | PyPI onionshare-cli |
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4164, GHSA-wxr6-29pv-ch68, PYSEC-2026-621 | High | 0.5% | 17 Jan, 2022 | PyPI calibreweb |
Pipenv's requirements.txt parsing allows malicious index url in comments CVE-2022-21668, GHSA-qc9x-gjcv-465w, PYSEC-2022-6 | High | 3.8% | 10 Jan, 2022 | PyPI pipenv |
dnslib has DNS reply verification issue CVE-2022-22846, GHSA-r478-c2pc-m7gx, PYSEC-2022-4 | High | 0.8% | 10 Jan, 2022 | PyPI dnslib |
An authenticated user can execute arbitrary command in Gerapy CVE-2021-32849, GHSA-756h-r2c9-qp5j, PYSEC-2022-17 | High | 7.6% | 06 Jan, 2022 | PyPI gerapy |
Denial-of-service in Django BIT-django-2021-45115, CVE-2021-45115, GHSA-53qw-q765-4fww, PYSEC-2022-1 | High | 2.6% | 05 Jan, 2022 | PyPI Django PyPI django |
Information disclosure in Django BIT-django-2021-45116, CVE-2021-45116, GHSA-8c5j-9r9f-c6w8, PYSEC-2022-2 | High | 2.0% | 05 Jan, 2022 | PyPI Django PyPI django |
NLTK Vulnerable to REDoS CVE-2021-3842, GHSA-rqjh-jp2r-59cj, PYSEC-2022-5 | High | 1.6% | 04 Jan, 2022 | PyPI nltk |
OS Command Injection in celery CVE-2021-23727, GHSA-q4xr-rc97-m4xx, PYSEC-2021-858, SNYK-PYTHON-CELERY-2314953 | High | 3.6% | 29 Dec, 2021 | PyPI celery |
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the vir CVE-2021-44078, PYSEC-2021-868 | High | 0.5% | 26 Dec, 2021 | PyPI unicorn |
pytorch-lightning is vulnerable to Deserialization of Untrusted Data CVE-2021-4118, GHSA-2vj5-px25-gjrp, PYSEC-2021-874, PYSEC-2026-3968 | High | 1.0% | 23 Dec, 2021 | PyPI lightning PyPI pytorch-lightning |
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize) CVE-2021-43854, GHSA-f8m6-h2c7-8h9x, PYSEC-2021-859 | High | 2.8% | 23 Dec, 2021 | PyPI nltk |
Classic Buffer Overflow in pyo CVE-2021-41499, GHSA-5f5c-687x-g5qm, PYSEC-2026-743 | High | 1.4% | 17 Dec, 2021 | PyPI pyo |
bounter Null pointer reference CVE-2021-41497, GHSA-74xw-gwfm-7pv7, PYSEC-2021-880 | High | 1.1% | 17 Dec, 2021 | PyPI bounter |
Pyo Buffer Overflow Vulnerability CVE-2021-41498, GHSA-qj27-32wp-ghrg, PYSEC-2021-890 | High | 1.2% | 17 Dec, 2021 | PyPI pyo |
Incorrect Comparison in cvxopt CVE-2021-41500, GHSA-8rh6-h94m-vj54, PYSEC-2021-870 | High | 1.2% | 17 Dec, 2021 | PyPI cvxopt |
NumPy NULL Pointer Dereference CVE-2021-41495, GHSA-5545-2q6w-2gh6, PYSEC-2021-856 | High | 1.2% | 17 Dec, 2021 | PyPI numpy |
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818, GHSA-55x5-fj6c-h6m8, PYSEC-2021-852 | High | 2.7% | 13 Dec, 2021 | PyPI lxml |
Improper Authentication in Flask-AppBuilder CVE-2021-41265, GHSA-m3rf-7m4w-r66q, PYSEC-2021-851 | High | 1.3% | 09 Dec, 2021 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Code injection via unsafe YAML loading CVE-2021-43811, GHSA-ggmr-44cv-24pm, PYSEC-2021-848 | High | 2.5% | 08 Dec, 2021 | PyPI sockeye |
APM Java Agent Local Privilege Escalation CVE-2021-37941, GHSA-r562-m862-63w3, PYSEC-2026-634 | High | 0.2% | 08 Dec, 2021 | PyPI elastic-apm |
Potential bypass of an upstream access control based on URL paths in Django BIT-django-2021-44420, CVE-2021-44420, GHSA-v6rh-hp5x-86rv, PYSEC-2021-439 | High | 2.4% | 08 Dec, 2021 | PyPI Django PyPI django |
Cross Site Request Forgery in mailman CVE-2021-44227, GHSA-xq58-69h2-765m, PYSEC-2026-660 | High | 0.8% | 02 Dec, 2021 | PyPI mailman |
Path traversal in Matrix Synapse CVE-2021-41281, GHSA-3hfw-x7gx-437c, PYSEC-2021-436 | High | 1.6% | 23 Nov, 2021 | PyPI matrix-synapse |
Improper certificate management in AWS IoT Device SDK v2 CVE-2021-40828, GHSA-94jq-q5v2-76wj, PYSEC-2021-861 | High | 0.4% | 23 Nov, 2021 | Maven software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk PyPI awsiotsdk npm aws-iot-device-sdk-v2 |