Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Improper certificate management in AWS IoT Device SDK v2 CVE-2021-40829, GHSA-743r-5g92-5vgf, PYSEC-2021-862 | High | 0.4% | 23 Nov, 2021 | Maven software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk PyPI awsiotsdk npm aws-iot-device-sdk-v2 |
Improper certificate management in AWS IoT Device SDK v2 CVE-2021-40830, GHSA-c4rh-4376-gff4, PYSEC-2021-863 | High | 0.4% | 23 Nov, 2021 | Maven software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk PyPI awsiotsdk npm aws-iot-device-sdk-v2 |
Improper certificate management in AWS IoT Device SDK v2 CVE-2021-40831, GHSA-j3f7-7rmc-6wqj, PYSEC-2021-864 | High | 0.6% | 23 Nov, 2021 | Maven software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk PyPI awsiotsdk npm aws-iot-device-sdk-v2 |
Cross-site Scripting in django-helpdesk CVE-2021-3950, GHSA-vfrc-ggmc-5jwv, PYSEC-2021-431 | High | 0.8% | 19 Nov, 2021 | PyPI django-helpdesk |
Improper Encoding or Escaping of Output in Apache Superset BIT-superset-2021-42250, CVE-2021-42250, GHSA-5fp8-c45m-256p, PYSEC-2021-435 | High | 1.8% | 17 Nov, 2021 | PyPI apache-superset |
Cross-site Scripting in django-helpdesk CVE-2021-3945, GHSA-vx6v-xg64-pmr8, PYSEC-2021-430 | High | 1.0% | 13 Nov, 2021 | PyPI django-helpdesk |
Apache Superset allowed for database connections password leak for authenticated users BIT-superset-2021-41972, CVE-2021-41972, GHSA-42q4-9xf9-f67x, PYSEC-2021-434 | High | 1.5% | 12 Nov, 2021 | PyPI apache-superset |
Improper Input Validation in pip CVE-2021-3572, GHSA-5xp3-jfq3-5q8x, PYSEC-2021-437 | High | 1.8% | 10 Nov, 2021 | PyPI pip |
Signature verification vulnerability in Stark Bank ecdsa libraries GHSA-9wx7-jrvc-28mm | High | Not scored | 08 Nov, 2021 | Maven com.starkbank:ecdsa-java NuGet starkbank-ecdsa PyPI starkbank-ecdsa npm starkbank-ecdsa |
Improper hashing in enrocrypt CVE-2021-39182, GHSA-35m5-8cvj-8783, PYSEC-2021-385 | High | 0.6% | 08 Nov, 2021 | PyPI enrocrypt |
Heap buffer overflow in `Transpose` BIT-tensorflow-2021-41216, CVE-2021-41216, GHSA-3ff2-r28g-w7h9, PYSEC-2021-408, PYSEC-2021-625, PYSEC-2021-823 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use after free / memory leak in `CollectiveReduceV2` BIT-tensorflow-2021-41220, CVE-2021-41220, GHSA-gpfh-jvf9-7wg5, PYSEC-2021-412, PYSEC-2021-629, PYSEC-2021-827 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Access to invalid memory during shape inference in `Cudnn*` ops BIT-tensorflow-2021-41221, CVE-2021-41221, GHSA-cqv6-3phm-hcwx, PYSEC-2021-413, PYSEC-2021-630, PYSEC-2021-828 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
A use of uninitialized value vulnerability in Tensorflow BIT-tensorflow-2021-41225, CVE-2021-41225, GHSA-7r94-xv9v-63jw, PYSEC-2021-417, PYSEC-2021-634, PYSEC-2021-832 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Code injection in `saved_model_cli` BIT-tensorflow-2021-41228, CVE-2021-41228, GHSA-3rcw-9p9x-582v, PYSEC-2021-420, PYSEC-2021-637, PYSEC-2021-835 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation of shapes in multiple TF ops BIT-tensorflow-2021-41206, CVE-2021-41206, GHSA-pgcq-h79j-2f69, PYSEC-2021-843, PYSEC-2021-845, PYSEC-2021-847 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Missing validation during checkpoint loading BIT-tensorflow-2021-41203, CVE-2021-41203, GHSA-7pxj-m4jf-r6h2, PYSEC-2021-396, PYSEC-2021-613, PYSEC-2021-811 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops BIT-tensorflow-2021-41205, CVE-2021-41205, GHSA-49rx-x2rw-pc6f, PYSEC-2021-398, PYSEC-2021-615, PYSEC-2021-813 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in shape inference for `QuantizeV2` BIT-tensorflow-2021-41211, CVE-2021-41211, GHSA-cvgx-3v3q-m36c, PYSEC-2021-403, PYSEC-2021-620, PYSEC-2021-818 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in `tf.ragged.cross` BIT-tensorflow-2021-41212, CVE-2021-41212, GHSA-fr77-rrx3-cp7g, PYSEC-2021-404, PYSEC-2021-621, PYSEC-2021-819 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to `nullptr` in `tf.ragged.cross` BIT-tensorflow-2021-41214, CVE-2021-41214, GHSA-vwhq-49r4-gj9v, PYSEC-2021-406, PYSEC-2021-623, PYSEC-2021-821 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication BIT-tensorflow-2021-41219, CVE-2021-41219, GHSA-4f99-p9c2-3j8x, PYSEC-2021-411, PYSEC-2021-628, PYSEC-2021-826 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `FusedBatchNorm` kernels