Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in wdt-erpmcp (PyPI) MAL-2026-4775 | Malicious | Not scored | 21 May, 2026 | PyPI wdt-erpmcp |
MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks BIT-mlflow-2026-2734, CVE-2026-2734, GHSA-w5xq-c4pf-ghq7, PYSEC-2026-2660 | Medium | 0.4% | 21 May, 2026 | PyPI mlflow |
Malicious release: Malicious code in selfservsweeper (PyPI) MAL-2026-4221 | Malicious | Not scored | 21 May, 2026 | PyPI selfservsweeper |
Malicious release: Malicious code in obs-migrate (PyPI) MAL-2026-4201 | Malicious | Not scored | 20 May, 2026 | PyPI obs-migrate |
Malicious release: Malicious code in instal (PyPI) MAL-2026-4195 | Malicious | Not scored | 20 May, 2026 | PyPI instal |
Malicious release: Malicious code in txdpy (PyPI) MAL-2026-4772 | Malicious | Not scored | 20 May, 2026 | PyPI txdpy |
Malicious release: Malicious code in vlifegram (PyPI) MAL-2026-4773 | Malicious | Not scored | 20 May, 2026 | PyPI vlifegram |
wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None GHSA-mw8f-w6p8-xrf4 | High | Not scored | 20 May, 2026 | PyPI wger |
Diffusers: TOCTOU Trust Remote Code Bypass CVE-2026-45804, GHSA-7wx4-6vff-v64p, PYSEC-2026-2446 | High | 0.4% | 20 May, 2026 | PyPI diffusers |
Malicious release: Malicious code in libhmac (PyPI) MAL-2026-4194 | Malicious | Not scored | 20 May, 2026 | PyPI libhmac |
Malicious release: Malicious code in openclaw-agent (PyPI) MAL-2026-4183 | Malicious | Not scored | 20 May, 2026 | PyPI openclaw-agent |
Malicious release: Malicious code in stripe-internal (PyPI) MAL-2026-4182 | Malicious | Not scored | 20 May, 2026 | PyPI stripe-internal |
Malicious release: Malicious code in stripe-commands (PyPI) MAL-2026-4181 | Malicious | Not scored | 20 May, 2026 | PyPI stripe-commands |
Malicious release: Malicious code in stripe-utils (PyPI) MAL-2026-4180 | Malicious | Not scored | 20 May, 2026 | PyPI stripe-utils |
Malicious release: Malicious code in morin (PyPI) MAL-2026-4757 | Malicious | Not scored | 19 May, 2026 | PyPI morin |
Malicious release: Malicious code in aurafarmer (PyPI) MAL-2026-4741 | Malicious | Not scored | 19 May, 2026 | PyPI aurafarmer |
Malicious release: Malicious code in silly-logger (PyPI) MAL-2026-4767 | Malicious | Not scored | 19 May, 2026 | PyPI silly-logger |
Malicious release: Malicious code in eplang (PyPI) MAL-2026-4748 | Malicious | Not scored | 19 May, 2026 | PyPI eplang |
Malicious release: Malicious code in pycalendar-api (PyPI) MAL-2026-4764 | Malicious | Not scored | 19 May, 2026 | PyPI pycalendar-api |
Malicious release: Malicious code in glass-of-water (PyPI) MAL-2026-4751 | Malicious | Not scored | 19 May, 2026 | PyPI glass-of-water |
Malicious release: Malicious code in nebulix-ai (PyPI) MAL-2026-4758 | Malicious | Not scored | 19 May, 2026 | PyPI nebulix-ai |
Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends CVE-2026-42526, GHSA-g9qc-qf28-hhqx, PYSEC-2026-595 | Medium | 0.4% | 19 May, 2026 | PyPI apache-airflow-providers-amazon |
Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments CVE-2026-27173, GHSA-524w-vq63-2xhf, PYSEC-2026-2365 | High | 0.2% | 19 May, 2026 | PyPI apache-airflow-providers-cncf-kubernetes |
SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser CVE-2026-46374, GHSA-73jc-5mrq-prw7, PYSEC-2026-210 | High | 0.3% | 19 May, 2026 | PyPI sqlfluff |
SQLFluff: Recursive Stack Overflow in Parser CVE-2026-46373, GHSA-wmhf-fqc8-vxhh, PYSEC-2026-209 | High | 0.3% | 19 May, 2026 | PyPI sqlfluff |
Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path CVE-2026-46338, GHSA-62q4-447f-wv8h, PYSEC-2026-2999 | Medium | 0.4% | 19 May, 2026 | PyPI pymdown-extensions |
