Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gate-apis (PyPI) MAL-2026-2630 | Malicious | Not scored | 14 Apr, 2026 | PyPI gate-apis |
Malicious release: Malicious code in svchost (PyPI) MAL-2026-2628 | Malicious | Not scored | 14 Apr, 2026 | PyPI svchost |
Malicious release: Malicious code in pckg-sv (PyPI) MAL-2026-2627 | Malicious | Not scored | 14 Apr, 2026 | PyPI pckg-sv |
Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality CVE-2026-34225, GHSA-jgx9-jr5x-mvpv, PYSEC-2026-2740 | Medium | 0.3% | 14 Apr, 2026 | PyPI open-webui |
gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall CVE-2026-40491, GHSA-76hw-p97h-883f, PYSEC-2026-2158 | High | 0.6% | 14 Apr, 2026 | PyPI gdown |
mitmproxy has an LDAP Injection CVE-2026-40606, GHSA-527g-3w9m-29hv, PYSEC-2026-92 | Medium | 0.2% | 14 Apr, 2026 | PyPI mitmproxy |
excel-mcp-server has a Path Traversal issue CVE-2026-40576, GHSA-j98m-w3xp-9f56, PYSEC-2026-331 | Critical | 0.5% | 14 Apr, 2026 | PyPI excel-mcp-server |
Malicious release: Malicious code in robase-install (PyPI) MAL-2026-2625 | Malicious | Not scored | 13 Apr, 2026 | PyPI robase-install |
Malicious release: Malicious code in asciitoart (PyPI) MAL-2026-2624 | Malicious | Not scored | 13 Apr, 2026 | PyPI asciitoart |
FITS GZIP decompression bomb in Pillow BIT-pillow-2026-40192, CVE-2026-40192, GHSA-whj4-6x5x-4v2j, PYSEC-2026-2250 | High | 0.7% | 13 Apr, 2026 | PyPI pillow |
Malicious release: Malicious code in hive-setting (PyPI) MAL-2026-2623 | Malicious | Not scored | 13 Apr, 2026 | PyPI hive-setting |
Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API BIT-airflow-2026-33858, CVE-2026-33858, GHSA-mc4f-r875-v87w, PYSEC-2026-20 | High | 0.6% | 13 Apr, 2026 | PyPI apache-airflow |
Keras has an untrusted deserialization vulnerability CVE-2026-1462, GHSA-4f3f-g24h-fr8m, PYSEC-2026-2547 | High | 0.4% | 13 Apr, 2026 | PyPI keras |
Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI BIT-airflow-2025-66236, CVE-2025-66236, GHSA-j86x-fwp2-qh7v, PYSEC-2026-8 | High | 0.4% | 13 Apr, 2026 | PyPI apache-airflow |
Malicious release: Malicious code in hiveos-setting (PyPI) MAL-2026-2572 | Malicious | Not scored | 13 Apr, 2026 | PyPI hiveos-setting |
Malicious release: Malicious code in hiveos-settings (PyPI) MAL-2026-2571 | Malicious | Not scored | 13 Apr, 2026 | PyPI hiveos-settings |
Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability CVE-2026-4810, GHSA-rg7c-g689-fr3x, PYSEC-2026-344 | Critical | 1.8% | 13 Apr, 2026 | PyPI google-adk |
Malicious release: Malicious code in bloxy-api (PyPI) MAL-2026-2569 | Malicious | Not scored | 12 Apr, 2026 | PyPI bloxy-api |
Malicious release: Malicious code in robase-app (PyPI) MAL-2026-2570 | Malicious | Not scored | 12 Apr, 2026 | PyPI robase-app |
MetaGPT affected by server-side request forgery in metagpt/utils/common.py CVE-2026-6111, GHSA-r5v8-c28h-f8r8, PYSEC-2026-2642 | Low | 0.3% | 12 Apr, 2026 | PyPI metagpt |
MetaGPT has an eval injection in metagpt/strategy/tot.py CVE-2026-6110, GHSA-xr7v-m9px-q4qj, PYSEC-2026-2645 | Medium | 0.4% | 12 Apr, 2026 | PyPI metagpt |
A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the `content` field when deserializing user-provided data. This al CVE-2026-1116, PYSEC-2026-2200 | Medium | 0.3% | 12 Apr, 2026 | PyPI lollms |
MetaGPT has an eval injection via a cross-site request forgery attack CVE-2026-6109, GHSA-w287-wwhf-95vv, PYSEC-2026-2643 | Low | 0.2% | 12 Apr, 2026 | PyPI metagpt |
Malicious release: Malicious code in robase-fallback (PyPI) MAL-2026-2562 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-fallback |
Malicious release: Malicious code in robase-installer (PyPI) MAL-2026-2563 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-installer |
