Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Unauthorized privilege escalation in Mod module CVE-2020-15278, GHSA-mp9m-g7qj-6vqr, PYSEC-2020-267 | High | 1.1% | 27 Oct, 2020 | PyPI red-discordbot |
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs GHSA-r82c-j4mq-5xfw | High | Not scored | 27 Oct, 2020 | PyPI bitlyshortener |
Segfault in `tf.quantization.quantize_and_dequantize` BIT-tensorflow-2020-15265, CVE-2020-15265, GHSA-rrfp-j2mp-hq9c, PYSEC-2020-138, PYSEC-2020-295, PYSEC-2020-330 | High | 0.9% | 21 Oct, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Float cast overflow undefined behavior BIT-tensorflow-2020-15266, CVE-2020-15266, GHSA-xwhf-g6j5-j5gc, PYSEC-2020-139, PYSEC-2020-296, PYSEC-2020-331 | High | 0.9% | 21 Oct, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Plaintext password leak in Apache Superset BIT-superset-2020-13952, CVE-2020-13952, GHSA-77pw-c3j2-5fc8, PYSEC-2020-223 | High | 2.0% | 30 Sep, 2020 | PyPI apache-superset |
Potential DoS with NumberFilter conversion to integer values. CVE-2020-15225, GHSA-x7gm-rfgv-w973, PYSEC-2021-64 | High | 1.8% | 28 Sep, 2020 | PyPI django-filter |
Segmentation fault in tensorflow-lite BIT-tensorflow-2020-15210, CVE-2020-15210, GHSA-x9j7-x98r-r4w2, PYSEC-2020-133, PYSEC-2020-290, PYSEC-2020-325 | High | 0.7% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in tensorflow-lite BIT-tensorflow-2020-15209, CVE-2020-15209, GHSA-qh32-6jjc-qprm, PYSEC-2020-132, PYSEC-2020-289, PYSEC-2020-324 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15206, CVE-2020-15206, GHSA-w5gh-2wr2-pm6g, PYSEC-2020-129, PYSEC-2020-286, PYSEC-2020-321 | High | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15203, CVE-2020-15203, GHSA-xmq7-7fxm-rr79, PYSEC-2020-126, PYSEC-2020-283, PYSEC-2020-318 | High | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in Tensorflow BIT-tensorflow-2020-15200, CVE-2020-15200, GHSA-x7rp-74x2-mjf3, PYSEC-2020-123, PYSEC-2020-280, PYSEC-2020-315 | High | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in Tensorflow BIT-tensorflow-2020-15195, CVE-2020-15195, GHSA-63xm-rx5p-xvqr, PYSEC-2020-118, PYSEC-2020-275, PYSEC-2020-310 | High | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory corruption in Tensorflow BIT-tensorflow-2020-15193, CVE-2020-15193, GHSA-rjjg-hgv6-h69v, PYSEC-2020-116, PYSEC-2020-273, PYSEC-2020-308 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15199, CVE-2020-15199, GHSA-x5cp-9pcf-pp3h, PYSEC-2020-122, PYSEC-2020-279, PYSEC-2020-314 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Verification of Cryptographic Signature in ansible CVE-2020-14365, GHSA-m429-fhmv-c6q2, PYSEC-2020-209 | High | 0.2% | 23 Sep, 2020 | PyPI ansible |
Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column CVE-2020-7734, GHSA-mqwh-r366-4224, PYSEC-2020-227, SNYK-PYTHON-CABOT-609862 | High | 1.3% | 22 Sep, 2020 | PyPI cabot |
Apache Superset OS Command Injection BIT-superset-2020-13948, CVE-2020-13948, GHSA-cj7g-h7rf-h8j9, PYSEC-2020-222 | High | 3.1% | 17 Sep, 2020 | PyPI apache-superset |
Invalid root may become trusted root in The Update Framework (TUF) CVE-2020-15163, GHSA-f8mr-jv2c-v8mg, PYSEC-2020-145 | High | 0.7% | 09 Sep, 2020 | PyPI tuf |
Path Traversal in pip CVE-2019-20916, GHSA-gpvv-69j7-gwj8, PYSEC-2020-173 | High | 3.0% | 04 Sep, 2020 | PyPI pip |
Django Incorrect Default Permissions BIT-django-2020-24583, CVE-2020-24583, GHSA-m6gj-h9gm-gw44, PYSEC-2020-33 | High | 4.0% | 01 Sep, 2020 | PyPI Django PyPI django |
Django Incorrect Default Permissions BIT-django-2020-24584, CVE-2020-24584, GHSA-fr28-569j-53c4, PYSEC-2020-34 | High | 3.3% | 01 Sep, 2020 | PyPI django |
Flask-Cors Directory Traversal vulnerability CVE-2020-25032, GHSA-xc3p-ff3m-f46v, PYSEC-2020-43 | High | 4.0% | 31 Aug, 2020 | PyPI Flask-Cors PyPI flask-cors |
OpenStack Nova Live migration fails to update persistent domain XML CVE-2020-17376, GHSA-c7w7-9c85-4qxv, PYSEC-2020-243 | High | 1.7% | 26 Aug, 2020 | PyPI nova |
OS Command Injection and Improper Input Validation in ansible CVE-2019-14904, GHSA-gwr8-5j83-483c, PYSEC-2020-161 | High | 0.4% | 26 Aug, 2020 | PyPI ansible |