BIT-tensorflow-2021-41223, CVE-2021-41223, GHSA-f54p-f6jp-4rhr, PYSEC-2021-415, PYSEC-2021-632, PYSEC-2021-830 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`SparseFillEmptyRows` heap OOB BIT-tensorflow-2021-41224, CVE-2021-41224, GHSA-rg3m-hqc5-344v, PYSEC-2021-416, PYSEC-2021-633, PYSEC-2021-831 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `SparseBinCount` BIT-tensorflow-2021-41226, CVE-2021-41226, GHSA-374m-jm66-3vj8, PYSEC-2021-418, PYSEC-2021-635, PYSEC-2021-833 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Unitialized access in `EinsumHelper::ParseEquation` BIT-tensorflow-2021-41201, CVE-2021-41201, GHSA-j86v-p27c-73fm, PYSEC-2021-394, PYSEC-2021-611, PYSEC-2021-809 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput` BIT-tensorflow-2021-41210, CVE-2021-41210, GHSA-m342-ff57-4jcc, PYSEC-2021-402, PYSEC-2021-619, PYSEC-2021-817 | High | 0.2% | 05 Nov, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
incomplete JupyterHub logout with simultaneous JupyterLab sessions BIT-jupyterhub-2021-41247, CVE-2021-41247, GHSA-cw7p-q79f-m2v7, PYSEC-2021-386 | High | 0.8% | 04 Nov, 2021 | PyPI jupyterhub |
Antilles Dependency Confusion Vulnerability CVE-2021-3840, GHSA-hgc3-hp6x-wpgx, PYSEC-2021-840 | High | 2.0% | 03 Nov, 2021 | PyPI antilles-tools |
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui GHSA-v988-828w-xvf2 | High | Not scored | 22 Oct, 2021 | PyPI rucio-webui |
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write CVE-2021-41127, GHSA-4365-fhm5-qcrx, PYSEC-2021-381 | High | 0.8% | 21 Oct, 2021 | PyPI rasa |
Arbitrary command execution on Windows via qutebrowserurl: URL handler CVE-2021-41146, GHSA-vw27-fwjf-5qxm, PYSEC-2021-382 | High | 1.5% | 21 Oct, 2021 | PyPI qutebrowser |
Directory Traversal in Babel CVE-2021-42771, GHSA-h4m5-qpfp-3mpv, PYSEC-2021-421 | High | 0.8% | 20 Oct, 2021 | PyPI babel |
Client metadata path-traversal CVE-2021-41131, GHSA-wjw6-2cqr-j4qr, PYSEC-2021-376 | High | 1.5% | 19 Oct, 2021 | PyPI tuf |
Apache Superset SQL Injection when template processing is enabled BIT-superset-2021-41971, CVE-2021-41971, GHSA-pg8m-4p8j-2p56, PYSEC-2021-378 | High | 1.8% | 18 Oct, 2021 | PyPI apache-superset |
Directory traversal in mkdocs CVE-2021-40978, GHSA-qh9q-34h6-hcv9, PYSEC-2021-878 | High | 15.1% | 07 Oct, 2021 | PyPI mkdocs |
Memory corruption when returning a literal struct with a private call inside of it CVE-2021-41121, GHSA-xv8x-pr4h-73jv, PYSEC-2021-365 | High | 1.1% | 06 Oct, 2021 | PyPI vyper |
Splash authentication credentials potentially leaked to target websites CVE-2021-41124, GHSA-823f-cwm9-4g74, PYSEC-2021-364 | High | 1.1% | 05 Oct, 2021 | PyPI scrapy-splash |
Code Injection in SLO Generator CVE-2021-22557, GHSA-j28r-j54m-gpc4, PYSEC-2021-429 | High | 1.6% | 04 Oct, 2021 | PyPI slo-generator |
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. CVE-2021-40324, GHSA-4cfr-gjfx-fj3x, PYSEC-2021-374 | High | 68.6% | 04 Oct, 2021 | PyPI cobbler |
Cobbler before 3.3.0 allows authorization bypass for modification of settings. CVE-2021-40325, GHSA-cr3f-r24j-3chw, PYSEC-2021-375 | High | 1.4% | 04 Oct, 2021 | PyPI cobbler |
CSV injection in shuup CVE-2021-25962, GHSA-663j-rjcr-789f, PYSEC-2021-355 | High | 1.1% | 29 Sep, 2021 | PyPI shuup |
Basic auth bypass in esphome CVE-2021-41104, GHSA-48mj-p7x2-5jfm, PYSEC-2021-351 | High | 1.2% | 28 Sep, 2021 | PyPI esphome |
NLTK Vulnerable to REDoS CVE-2021-3828, GHSA-2ww3-fxvq-293j, PYSEC-2021-356 | High | 1.6% | 27 Sep, 2021 | PyPI nltk |
furlongm openvpn-monitor command injection CVE-2021-31605, GHSA-4258-vcjw-wwxx, PYSEC-2021-353 | High | 3.3% | 27 Sep, 2021 | PyPI openvpn-monitor |
furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients CVE-2021-31606, GHSA-5w5c-3g26-8mmc, PYSEC-2021-354 | High | 2.5% | 27 Sep, 2021 | PyPI openvpn-monitor |
Regular Expression Denial of Service in Leo Editor CVE-2020-23478, GHSA-x38q-xg2h-rxgx, PYSEC-2021-338 | High | 1.2% | 22 Sep, 2021 | PyPI leo |
Improper Input Validation and Command Injection in Ansible CVE-2021-3583, GHSA-2pfh-q76x-gwvm, PYSEC-2021-358 | High | 0.9% | 22 Sep, 2021 | PyPI ansible |
Apprise vulnerable to regex injection with IFTTT Plugin CVE-2021-39229, GHSA-qhmp-h54x-38qr, PYSEC-2021-327 | High | 1.9% | 20 Sep, 2021 | PyPI apprise |
LIEF heap-buffer-overflow CVE-2021-32297, GHSA-22x7-vwh9-5w4g, PYSEC-2021-324 | High | 1.6% | 20 Sep, 2021 | PyPI lief |