Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Openstack nova qcow format could expose host filesystem information CVE-2011-3147, GHSA-hqfx-4x4w-vmwp, PYSEC-2026-690 | High | 0.7% | 22 Apr, 2019 | PyPI nova |
Improper Input Validation in python-dbusmock CVE-2015-1326, GHSA-74xw-82v7-hmrm, PYSEC-2019-155 | High | 1.8% | 22 Apr, 2019 | PyPI python-dbusmock |
Improper Certificate Validation in urllib3 CVE-2019-11324, GHSA-mh33-7rrq-662w, PYSEC-2019-133 | High | 2.9% | 18 Apr, 2019 | PyPI urllib3 |
Apache Airflow vulnerable to CSRF Attacks CVE-2019-0229, GHSA-w6j4-3gh2-9f5j, PYSEC-2019-215 | High | 1.6% | 10 Apr, 2019 | PyPI apache-airflow |
Jinja2 sandbox escape vulnerability CVE-2016-10745, GHSA-hj2j-77xm-mc5v, PYSEC-2019-220 | High | 3.5% | 08 Apr, 2019 | PyPI Jinja2 PyPI jinja2 |
Jinja2 sandbox escape via string formatting CVE-2019-10906, GHSA-462w-v97r-4m45, PYSEC-2019-217 | High | 3.5% | 07 Apr, 2019 | PyPI Jinja2 PyPI jinja2 |
OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876, GHSA-jr9m-v5qh-mh2j, PYSEC-2019-189 | High | 1.7% | 05 Apr, 2019 | PyPI neutron |
Tryton Improper Access Control CVE-2019-10868, GHSA-f6f2-pwrj-64h3, PYSEC-2019-127 | High | 1.3% | 05 Apr, 2019 | PyPI trytond |
CoAPthon DoS due to Exceptions CVE-2018-12680, GHSA-5xc6-fpc7-4qvg, PYSEC-2019-165 | High | 1.5% | 02 Apr, 2019 | PyPI CoAPthon PyPI coapthon |
CoAPthon3 vulnerable to Deserialization of Untrusted Data CVE-2018-12679, GHSA-c6fm-rgw4-8q73, PYSEC-2019-166 | High | 1.5% | 02 Apr, 2019 | PyPI CoAPthon3 PyPI coapthon3 |
Openstack Octavia allows Insertion of Sensitive Information into Log File CVE-2018-16856, GHSA-qcj3-h27m-mp9x, PYSEC-2019-193 | High | 0.9% | 26 Mar, 2019 | PyPI octavia |
Ceilometer Prints Sensitive Configuration Data to Log CVE-2019-3830, GHSA-2cvf-r9jm-4qm9, PYSEC-2019-78 | High | 0.4% | 26 Mar, 2019 | PyPI ceilometer |
Matrix Synapse Predictable Secret Key CVE-2019-5885, GHSA-jrqm-v8cv-53ww, PYSEC-2019-187 | High | 2.4% | 21 Mar, 2019 | PyPI matrix-synapse |
Duplicate Advisory: python-gnupg allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended CVE-2019-6690, GHSA-2fch-jvg5-crf6, GHSA-qh62-ch95-63wh, PYSEC-2019-115 | High | 8.6% | 21 Mar, 2019 | PyPI python-gnupg |
OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735, GHSA-9773-3fqg-8w25, PYSEC-2019-190 | High | 3.7% | 13 Mar, 2019 | PyPI neutron |
Webargs mishandles concurrent JSON parsing CVE-2019-9710, GHSA-8554-jxcw-454q, PYSEC-2019-139 | High | 1.1% | 12 Mar, 2019 | PyPI webargs |
Uncontrolled Memory Consumption in Django CVE-2019-6975, GHSA-wh4h-v3f2-r2pp, PYSEC-2019-18 | High | 5.1% | 11 Feb, 2019 | PyPI Django PyPI django |
Boolector use after free CVE-2019-7560, GHSA-g58x-799h-v9h6, PYSEC-2019-252 | High | 1.0% | 07 Feb, 2019 | PyPI pyboolector |
Depth counting error in guard() leading to multiple potential security issues in aioxmpp CVE-2019-1000007, GHSA-6m9g-jr8c-cqw3, PYSEC-2019-1 | High | 1.2% | 04 Feb, 2019 | PyPI aioxmpp |
slixmpp Incorrect Access Control CVE-2019-1000021, GHSA-4g62-mfwx-4q48, PYSEC-2019-121 | High | 2.3% | 04 Feb, 2019 | PyPI slixmpp |
Pylons Colander Denial of Service vulnerability CVE-2017-18361, GHSA-rv95-4wxj-6fqq, PYSEC-2019-167 | High | 2.1% | 01 Feb, 2019 | PyPI colander |
Improper Input Validation in Apache Airflow resulting in Remote Code Execution CVE-2017-15720, GHSA-8fg4-j562-mjrc, PYSEC-2019-147 | High | 2.5% | 23 Jan, 2019 | PyPI apache-airflow |
Cross-Site Request Forgery (CSRF) in Apache Airflow CVE-2017-17835, GHSA-68wv-rjrm-576p, PYSEC-2019-148 | High | 2.0% | 23 Jan, 2019 | PyPI apache-airflow |
Improper Certificate Validation in Apache Airflow CVE-2018-20245, GHSA-77rc-x84q-pv4f, PYSEC-2019-143 | High | 1.0% | 23 Jan, 2019 | PyPI apache-airflow |
Improper Access Control in MySQL Connector Python CVE-2019-2435, GHSA-v5rq-w2xm-7g5f, PYSEC-2026-683 | High | 2.5% | 16 Jan, 2019 | PyPI mysql-connector-python |
