Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in d4rktg (PyPI) MAL-2026-3688 | Malicious | Not scored | 13 May, 2026 | PyPI d4rktg |
Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect CVE-2026-44681, GHSA-r95x-qfjj-fjj2, PYSEC-2026-188 | Medium | 0.2% | 13 May, 2026 | PyPI authlib |
Malicious release: Malicious code in amino-fix (PyPI) MAL-2026-3686 | Malicious | Not scored | 13 May, 2026 | PyPI amino-fix |
UltraJSON has a Memory Leak in ujson.dump() on Write Failure CVE-2026-44660, GHSA-c38f-wx89-p2xg, PYSEC-2026-2293 | High | 0.4% | 12 May, 2026 | PyPI ujson |
Malicious release: Malicious code in txwrap (PyPI) MAL-2026-3619 | Malicious | Not scored | 12 May, 2026 | PyPI txwrap |
Malicious release: Malicious code in always-updates (PyPI) MAL-2026-3685 | Malicious | Not scored | 12 May, 2026 | PyPI always-updates |
Malicious release: Malicious code in ai-spellcheckers (PyPI) MAL-2026-3615 | Malicious | Not scored | 12 May, 2026 | PyPI ai-spellcheckers |
mem0 server lacks authentication and authorization controls for its memory creation API endpoint CVE-2026-31245, GHSA-cgx8-qgvr-f7vf, PYSEC-2026-2633 | Medium | 0.3% | 12 May, 2026 | PyPI mem0ai |
mem0 server lacks authentication and authorization controls for its memory deletion API endpoint CVE-2026-31241, GHSA-gq6f-qwv9-rf4j, PYSEC-2026-2634 | Medium | 0.4% | 12 May, 2026 | PyPI mem0ai |
mem0 server lacks authentication and authorization controls for its memory management API endpoints CVE-2026-31240, GHSA-jfv9-68m5-gjjr, PYSEC-2026-2635 | High | 0.4% | 12 May, 2026 | PyPI mem0ai |
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub CVE-2026-31239, GHSA-pq2f-x424-6fjm, PYSEC-2026-406 | Critical | 0.4% | 12 May, 2026 | PyPI mamba-ssm |
Ludwig framework is vulnerable to insecure deserialization in its model serving component CVE-2026-31238, GHSA-xp5q-5q7g-q26r, PYSEC-2026-405 | Critical | 0.5% | 12 May, 2026 | PyPI ludwig |
Ludwig framework is vulnerable to insecure deserialization through its predict() method. CVE-2026-31237, GHSA-wcr3-gm9f-f87q, PYSEC-2026-404 | Critical | 0.6% | 12 May, 2026 | PyPI ludwig |
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument CVE-2026-31236, GHSA-g76p-4vg5-f4qh, PYSEC-2026-400 | Critical | 0.3% | 12 May, 2026 | PyPI llm |
imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module CVE-2026-31235, GHSA-g82g-j283-hj97, PYSEC-2026-356 | Critical | 0.5% | 12 May, 2026 | PyPI imgaug |
Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component CVE-2026-31234, GHSA-mf8f-x4r3-jm8c, PYSEC-2026-354 | Critical | 0.7% | 12 May, 2026 | PyPI horovod |
Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism CVE-2026-31233, GHSA-r6hf-g5x6-7pv9, PYSEC-2026-347 | Critical | 0.6% | 12 May, 2026 | PyPI guardrails-ai |
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page CVE-2025-65719, GHSA-94gr-w3q5-rfqr, PYSEC-2026-371 | Critical | 0.6% | 12 May, 2026 | PyPI kubectl-mcp-server npm kubectl-mcp-server |
Superduper: Remote code execution via unsafe eval in superduper query parsing CVE-2026-31225, GHSA-2799-6g5r-mmc7, PYSEC-2026-3077 | High | 0.4% | 12 May, 2026 | PyPI superduper-framework |
Snorkel MultitaskClassifier.load uses an unsafe torch.load CVE-2026-31224, GHSA-gpx5-7xm4-229w, PYSEC-2026-3070 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel BaseLabeler.load uses an unsafe pickle.load CVE-2026-31223, GHSA-fq92-qc8f-482v, PYSEC-2026-3069 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel Trainer.load uses an unsafe torch.load CVE-2026-31222, GHSA-78cp-f66x-qmh5, PYSEC-2026-3068 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization CVE-2026-31221, GHSA-75m9-98v2-hjpm, PYSEC-2026-3043, PYSEC-2026-3972 | High | 0.4% | 12 May, 2026 | PyPI lightning PyPI pytorch-lightning |
PySyft server-side arbitrary Python execution after code approval CVE-2026-31220, GHSA-cfpg-c974-jfhq, PYSEC-2026-546 | Critical | 0.6% | 12 May, 2026 | PyPI syft |