Malicious release: Malicious code in robase-help (PyPI) MAL-2026-2561 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-help |
Malicious release: Malicious code in databasesupalake (PyPI) MAL-2026-2559 | Malicious | Not scored | 11 Apr, 2026 | PyPI databasesupalake |
Malicious release: Malicious code in api-analysis (PyPI) MAL-2026-2556 | Malicious | Not scored | 11 Apr, 2026 | PyPI api-analysis |
Malicious release: Malicious code in robase-utils (PyPI) MAL-2026-2558 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-utils |
Malicious release: Malicious code in databasesupasafe (PyPI) MAL-2026-2557 | Malicious | Not scored | 11 Apr, 2026 | PyPI databasesupasafe |
Malicious release: Malicious code in api-feature (PyPI) MAL-2026-2555 | Malicious | Not scored | 11 Apr, 2026 | PyPI api-feature |
Malicious release: Malicious code in ixosmonitoring (PyPI) MAL-2026-2547 | Malicious | Not scored | 11 Apr, 2026 | PyPI ixosmonitoring |
Malicious release: Malicious code in ks-hex2pcap (PyPI) MAL-2026-2548 | Malicious | Not scored | 11 Apr, 2026 | PyPI ks-hex2pcap |
Malicious release: Malicious code in python-aickerso (PyPI) MAL-2026-2549 | Malicious | Not scored | 11 Apr, 2026 | PyPI python-aickerso |
Malicious release: Malicious code in hex2pcap (PyPI) MAL-2026-2546 | Malicious | Not scored | 11 Apr, 2026 | PyPI hex2pcap |
aws-mcp has a Command Injection Remote Code Execution Vulnerability CVE-2026-5059, GHSA-fgmx-xfp3-w28p, PYSEC-2026-288 | Critical | 1.9% | 11 Apr, 2026 | PyPI aws-mcp |
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration GHSA-55v6-g8pm-pw4c | Medium | Not scored | 10 Apr, 2026 | PyPI rembg |
Malicious release: Malicious code in roboat-utilities (PyPI) MAL-2026-2544 | Malicious | Not scored | 10 Apr, 2026 | PyPI roboat-utilities |
Malicious release: Malicious code in robase (PyPI) MAL-2026-2543 | Malicious | Not scored | 10 Apr, 2026 | PyPI robase |
Malicious release: Malicious code in databasetrace (PyPI) MAL-2026-2542 | Malicious | Not scored | 10 Apr, 2026 | PyPI databasetrace |
gramps-webapi: Zip Slip Path Traversal in Media Archive Import CVE-2026-40258, GHSA-m5gr-86j6-99jp, PYSEC-2026-346 | Critical | 0.4% | 10 Apr, 2026 | PyPI gramps-webapi |
pypdf: Manipulated XMP metadata entity declarations can exhaust RAM CVE-2026-40260, GHSA-3crg-w4f6-42mx, PYSEC-2026-3006 | Medium | 0.4% | 10 Apr, 2026 | PyPI pypdf |
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint CVE-2026-39922, GHSA-hw9r-6m78-w6h3, PYSEC-2026-61 | Medium | 0.2% | 10 Apr, 2026 | PyPI geonode |
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the doc_url parameter during document upload. Attac CVE-2026-39921, PYSEC-2026-2159 | Medium | 0.2% | 10 Apr, 2026 | PyPI geonode |
ajenti.plugin.core has race conditions in 2FA CVE-2026-40178, GHSA-8647-755q-fw9p, PYSEC-2026-2340 | Medium | 0.2% | 10 Apr, 2026 | PyPI ajenti-plugin-core PyPI ajenti.plugin.core |
xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern GHSA-vj8v-p5vw-m6v5 | Medium | Not scored | 10 Apr, 2026 | PyPI xrootd |
ajenti.plugin.core has password bypass when 2FA is activated CVE-2026-40177, GHSA-3mcx-6wxm-qr8v, PYSEC-2026-266 | Critical | 0.3% | 10 Apr, 2026 | PyPI ajenti-plugin-core PyPI ajenti.plugin.core |
uv vulnerable to arbitrary file deletion through RECORD entries CVE-2026-114110, GHSA-pjjw-68hj-v9mw | High | 0.3% | 10 Apr, 2026 | PyPI uv |
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions CVE-2026-40289, GHSA-8x8f-54wf-vv92, PYSEC-2026-467, PYSEC-2026-485 | Critical | 0.4% | 10 Apr, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI has critical RCE via `type: job` workflow YAML CVE-2026-40288, GHSA-vc46-vw85-3wvm, PYSEC-2026-477, PYSEC-2026-488 | Critical | 0.6% | 10 Apr, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |