Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage GHSA-qq2p-4282-cfc5 | High | Not scored | 18 May, 2026 | PyPI edumfa |
eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check GHSA-74r7-3mjm-jc5v | Medium | Not scored | 18 May, 2026 | PyPI edumfa |
Graphite Has a Pickle Deserialization Vulnerability GHSA-qw48-84f6-28gv | High | Not scored | 18 May, 2026 | PyPI graphitedb |
SGLang: Unauthenticated RCE via --enable-custom-logit-processor CVE-2026-7304, GHSA-36m8-w8qf-g76p, PYSEC-2026-535 | Critical | 0.6% | 18 May, 2026 | PyPI sglang |
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability CVE-2026-7302, GHSA-qwrp-wghp-94q2, PYSEC-2026-538 | Critical | 0.4% | 18 May, 2026 | PyPI sglang |
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket CVE-2026-7301, GHSA-gwv6-pq6m-p3rq, PYSEC-2026-536 | Critical | 0.4% | 18 May, 2026 | PyPI sglang |
Malicious release: Malicious code in pyenvprep (PyPI) MAL-2026-3829 | Malicious | Not scored | 18 May, 2026 | PyPI pyenvprep |
AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py CVE-2026-8754, GHSA-f63h-wc26-pmvc, PYSEC-2026-2380 | Low | 0.4% | 17 May, 2026 | PyPI AstrBot PyPI astrbot |
Malicious release: Malicious code in netping (PyPI) MAL-2026-3805 | Malicious | Not scored | 16 May, 2026 | PyPI netping |
Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install` CVE-2026-46383, GHSA-mq5j-pw29-jcv3, PYSEC-2026-2378 | Medium | 0.4% | 15 May, 2026 | PyPI apm-cli |
Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree CVE-2026-45539, GHSA-q5pp-gvjg-h7v4, PYSEC-2026-2377 | High | 0.7% | 15 May, 2026 | PyPI apm |
Weblate: Stored HTML injection in editor search preview CVE-2026-45106, GHSA-6wxc-8mgq-w26m, PYSEC-2026-3415 | Medium | 0.2% | 15 May, 2026 | PyPI weblate |
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator CVE-2026-44716, GHSA-3363-2ph6-35wh, PYSEC-2026-2877 | High | 0.4% | 15 May, 2026 | PyPI pipecat-ai |
Malicious release: Malicious code in venv-utils (PyPI) MAL-2026-3803 | Malicious | Not scored | 15 May, 2026 | PyPI venv-utils |
Malicious release: Malicious code in jatinangor-teleport-testing-zer0id (PyPI) MAL-2026-3746 | Malicious | Not scored | 15 May, 2026 | PyPI jatinangor-teleport-testing-zer0id |
MLflow: unauthenticated access to certain FastAPI routes BIT-mlflow-2026-2652, CVE-2026-2652, GHSA-75cm-x2w3-8mgf, PYSEC-2026-2221 | High | 20.8% | 15 May, 2026 | PyPI mlflow |
python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection CVE-2026-45370, GHSA-5v57-8rxj-3p2r, PYSEC-2026-3395 | High | 0.2% | 14 May, 2026 | PyPI utcp-cli |
utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol CVE-2026-45369, GHSA-33p6-5jxp-p3x4, PYSEC-2026-560 | Critical | 0.3% | 14 May, 2026 | PyPI utcp-cli |
Malicious release: Malicious code in sol-batch-transfer-sdk (PyPI) MAL-2026-3743 | Malicious | Not scored | 14 May, 2026 | PyPI sol-batch-transfer-sdk |
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts CVE-2026-45675, GHSA-h3ww-q6xx-w7x3, PYSEC-2026-2730 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed CVE-2026-45672, GHSA-482j-2pq6-q5w4, PYSEC-2026-2698 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion CVE-2026-45671, GHSA-26g9-27vm-x3q8, PYSEC-2026-2692 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS) CVE-2026-45667, GHSA-m69w-p7m4-585j, PYSEC-2026-2747 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has an Indirect Object Reference (IDOR) in user notes CVE-2026-45666, GHSA-x3qm-p8hr-3c3h, PYSEC-2026-2768 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints CVE-2026-45402, GHSA-r472-mw7m-967f, PYSEC-2026-2752 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url CVE-2026-56398, GHSA-3wgj-c2hg-vm6q | High | 0.6% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958) CVE-2026-45401, GHSA-rh5x-h6pp-cjj6, PYSEC-2026-2755 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url` CVE-2026-45400, GHSA-8w7q-q5jp-jvgx, PYSEC-2026-2715 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption CVE-2026-45399, GHSA-8jjp-r2w2-4v22, PYSEC-2026-2714 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls CVE-2026-45398, GHSA-4g37-7p2c-38r9, PYSEC-2026-2699 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure CVE-2026-45397, GHSA-65pg-qhhw-mxwg, PYSEC-2026-2706 | Medium | 0.8% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation CVE-2026-45396, GHSA-rjmp-vjf2-qf4g, PYSEC-2026-2756 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage) CVE-2026-45387, GHSA-h2cw-7qw9-56xr, PYSEC-2026-2728 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint CVE-2026-45386, GHSA-5gc6-xhv4-2wg6, PYSEC-2026-2705 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint CVE-2026-45385, GHSA-wwhq-cx22-f7vv, PYSEC-2026-2767 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED] CVE-2026-45365, GHSA-v6qf-75pr-p96m, PYSEC-2026-2758 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI Exposes System Prompt to Regular User [Non-Admin] CVE-2026-45351, GHSA-jh9g-8jqw-m2qx, PYSEC-2026-2741 | Medium | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI's chat completion API allows tool restrictions to be bypassed CVE-2026-45350, GHSA-4pcg-253r-rf9w, PYSEC-2026-2700 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has Broken Access Control for Completions API CVE-2026-45349, GHSA-gfm2-xm6c-37qc, PYSEC-2026-2726 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal CVE-2026-45348, GHSA-fcjq-435v-jx94, PYSEC-2026-2994 | High | 0.2% | 14 May, 2026 | PyPI pyload-ng |
Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function CVE-2026-45347, GHSA-f776-fp4w-266c, PYSEC-2026-2723 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI missing authorization check at the model update function - models from other users can be updated CVE-2026-45345, GHSA-gm54-m39w-grjp, PYSEC-2026-2727 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints CVE-2026-45339, GHSA-57q6-fvp4-pqmm, PYSEC-2026-3543 | Medium | 0.3% | 14 May, 2026 | PyPI open-webu PyPI open-webui |
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) CVE-2026-45338, GHSA-24c9-2m8q-qhmh, PYSEC-2026-2691 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature CVE-2026-45331, GHSA-4v7r-f4w8-8972, PYSEC-2026-2702 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation CVE-2026-45317, GHSA-j6w6-986j-2m2m, PYSEC-2026-2738 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify) CVE-2026-45318, GHSA-hcwp-82g6-8wxc, PYSEC-2026-2731 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access) CVE-2026-45316, GHSA-jx2x-j75f-xq3j, PYSEC-2026-2745 | Low | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image CVE-2026-45314, GHSA-3856-3vxq-m6fc, PYSEC-2026-2694 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions CVE-2026-45315, GHSA-m8f9-9whg-f4xr, PYSEC-2026-2748 | High | 0.2% | 14 May, 2026 | PyPI open-webui |