Malicious release: Malicious code in soundsource (PyPI) MAL-2026-4769 | Malicious | Not scored | 19 May, 2026 | PyPI soundsource |
Malicious release: Malicious code in buddyme (PyPI) MAL-2026-4743 | Malicious | Not scored | 19 May, 2026 | PyPI buddyme |
Malicious release: Malicious code in dabrius-utils (PyPI) MAL-2026-4176 | Malicious | Not scored | 19 May, 2026 | PyPI dabrius-utils |
Malicious release: Malicious code in durabletask (PyPI) MAL-2026-4174, PYSEC-2026-207 | Malicious | Not scored | 19 May, 2026 | PyPI durabletask |
APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization CVE-2026-31072, GHSA-9cfw-f3f9-7mm7, PYSEC-2026-282 | Critical | 0.8% | 19 May, 2026 | PyPI apscheduler |
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs CVE-2026-45739, GHSA-x97m-qp5c-w9xj, PYSEC-2026-2282 | Medium | 0.2% | 19 May, 2026 | PyPI strawberry-graphql |
Malicious code in guardrails-ai 0.10.1 (supply chain compromise) CVE-2026-45758, GHSA-xmpw-2vmm-p4p6, PYSEC-2026-206 | Critical | 0.3% | 19 May, 2026 | PyPI guardrails-ai |
ModelScope is vulnerable to arbitrary code injection via a crafted module CVE-2025-51427, GHSA-fhhq-h4hg-549x, PYSEC-2026-2663 | High | 0.5% | 19 May, 2026 | PyPI modelscope |
rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths CVE-2026-45568, GHSA-jh67-hwqw-m5r7, PYSEC-2026-577 | Critical | 0.5% | 19 May, 2026 | PyPI zrok |
Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix CVE-2026-45409, GHSA-65pc-fj4g-8rjx, PYSEC-2026-215 | Medium | 0.4% | 19 May, 2026 | PyPI idna |
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution BIT-mlflow-2026-2611, CVE-2026-2611, GHSA-67c5-x5mf-rppq, PYSEC-2026-418 | Critical | 0.4% | 19 May, 2026 | PyPI mlflow |
Malicious release: Malicious code in tarpackage (PyPI) MAL-2026-4166 | Malicious | Not scored | 19 May, 2026 | PyPI tarpackage |
Malicious release: Malicious code in vfat-ai (PyPI) MAL-2026-4163 | Malicious | Not scored | 19 May, 2026 | PyPI vfat-ai |
Malicious release: Malicious code in vfat (PyPI) MAL-2026-4162 | Malicious | Not scored | 19 May, 2026 | PyPI vfat |
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection CVE-2026-8838, GHSA-29h4-r29x-hchv, PYSEC-2026-521 | Critical | 0.8% | 18 May, 2026 | PyPI redshift-connector |
MLFlow Creates a Temporary File With Insecure Permissions BIT-mlflow-2026-4137, CVE-2026-4137, GHSA-f2m9-wcf4-cwwx, PYSEC-2026-2655 | High | 0.2% | 18 May, 2026 | PyPI mlflow |
Malicious release: Malicious code in solana-web3-alt (PyPI) MAL-2026-3835 | Malicious | Not scored | 18 May, 2026 | PyPI solana-web3-alt |
Malicious release: Malicious code in foundry-utils (PyPI) MAL-2026-3834 | Malicious | Not scored | 18 May, 2026 | PyPI foundry-utils |
NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes CVE-2026-45554, GHSA-pq7c-x8g4-rvp6, PYSEC-2026-2680 | Medium | 0.3% | 18 May, 2026 | PyPI nicegui |
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text() CVE-2026-45553, GHSA-jfrm-rx66-g536, PYSEC-2026-2679 | High | 0.3% | 18 May, 2026 | PyPI nicegui |
Malicious dropper in mistralai 2.4.6 PyPI package GHSA-wx9m-wx4f-4cmg | Critical | Not scored | 18 May, 2026 | PyPI mistralai |
CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion CVE-2026-45727, GHSA-mf33-gv72-w2h5, PYSEC-2026-2420 | High | 0.5% | 18 May, 2026 | PyPI cloakbrowser |
ChromaDB Python project has a pre-authentication code injection vulnerability CVE-2026-45829, GHSA-f4j7-r4q5-qw2c, PYSEC-2026-311 | Critical | 15.1% | 18 May, 2026 | PyPI chromadb |
eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges GHSA-j5rm-v3vh-vx94 | High | Not scored | 18 May, 2026 | PyPI edumfa |