Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Nova-LXD bypass security restrictions CVE-2017-5936, GHSA-6xc7-4cx8-j3xc, PYSEC-2017-21 | High | 2.9% | 12 Apr, 2017 | PyPI nova-lxd |
Double Free in OpenCV CVE-2016-1516, GHSA-cvhw-2593-5j2q, PYSEC-2026-2816, PYSEC-2026-707 | High | 2.3% | 10 Apr, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Improper input validation in cryptography CVE-2016-9243, GHSA-q3cj-2r34-2cwc, PYSEC-2017-8 | High | 3.5% | 27 Mar, 2017 | PyPI cryptography |
Pysaml2 does not sanitize XML responses CVE-2016-10149, GHSA-c2vx-49jm-h3f6, PYSEC-2017-25 | High | 5.0% | 24 Mar, 2017 | PyPI pysaml2 |
cfscrape Improper Input Validation vulnerability CVE-2017-7235, GHSA-5mc5-5j6c-qmf9, PYSEC-2017-7 | High | 1.5% | 23 Mar, 2017 | PyPI cfscrape |
Capstone Integer overflow CVE-2017-6952, GHSA-3v99-hpv7-9hh9, PYSEC-2017-113 | High | 1.3% | 16 Mar, 2017 | PyPI capstone |
Plone vulnerable to privilege escalation in WebDAV CVE-2016-4041, GHSA-qqgj-22gr-73vx, PYSEC-2017-55 | High | 1.5% | 24 Feb, 2017 | PyPI Plone PyPI plone |
Improper Restriction of XML External Entity Reference in Openpyxl CVE-2017-5992, GHSA-chqf-hx79-gxc6, PYSEC-2017-48 | High | 1.4% | 15 Feb, 2017 | PyPI openpyxl |
TDQM Arbitrary Code Execution CVE-2016-10075, GHSA-r7q7-xcjw-qx8q, PYSEC-2017-74 | High | 0.4% | 19 Jan, 2017 | PyPI tqdm |
Web2py Cross-Site Request Forgery vulnerability CVE-2016-4808, GHSA-gp69-xcm6-ffqj, PYSEC-2026-1061 | High | 1.8% | 11 Jan, 2017 | PyPI web2py |
priority vulnerable to denial of service CVE-2016-6580, GHSA-h3q4-6j7f-r24c, PYSEC-2017-93 | High | 1.8% | 10 Jan, 2017 | PyPI priority |
HPACK Denial of Service vulnerability (HPACK Bomb) CVE-2016-6581, GHSA-ffq8-576r-v26g, PYSEC-2017-87 | High | 1.9% | 10 Jan, 2017 | PyPI hpack |
Improper Restriction of XML External Entity Reference in python-docx CVE-2016-5851, GHSA-34wj-p5jm-2p96, PYSEC-2016-21 | High | 2.4% | 21 Dec, 2016 | PyPI python-docx |
bottle.py vulnerable to CRLF Injection CVE-2016-9964, GHSA-j6f7-hghw-g437, PYSEC-2016-24 | High | 1.8% | 16 Dec, 2016 | PyPI bottle |
Arbitrary code using "crafted image file" approach affecting Pillow CVE-2016-9190, GHSA-w4vg-rf63-f3j3, PYSEC-2016-9 | High | 1.9% | 04 Nov, 2016 | PyPI Pillow PyPI pillow |
flask-oidc Open Redirect vulnerability CVE-2016-1000001, GHSA-f9q6-69fh-4w5w, PYSEC-2016-25 | High | 0.8% | 07 Oct, 2016 | PyPI flask-oidc |
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption CVE-2015-5162, GHSA-g2j5-7vgx-6xrx, PYSEC-2026-2412, PYSEC-2026-2491, PYSEC-2026-871 | High | 3.1% | 07 Oct, 2016 | PyPI cinder PyPI glance PyPI nova |
Django CSRF Protection Bypass CVE-2016-7401, GHSA-crhm-qpjc-cm64, PYSEC-2016-3 | High | 5.7% | 03 Oct, 2016 | PyPI django |
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor CVE-2016-4985, GHSA-f7cr-7c2c-fm8r, PYSEC-2026-646 | High | 2.9% | 12 Jul, 2016 | PyPI ironic |
OpenStack Neutron Intended MAC-spoofing protection mechanism bypass CVE-2016-5363, GHSA-9pp3-cvmq-9p22, PYSEC-2026-852 | High | 3.3% | 17 Jun, 2016 | PyPI neutron |
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism CVE-2016-5362, GHSA-qpwc-p365-pqrr, PYSEC-2026-854 | High | 3.4% | 17 Jun, 2016 | PyPI neutron |
Link Following in ansible CVE-2016-3096, GHSA-rh6x-qvg7-rrmj, PYSEC-2016-1 | High | 0.5% | 03 Jun, 2016 | PyPI ansible |
Mercurial vulnerable to arbitrary code execution when converting Git repos CVE-2016-3105, GHSA-49cw-434h-qc57, PYSEC-2016-28 | High | 2.8% | 09 May, 2016 | PyPI mercurial |
TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers CVE-2015-5271, GHSA-8936-44gw-7664, PYSEC-2016-34 | High | 2.4% | 15 Apr, 2016 | PyPI tripleo-heat-templates |
Pillow Buffer overflow in ImagingFliDecode CVE-2016-0775, GHSA-8xjv-v9xq-m5h9, PYSEC-2016-6 | High | 2.5% | 13 Apr, 2016 | PyPI Pillow PyPI pillow |