Remote Code Execution in Red Discord Bot CVE-2020-15147, GHSA-7257-96vg-qf6x, PYSEC-2020-266 | High | 2.6% | 21 Aug, 2020 | PyPI Red-DiscordBot PyPI red-discordbot |
django-celery-results Stores Sensitive Information In Cleartext CVE-2020-17495, GHSA-fvx8-v524-8579, PYSEC-2020-38 | High | 0.9% | 11 Aug, 2020 | PyPI django-celery-results |
Log injection in uvicorn CVE-2020-7694, GHSA-33c7-2mpw-hg34, PYSEC-2020-150, SNYK-PYTHON-UVICORN-575560 | High | 1.4% | 27 Jul, 2020 | PyPI uvicorn |
HTTP response splitting in uvicorn CVE-2020-7695, GHSA-f97h-2pfx-f59f, PYSEC-2020-151, SNYK-PYTHON-UVICORN-570471 | High | 1.4% | 27 Jul, 2020 | PyPI uvicorn |
bsdiff4 out-of-bounds write via patch file CVE-2020-15904, GHSA-f8m3-jpxr-hm5x, PYSEC-2020-30 | High | 1.1% | 22 Jul, 2020 | PyPI bsdiff4 |
Cross-Site Scripting in Wagtail CVE-2020-15118, GHSA-2473-9hgq-j7xw, PYSEC-2020-154 | High | 1.1% | 20 Jul, 2020 | PyPI wagtail |
Possible pod name collisions in jupyterhub-kubespawner CVE-2020-15110, GHSA-v7m9-9497-p9gr, PYSEC-2020-51 | High | 1.1% | 17 Jul, 2020 | PyPI jupyterhub-kubespawner |
Remote code execution (RCE) in Apache Airflow BIT-airflow-2020-11978, CVE-2020-11978, GHSA-rvmq-4x66-q7j3, PYSEC-2020-14 | HighExploited | 99.2% | 17 Jul, 2020 | PyPI apache-airflow |
Out-of-bounds reads in Pillow BIT-pillow-2020-10177, CVE-2020-10177, GHSA-cqhg-xjhh-p8hf, PYSEC-2020-76 | High | 1.5% | 25 Jun, 2020 | PyPI Pillow PyPI pillow |
Out-of-bounds read in Pillow BIT-pillow-2020-10378, CVE-2020-10378, GHSA-3xv8-3j54-hgrp, PYSEC-2020-77 | High | 1.1% | 25 Jun, 2020 | PyPI Pillow PyPI pillow |
Buffer overflow in Pillow BIT-pillow-2020-10379, CVE-2020-10379, GHSA-8843-m7mw-mxqm, PYSEC-2020-78 | High | 1.1% | 25 Jun, 2020 | PyPI Pillow PyPI pillow |
Out-of-bounds reads in Pillow BIT-pillow-2020-10994, CVE-2020-10994, GHSA-vj42-xq3r-hr3r, PYSEC-2020-79 | High | 1.4% | 25 Jun, 2020 | PyPI Pillow PyPI pillow |
rtslib-fb weak permissions for /etc/target/saveconfig.json file CVE-2020-14019, GHSA-cpcw-p965-wpqx, PYSEC-2020-250 | High | 0.3% | 19 Jun, 2020 | PyPI rtslib-fb |
OpenStack Mistral DoS CVE-2018-16848, GHSA-443j-6p7g-6v4w, PYSEC-2020-240 | High | 1.2% | 15 Jun, 2020 | PyPI mistral |
Openstack cinder Improper handling of ScaleIO backend credentials CVE-2020-10755, GHSA-v3m2-pg96-w33m, PYSEC-2020-228, PYSEC-2026-891 | High | 1.2% | 10 Jun, 2020 | PyPI cinder PyPI os-brick |
Data leakage via cache key collision in Django BIT-django-2020-13254, CVE-2020-13254, GHSA-wpjr-j57x-wxfw, PYSEC-2020-31 | High | 6.1% | 03 Jun, 2020 | PyPI Django PyPI django |
Improper Verification of Cryptographic Signature in fastecdsa CVE-2020-12607, GHSA-56wv-2wr9-3h9r, PYSEC-2020-42 | High | 1.3% | 02 Jun, 2020 | PyPI fastecdsa |
Python-RSA decryption of ciphertext leads to DoS CVE-2020-13757, GHSA-537h-rv9q-vvph, PYSEC-2020-99 | High | 1.4% | 01 Jun, 2020 | PyPI rsa |
OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context CVE-2020-12689, GHSA-chgw-36xv-47cw, PYSEC-2020-53 | High | 1.6% | 07 May, 2020 | PyPI keystone |
Insufficient Session Expiration in OpenStack Keystone CVE-2020-12690, GHSA-6m8p-x4qw-gh5j, PYSEC-2020-54 | High | 1.9% | 07 May, 2020 | PyPI keystone |
OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID CVE-2020-12691, GHSA-4427-7f3w-mqv6, PYSEC-2020-55 | High | 4.9% | 07 May, 2020 | PyPI keystone |
Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory. CVE-2018-21233, GHSA-h98h-8mxr-m8gx, PYSEC-2020-253, PYSEC-2020-269, PYSEC-2020-304 | High | 0.6% | 04 May, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103 | HighExploited | 86.2% | 30 Apr, 2020 | PyPI salt |
SQL injection in Tortoise ORM CVE-2020-11010, GHSA-9j2c-x8qm-qmjq, PYSEC-2020-144 | High | 1.0% | 20 Apr, 2020 | PyPI tortoise-orm |
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905, GHSA-frxj-5j27-f8rf, PYSEC-2020-206 | High | 0.7% | 31 Mar, 2020 | PyPI ansible |
regular expression denial-of-service (ReDoS) in Bleach CVE-2020-6817, GHSA-vqhp-cxgc-6wmm, PYSEC-2020-340, SNYK-PYTHON-BLEACH-561754 | High | 0.7% | 30 Mar, 2020 | PyPI bleach |