Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6606, GHSA-crx8-wpv6-jrj2, PYSEC-2026-2332 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6605, GHSA-8ggf-r3vm-p3jc, PYSEC-2026-2330 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6604, GHSA-659x-hm75-hpv7, PYSEC-2026-2329 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope Vulnerable to Remote Code Injection CVE-2026-6603, GHSA-cr24-fv3h-8cjm, PYSEC-2026-2331 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
Langflow vulnerable to injection CVE-2026-6599, GHSA-v66p-f7x3-4794, PYSEC-2026-2569 | Low | 0.2% | 20 Apr, 2026 | PyPI langflow |
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint CVE-2026-6598, GHSA-9jpj-cph8-w449, PYSEC-2026-2568 | Low | 0.2% | 20 Apr, 2026 | PyPI langflow |
Langflow has an Information Leak through Incomplete API Key Redaction CVE-2026-6597, GHSA-5jjf-wcvf-923w, PYSEC-2026-2565 | Low | 0.3% | 20 Apr, 2026 | PyPI langflow |
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API CVE-2026-6596, GHSA-vvfc-fp59-m92g, PYSEC-2026-2572 | Medium | 0.3% | 20 Apr, 2026 | PyPI langflow-base |
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module CVE-2026-6587, GHSA-95ww-475f-pr4f, PYSEC-2026-3046 | Low | 0.3% | 20 Apr, 2026 | PyPI ragas |
Malicious release: Malicious code in rblx-studio-api (PyPI) MAL-2026-2863 | Malicious | Not scored | 19 Apr, 2026 | PyPI rblx-studio-api |
Malicious release: Malicious code in robase-setup (PyPI) MAL-2026-2864 | Malicious | Not scored | 19 Apr, 2026 | PyPI robase-setup |
Malicious release: Malicious code in mylib-utils (PyPI) MAL-2026-2860 | Malicious | Not scored | 18 Apr, 2026 | PyPI mylib-utils |
Malicious release: Malicious code in rblx-api (PyPI) MAL-2026-2859 | Malicious | Not scored | 18 Apr, 2026 | PyPI rblx-api |
apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation CVE-2026-40948, GHSA-5w6h-pjw6-wvc6, PYSEC-2026-2369 | Medium | 0.4% | 18 Apr, 2026 | PyPI apache-airflow-providers-keycloak |
Malicious release: Malicious code in stringhelp (PyPI) MAL-2026-2854 | Malicious | Not scored | 18 Apr, 2026 | PyPI stringhelp |
Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries BIT-airflow-2026-32690, CVE-2026-32690, GHSA-w9r4-94fj-xp69, PYSEC-2026-19, PYSEC-2026-2362 | Low | 0.4% | 18 Apr, 2026 | PyPI apache-airflow PyPI apache-airflow-core |
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions BIT-airflow-2026-32228, CVE-2026-32228, GHSA-h97w-pm3w-mwmc, PYSEC-2026-2360 | High | 0.4% | 18 Apr, 2026 | PyPI apache-airflow-core |
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false BIT-airflow-2026-30912, CVE-2026-30912, GHSA-w7cf-2pmc-5m4c, PYSEC-2026-18, PYSEC-2026-2361 | High | 0.4% | 18 Apr, 2026 | PyPI apache-airflow PyPI apache-airflow-core |
Apache Airflow allows code execution through crafted XCom payloads BIT-airflow-2026-25917, CVE-2026-25917, GHSA-6ffj-2wg2-w45j, PYSEC-2026-13, PYSEC-2026-2359 | High | 0.8% | 18 Apr, 2026 | PyPI apache-airflow PyPI apache-airflow-core |
pretalx vulnerable to stored cross-site scripting in organizer search typeahead CVE-2026-41241, GHSA-cjcx-jfp2-f7m2, PYSEC-2026-108 | High | 0.2% | 18 Apr, 2026 | PyPI pretalx |
pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders CVE-2026-41426, GHSA-jm8c-9f3j-4378, PYSEC-2026-109 | Medium | 0.2% | 18 Apr, 2026 | PyPI pretalx |
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations CVE-2026-41490, GHSA-mjw2-v2hm-wj34, PYSEC-2026-2432, PYSEC-2026-2433, PYSEC-2026-2434, PYSEC-2026-2435, PYSEC-2026-2436, PYSEC-2026-2437 | High | 0.3% | 18 Apr, 2026 | PyPI dagster PyPI dagster-deltalake PyPI dagster-duckdb PyPI dagster-gcp +2 more |
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) CVE-2026-41496, GHSA-rg3h-x3jw-7jm5, PYSEC-2026-2923, PYSEC-2026-2952 | High | 0.3% | 17 Apr, 2026 | PyPI praisonai PyPI praisonaiagents |
PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection CVE-2026-41497, GHSA-9qhq-v63v-fv3j, PYSEC-2026-473 | Critical | 0.5% | 17 Apr, 2026 | PyPI praisonai |
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures CVE-2026-35402, GHSA-x3cv-r3g3-fpg9, PYSEC-2026-2626 | Low | 0.3% | 17 Apr, 2026 | PyPI mcp-neo4j-cypher |
OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes CVE-2026-40525, GHSA-jgq2-vq69-gr6h, PYSEC-2026-438 | Critical | 0.6% | 17 Apr, 2026 | PyPI openviking |
Malicious release: Malicious code in aet-test (PyPI) MAL-2026-2852 | Malicious | Not scored | 17 Apr, 2026 | PyPI aet-test |
Malicious release: Malicious code in shan-lib (PyPI) MAL-2026-2847 | Malicious | Not scored | 17 Apr, 2026 | PyPI shan-lib |
Malicious release: Malicious code in shan-lib-poc (PyPI) MAL-2026-2843 | Malicious | Not scored | 17 Apr, 2026 | PyPI shan-lib-poc |
Malicious release: Malicious code in lixxyly (PyPI) MAL-2026-2841 | Malicious | Not scored | 17 Apr, 2026 | PyPI lixxyly |
Malicious release: Malicious code in shelipp (PyPI) MAL-2026-2844 | Malicious | Not scored | 17 Apr, 2026 | PyPI shelipp |
Malicious release: Malicious code in looopiw (PyPI) MAL-2026-2842 | Malicious | Not scored | 17 Apr, 2026 | PyPI looopiw |
Malicious release: Malicious code in sher-server-tool (PyPI) MAL-2026-2840 | Malicious | Not scored | 17 Apr, 2026 | PyPI sher-server-tool |
Malicious release: Malicious code in sher-net (PyPI) MAL-2026-2839 | Malicious | Not scored | 17 Apr, 2026 | PyPI sher-net |
Malicious release: Malicious code in solanakit (PyPI) MAL-2026-2837 | Malicious | Not scored | 17 Apr, 2026 | PyPI solanakit |
Malicious release: Malicious code in procoder (PyPI) MAL-2026-2835 | Malicious | Not scored | 17 Apr, 2026 | PyPI procoder |
Malicious release: Malicious code in azure-ai-agentserver-githubcopilot (PyPI) MAL-2026-2831 | Malicious | Not scored | 17 Apr, 2026 | PyPI azure-ai-agentserver-githubcopilot |
Malicious release: Malicious code in ixosrestinterface (PyPI) MAL-2026-2832 | Malicious | Not scored | 17 Apr, 2026 | PyPI ixosrestinterface |
Malicious release: Malicious code in keystackutilities (PyPI) MAL-2026-2833 | Malicious | Not scored | 17 Apr, 2026 | PyPI keystackutilities |
Malicious release: Malicious code in loadcoremwassistant (PyPI) MAL-2026-2834 | Malicious | Not scored | 17 Apr, 2026 | PyPI loadcoremwassistant |
Malicious release: Malicious code in restasv3 (PyPI) MAL-2026-2836 | Malicious | Not scored | 17 Apr, 2026 | PyPI restasv3 |
langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding CVE-2026-41488, GHSA-r7w7-9xr2-qq2r, PYSEC-2026-76 | Low | 0.2% | 16 Apr, 2026 | PyPI langchain-openai |
LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass CVE-2026-41481, GHSA-fv5p-p927-qmxr, PYSEC-2026-77 | Medium | 0.3% | 16 Apr, 2026 | PyPI langchain-text-splitters |
Authlib: Cross-site request forging when using cache CVE-2026-41425, GHSA-jj8c-mmj3-mmgv, PYSEC-2026-25 | Medium | 0.1% | 16 Apr, 2026 | PyPI authlib |
Malicious release: Malicious code in robase-quick-install (PyPI) MAL-2026-2821 | Malicious | Not scored | 16 Apr, 2026 | PyPI robase-quick-install |
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM CVE-2026-41314, GHSA-x284-j5p8-9c5p, PYSEC-2026-3026 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
pypdf: Possible long runtimes for wrong size values in incremental mode CVE-2026-41313, GHSA-4pxv-j86v-mhcw, PYSEC-2026-3007 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM CVE-2026-41312, GHSA-7gw9-cf7v-778f, PYSEC-2026-3011 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates CVE-2026-40602, GHSA-33qf-q99x-wpm8, PYSEC-2026-2518 | Medium | 0.1% | 16 Apr, 2026 | PyPI homeassistant-cli |
Mako: Path traversal via double-slash URI prefix in TemplateLookup CVE-2026-41205, GHSA-v92g-xgxw-vvmm, PYSEC-2026-88 | High | 0.4% | 16 Apr, 2026 | PyPI Mako PyPI mako |