Pillow buffer overflow in ImagingPcdDecode CVE-2016-2533, GHSA-3c5c-7235-994j, PYSEC-2016-19 | High | 4.0% | 13 Apr, 2016 | PyPI pillow |
Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068, GHSA-j7c2-rqm3-c97m, PYSEC-2016-26 | High | 5.4% | 13 Apr, 2016 | PyPI mercurial |
Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069, GHSA-8fm8-7365-5rh2, PYSEC-2016-27 | High | 5.0% | 13 Apr, 2016 | PyPI mercurial |
Mercurial arbitrary code execution vulnerability CVE-2016-3630, GHSA-9vjf-jjcq-3gh7, PYSEC-2016-29 | High | 4.9% | 13 Apr, 2016 | PyPI mercurial |
Salt Improper Access Control CVE-2016-1866, GHSA-vqh4-crjf-jjxx, PYSEC-2016-23 | High | 1.5% | 12 Apr, 2016 | PyPI salt |
OpenStack TripleO Heat templates spoof metadata requests CVE-2015-5303, GHSA-m94p-8942-pm49, PYSEC-2016-35 | High | 1.7% | 11 Apr, 2016 | PyPI tripleo-heat-templates |
Django XSS Vulnerability CVE-2016-2512, GHSA-pw27-w7w4-9qc7, PYSEC-2016-15 | High | 4.1% | 08 Apr, 2016 | PyPI Django PyPI django |
Django Access Restrictions Bypass CVE-2016-2048, GHSA-46x4-9jmv-jc8p, PYSEC-2016-14 | High | 1.5% | 08 Feb, 2016 | PyPI django |
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials CVE-2015-7546, GHSA-8c4w-v65p-jvcv, PYSEC-2016-20, PYSEC-2026-2549 | High | 2.0% | 03 Feb, 2016 | PyPI keystone PyPI keystonemiddleware |
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0738, GHSA-fxwr-2vxm-cg7p, PYSEC-2026-932 | High | 3.9% | 29 Jan, 2016 | PyPI swift |
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0737, GHSA-972c-cfv8-2hq8, PYSEC-2026-929 | High | 3.8% | 29 Jan, 2016 | PyPI swift |
Kallithea CRLF injection vulnerability CVE-2015-5285, GHSA-vfg9-phjp-9frw, PYSEC-2015-13 | High | 6.1% | 29 Oct, 2015 | PyPI kallithea |
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file CVE-2015-5163, GHSA-q73f-vjc2-3gqf, PYSEC-2015-39 | High | 1.5% | 19 Aug, 2015 | PyPI glance |
Ansible does not verify that the server hostname matches a domain name in certificates CVE-2015-3908, GHSA-w64c-pxjj-h866, PYSEC-2015-1 | High | 0.9% | 12 Aug, 2015 | PyPI ansible |
Django Denial-of-service by filling session store CVE-2015-5143, GHSA-h582-2pch-3xv3, PYSEC-2015-20 | High | 7.2% | 14 Jul, 2015 | PyPI Django PyPI django |
Django Vulnerable to HTTP Response Splitting Attack CVE-2015-5144, GHSA-q5qw-4364-5hhm, PYSEC-2015-10 | High | 3.2% | 14 Jul, 2015 | PyPI Django PyPI django |
Django ReDoS in validators.URLValidator CVE-2015-5145, GHSA-cqf7-ff9h-7967, PYSEC-2015-21 | High | 3.0% | 14 Jul, 2015 | PyPI Django PyPI django |
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin CVE-2014-3598, GHSA-j6f7-g425-4gmx, PYSEC-2015-15 | High | 2.0% | 01 May, 2015 | PyPI pillow |
django-markupfield Arbitrary File Read CVE-2015-0846, GHSA-wxmr-7xjv-8xqw, PYSEC-2015-12 | High | 1.8% | 24 Apr, 2015 | PyPI django-markupfield |
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks CVE-2015-1852, GHSA-p9wq-mjh8-q72m, PYSEC-2015-30, PYSEC-2015-31 | High | 2.3% | 17 Apr, 2015 | PyPI keystonemiddleware PyPI python-keystoneclient |
Django Denial-of-service possibility with strip_tags CVE-2015-2316, GHSA-j3j3-jrfh-cm2w, PYSEC-2015-18 | High | 4.8% | 25 Mar, 2015 | PyPI Django PyPI django |
OpenStack Glance Denial of service by creating a large number of images CVE-2014-9684, GHSA-h737-q6g6-8wr6, PYSEC-2015-37 | High | 2.0% | 24 Feb, 2015 | PyPI glance |
OpenStack Glance Denial of service by creating a large number of images CVE-2015-1881, GHSA-4jp4-3c62-r8jv, PYSEC-2015-38 | High | 2.1% | 24 Feb, 2015 | PyPI glance |
RhodeCode and Kallithea are vulnerable to sensitive information disclosure CVE-2015-0260, GHSA-hhx9-4vw2-x54r, PYSEC-2015-29, PYSEC-2015-32 | High | 1.8% | 16 Feb, 2015 | PyPI Kallithea PyPI RhodeCode PyPI kallithea PyPI rhodecode |
Pillow denial of service via PNG bomb CVE-2014-9601, GHSA-h5rf-vgqx-wjv2, PYSEC-2015-16 | High | 4.6% | 16 Jan, 2015 | PyPI pillow |