Improper Input Validation in Django CVE-2019-3498, GHSA-337x-4q8g-prc5, PYSEC-2019-17 | High | 3.4% | 09 Jan, 2019 | PyPI Django PyPI django |
sqla-yaml-fixtures is vulnerable to Code Injection CVE-2019-3575, GHSA-2x54-j4m3-r6wx, PYSEC-2019-122 | High | 0.4% | 03 Jan, 2019 | PyPI sqla-yaml-fixtures |
Ansible sensitive information disclosure CVE-2018-16876, GHSA-j569-fghw-f9rx, PYSEC-2019-141 | High | 2.5% | 03 Jan, 2019 | PyPI ansible |
PyKMIP Denial of service vulnerability CVE-2018-1000872, GHSA-gfv6-cj92-g3hx, PYSEC-2018-22 | High | 1.3% | 20 Dec, 2018 | PyPI pykmip |
aiohttp-session creates non-expiring sessions CVE-2018-1000814, GHSA-mr4x-c4v9-x729, PYSEC-2018-35 | High | 1.0% | 20 Dec, 2018 | PyPI aiohttp-session |
Cross-Site Request Forgery (CSRF) in Luigi CVE-2018-1000843, GHSA-p69g-f978-xxv9, PYSEC-2018-11 | High | 0.8% | 20 Dec, 2018 | PyPI luigi |
Withdrawn Advisory: OnionShare Predictable Pathname CVE-2018-19960, GHSA-pwjq-6wrh-5w8q | High | 0.3% | 07 Dec, 2018 | PyPI onionshare-cli |
Session Fixation in Tryton CVE-2018-19443, GHSA-32w7-9whp-cjp9, PYSEC-2018-77 | High | 1.1% | 22 Nov, 2018 | PyPI tryton |
Py-EVM is vulnerable to arbitrary bytecode injection CVE-2018-18920, GHSA-vqgp-4jgj-5j64, PYSEC-2018-155, PYSEC-2018-96 | High | 2.9% | 12 Nov, 2018 | PyPI evm-py PyPI py-evm |
openstack-mistral Discloses the presence of arbitrary files within the filesystem CVE-2018-16849, GHSA-fqw7-c6vr-q29m, PYSEC-2018-92 | High | 1.5% | 02 Nov, 2018 | PyPI mistral |
Improper Input Validation in kdcproxy CVE-2015-5159, GHSA-j7c4-2xj8-wm7r, PYSEC-2018-85 | High | 2.2% | 30 Oct, 2018 | PyPI kdcproxy |
Ansible Leaks Data Passed to ssh-keygen CVE-2018-16837, GHSA-hwrm-63v2-42g4, PYSEC-2018-44 | High | 0.4% | 23 Oct, 2018 | PyPI ansible |
libpg_query memory leak CVE-2018-18482, GHSA-vm3q-58wm-2r2x, PYSEC-2018-154, PYSEC-2026-895 | High | 1.2% | 18 Oct, 2018 | PyPI pg-query PyPI pglast |
Insufficiently Protected Credentials in Requests CVE-2018-18074, GHSA-x84v-xcm2-53pg, PYSEC-2018-28 | High | 6.9% | 09 Oct, 2018 | PyPI requests |
Paramiko Authentication Bypass vulnerability CVE-2018-1000805, GHSA-f2j6-wrhh-v25m, PYSEC-2018-69 | High | 4.4% | 08 Oct, 2018 | PyPI paramiko |
PyOpenSSL Use-After-Free vulnerability CVE-2018-1000807, GHSA-p28m-34f6-967q, PYSEC-2018-23 | High | 4.1% | 08 Oct, 2018 | PyPI pyopenssl |
Pyopenssl Incorrect Memory Management CVE-2018-1000808, GHSA-2rcm-phc9-3945, PYSEC-2018-24 | High | 1.9% | 08 Oct, 2018 | PyPI pyopenssl |
privacyIDEA Improper Input Validation vulnerability CVE-2018-1000809, GHSA-7qqv-r2q4-jxhm, PYSEC-2018-20 | High | 1.7% | 08 Oct, 2018 | PyPI privacyIDEA PyPI privacyidea |
Matrix Synapse Improper Signature Validation CVE-2018-16515, GHSA-fmvh-rvq5-hhjx, PYSEC-2026-845 | High | 1.5% | 18 Sep, 2018 | PyPI matrix-synapse |
OpensStack Neutron Denial of Service Vulnerability CVE-2018-14635, GHSA-x634-34m9-96mp, PYSEC-2018-93 | High | 2.5% | 10 Sep, 2018 | PyPI neutron |
MicroPyramid Django-CRM CSRF CVE-2018-16552, GHSA-hq4r-47qc-3jhc, PYSEC-2018-65 | High | 0.6% | 05 Sep, 2018 | PyPI Django-CRM PyPI django-crm |
conference-scheduler-cli Arbitrary Code Execution CVE-2018-14572, GHSA-cf3c-fffp-34qh, PYSEC-2018-64 | High | 2.5% | 28 Aug, 2018 | PyPI conference-scheduler-cli |
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data CVE-2018-1000656, GHSA-562c-5r94-xh97, PYSEC-2018-66 | High | 3.9% | 20 Aug, 2018 | PyPI flask |
Pyro mishandles pid files in temporary directory locations and opening the pid file as root CVE-2011-2765, GHSA-xrr4-74mc-rpjc, PYSEC-2018-99 | High | 2.2% | 20 Aug, 2018 | PyPI pyro |
PyCryptodome integer overflow vulnerability CVE-2018-15560, GHSA-hgg3-g7gr-66r7, PYSEC-2018-21 | High | 1.8% | 20 Aug, 2018 | PyPI pycryptodome |