Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation CVE-2026-45317, GHSA-j6w6-986j-2m2m, PYSEC-2026-2738 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify) CVE-2026-45318, GHSA-hcwp-82g6-8wxc, PYSEC-2026-2731 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access) CVE-2026-45316, GHSA-jx2x-j75f-xq3j, PYSEC-2026-2745 | Low | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image CVE-2026-45314, GHSA-3856-3vxq-m6fc, PYSEC-2026-2694 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions CVE-2026-45315, GHSA-m8f9-9whg-f4xr, PYSEC-2026-2748 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad CVE-2026-45306, GHSA-w727-595x-pc3r, PYSEC-2026-2998 | Medium | 0.2% | 14 May, 2026 | PyPI pyload-ng |
Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/ GHSA-g39v-cvjh-8fpf | Medium | Not scored | 14 May, 2026 | PyPI ha-mcp |
Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler CVE-2026-8597, GHSA-rq6v-x3j8-7qgf, PYSEC-2026-3060 | Medium | 0.5% | 14 May, 2026 | PyPI sagemaker |
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path CVE-2026-8596, GHSA-7hh5-prp2-mfh5, PYSEC-2026-3059 | High | 0.6% | 14 May, 2026 | PyPI sagemaker |
Open WebUI has stored XSS via the HTML renedering view CVE-2026-45303, GHSA-4vrc-m9ch-6m3r, PYSEC-2026-2704 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file CVE-2026-45301, GHSA-r8wh-8m7r-fh33, PYSEC-2026-2753 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has Stored Cross-Site Scripting In Profile Picture CVE-2026-45299, GHSA-6gh2-q7cp-9qf6, PYSEC-2026-2708 | Medium | 0.2% | 14 May, 2026 | PyPI open-webui |
Malicious release: Malicious code in natazx (PyPI) MAL-2026-3778 | Malicious | Not scored | 14 May, 2026 | PyPI natazx |
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override CVE-2026-44541, GHSA-5qrq-9645-g5g2, PYSEC-2026-2470 | High | 0.3% | 14 May, 2026 | PyPI ethyca-fides |
Malicious release: Malicious code in tronpath (PyPI) MAL-2026-3742 | Malicious | Not scored | 14 May, 2026 | PyPI tronpath |
dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction CVE-2026-44970, GHSA-jj54-r8gm-2fcf, PYSEC-2026-2442 | Medium | 0.4% | 14 May, 2026 | PyPI dbt-mcp |
dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled CVE-2026-44969, GHSA-7xgw-6qf3-7w59, PYSEC-2026-2441 | Low | 0.2% | 14 May, 2026 | PyPI dbt-mcp |
dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters CVE-2026-44968, GHSA-xpww-f6pm-cfhq, PYSEC-2026-2444 | Medium | 0.2% | 14 May, 2026 | PyPI dbt-mcp |
Malicious release: Malicious code in pyexecutorsme (PyPI) MAL-2026-3741 | Malicious | Not scored | 14 May, 2026 | PyPI pyexecutorsme |
Mistune Image Directive CSS Injection Vulnerability CVE-2026-44899, GHSA-ccfx-mfmx-2fx9, PYSEC-2026-2209 | Medium | 0.2% | 14 May, 2026 | PyPI mistune |
Mistune TOC Anchor Injection XSS CVE-2026-44898, GHSA-6269-cqxg-mhhv, PYSEC-2026-2208 | Medium | 0.2% | 14 May, 2026 | PyPI mistune |
Synapse pagination Denial of Service CVE-2026-45076, GHSA-6qf2-7x63-mm6v, PYSEC-2026-194 | Medium | 0.4% | 14 May, 2026 | PyPI matrix-synapse |
Synapse CPU starvation (Denial of Service) CVE-2026-45078, GHSA-8q93-326v-3m7g, PYSEC-2026-191 | High | 0.1% | 14 May, 2026 | PyPI matrix-synapse |
pyzipper has an encryption bypass for small files encrypted using it CVE-2026-44722, GHSA-crqm-m339-7m2p, PYSEC-2026-3044 | Medium | 0.1% | 14 May, 2026 | PyPI pyzipper |
wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager CVE-2026-43978, GHSA-9qpr-vc49-hqg2, PYSEC-2026-3420 | High | 0.3% | 14 May, 2026 | PyPI wger |
wger Vulnerable to IDOR: Authenticated Users Can Read Any User's Private Workout Session Data via Template Routine API CVE-2026-43977, GHSA-cj9g-27ph-4cgv, PYSEC-2026-3421 | High | 0.3% | 14 May, 2026 | PyPI wger |
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices CVE-2026-44919, GHSA-4g73-w726-53h3, PYSEC-2026-2524 | Medium | 0.5% | 14 May, 2026 | PyPI ironic |
Malicious release: Malicious code in async-http-tools (PyPI) MAL-2026-3702 | Malicious | Not scored | 13 May, 2026 | PyPI async-http-tools |
Malicious release: Malicious code in web3-helpers (PyPI) MAL-2026-3706 | Malicious | Not scored | 13 May, 2026 | PyPI web3-helpers |
Malicious release: Malicious code in math-array-tools (PyPI) MAL-2026-3705 | Malicious | Not scored | 13 May, 2026 | PyPI math-array-tools |
Malicious release: Malicious code in graddio (PyPI) MAL-2026-3704 | Malicious | Not scored | 13 May, 2026 | PyPI graddio |
Malicious release: Malicious code in crypto-hash-utils (PyPI) MAL-2026-3703 | Malicious | Not scored | 13 May, 2026 | PyPI crypto-hash-utils |
Malicious release: Malicious code in aiohttp-util (PyPI) MAL-2026-3699 | Malicious | Not scored | 13 May, 2026 | PyPI aiohttp-util |
Malicious release: Malicious code in api-request-helpers (PyPI) MAL-2026-3701 | Malicious | Not scored | 13 May, 2026 | PyPI api-request-helpers |
Malicious release: Malicious code in alembic-util (PyPI) MAL-2026-3700 | Malicious | Not scored | 13 May, 2026 | PyPI alembic-util |
Malicious release: Malicious code in syntaxlogger (PyPI) MAL-2026-3697 | Malicious | Not scored | 13 May, 2026 | PyPI syntaxlogger |
Malicious release: Malicious code in trickery (PyPI) MAL-2026-3698 | Malicious | Not scored | 13 May, 2026 | PyPI trickery |
Malicious release: Malicious code in hackling (PyPI) MAL-2026-3665 | Malicious | Not scored | 13 May, 2026 | PyPI hackling |
Malicious release: Malicious code in workingitmehelpit (PyPI) MAL-2026-3664 | Malicious | Not scored | 13 May, 2026 | PyPI workingitmehelpit |
wger has an Uncontrolled Resource Consumption issue CVE-2026-86255, GHSA-v25j-wqcw-fvhj | High | 0.4% | 13 May, 2026 | PyPI wger |
Nautobot: GitRepository.current_head field should not be writable through REST API CVE-2026-44798, GHSA-p3hx-pwf3-j8wr, PYSEC-2026-2228 | High | 0.3% | 13 May, 2026 | PyPI nautobot |
Nautobot: Webhook definitions could be used for server-side request forgery (SSRF) CVE-2026-44797, GHSA-c35q-vxrp-ph26, PYSEC-2026-2227 | High | 0.2% | 13 May, 2026 | PyPI nautobot |
Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS) CVE-2026-44796, GHSA-qrpw-gjvh-x5gm, PYSEC-2026-2226 | Medium | 0.3% | 13 May, 2026 | PyPI nautobot |
Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference CVE-2026-44794, GHSA-wpxj-44w3-2j6x, PYSEC-2026-2225 | Medium | 0.2% | 13 May, 2026 | PyPI nautobot |
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134, GHSA-3644-q5cj-c5c7, PYSEC-2026-2555, PYSEC-2026-2560, PYSEC-2026-2582 | High | 0.2% | 13 May, 2026 | PyPI langchain PyPI langchain-classic PyPI langsmith npm langsmith |
Malicious release: Malicious code in numpy-lib (PyPI) MAL-2026-3660 | Malicious | Not scored | 13 May, 2026 | PyPI numpy-lib |
Malicious release: Malicious code in pandas-data (PyPI) MAL-2026-3661 | Malicious | Not scored | 13 May, 2026 | PyPI pandas-data |
Malicious release: Malicious code in py-requests (PyPI) MAL-2026-3662 | Malicious | Not scored | 13 May, 2026 | PyPI py-requests |
Malicious release: Malicious code in rich-util (PyPI) MAL-2026-3659 | Malicious | Not scored | 13 May, 2026 | PyPI rich-util |
Malicious release: Malicious code in openai-spellcheckers (PyPI) MAL-2026-3638 | Malicious | Not scored | 13 May, 2026 | PyPI openai-spellcheckers |