Malicious release: Malicious code in kaggle-runner (PyPI) MAL-2026-3693 | Malicious | Not scored | 12 May, 2026 | PyPI kaggle-runner |
Malicious release: Malicious code in dlty (PyPI) MAL-2026-3690 | Malicious | Not scored | 12 May, 2026 | PyPI dlty |
Malicious release: Malicious code in crazehub (PyPI) MAL-2026-3687 | Malicious | Not scored | 12 May, 2026 | PyPI crazehub |
Malicious release: Malicious code in projz-py (PyPI) MAL-2026-3696 | Malicious | Not scored | 12 May, 2026 | PyPI projz-py |
Malicious release: Malicious code in pirxcypackage (PyPI) MAL-2026-3695 | Malicious | Not scored | 12 May, 2026 | PyPI pirxcypackage |
Malicious release: Malicious code in mymaldependency (PyPI) MAL-2026-3694 | Malicious | Not scored | 12 May, 2026 | PyPI mymaldependency |
Malicious release: Malicious code in enhancer (PyPI) MAL-2026-3691 | Malicious | Not scored | 12 May, 2026 | PyPI enhancer |
Malicious release: Malicious code in dcchbot (PyPI) MAL-2026-3689 | Malicious | Not scored | 12 May, 2026 | PyPI dcchbot |
Malicious release: Malicious code in guan (PyPI) MAL-2026-3692 | Malicious | Not scored | 12 May, 2026 | PyPI guan |
Malicious release: Malicious code in guardrails-ai (PyPI) MAL-2026-3607 | Malicious | Not scored | 12 May, 2026 | PyPI guardrails-ai |
Malicious release: Malicious code in mistralai (PyPI) MAL-2026-3608 | Malicious | Not scored | 12 May, 2026 | PyPI mistralai |
aiwaves-cn agents is vulnerable to resource consumption in the recall_relevant_memories_to_working_memory function CVE-2026-8319, GHSA-ch88-c67q-65r9, PYSEC-2026-2334 | Medium | 0.4% | 11 May, 2026 | PyPI ai-agents |
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem BIT-mlflow-2026-2614, CVE-2026-2614, GHSA-42h5-h8qh-vv9v, PYSEC-2026-2654 | High | 3.7% | 11 May, 2026 | PyPI mlflow |
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`) CVE-2026-43979, GHSA-fj2m-qvh9-jq4q, PYSEC-2026-2610 | Medium | 0.3% | 11 May, 2026 | PyPI local-deep-research |
Malicious release: Malicious code in apkeep (PyPI) MAL-2026-3431 | Malicious | Not scored | 11 May, 2026 | PyPI apkeep |
MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability BIT-mlflow-2026-2393, CVE-2026-2393, GHSA-65h7-c7c4-mghx, PYSEC-2026-2219 | High | 0.3% | 11 May, 2026 | PyPI mlflow |
Malicious release: Malicious code in openai-spellchecker (PyPI) MAL-2026-3429 | Malicious | Not scored | 11 May, 2026 | PyPI openai-spellchecker |
flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism CVE-2026-31253, GHSA-7g5w-pq96-8c5w, PYSEC-2026-2477 | High | 0.2% | 11 May, 2026 | PyPI flash-attn PyPI flash_attn |
Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31248, GHSA-9f4q-q82q-4359, PYSEC-2026-2454 | High | 0.3% | 11 May, 2026 | PyPI docling |
pgAdmin 4: Improper restriction of excessive authentication attempts CVE-2026-7820, GHSA-hv9p-2pqf-r5w3, PYSEC-2026-2869 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 File Manager has symbolic-link path traversal CVE-2026-7819, GHSA-hr4r-fwpv-c95j, PYSEC-2026-2868 | High | 0.3% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager CVE-2026-7818, GHSA-4rhg-h8f2-v4jm, PYSEC-2026-2865 | High | 0.1% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities CVE-2026-7817, GHSA-p58c-q354-6c4f, PYSEC-2026-2871 | High | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: OS command injection vulnerability in Import/Export query export CVE-2026-7816, GHSA-j74f-g7vx-fh4x, PYSEC-2026-2870 | High | 1.4% | 11 May, 2026 | PyPI pgadmin4 |
SQL injection vulnerability in pgAdmin 4 Maintenance Tool CVE-2026-7815, GHSA-hp84-p2gq-6fvr, PYSEC-2026-2867 | High | 0.5% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules CVE-2026-7814, GHSA-6p2c-69cv-3fxq, PYSEC-2026-2866 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |