Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in st-payment (PyPI) MAL-2026-2522 | Malicious | Not scored | 09 Apr, 2026 | PyPI st-payment |
Malicious release: Malicious code in gc-grocery-api (PyPI) MAL-2026-2521 | Malicious | Not scored | 09 Apr, 2026 | PyPI gc-grocery-api |
Apache Airflow: JWT token still valid after logout BIT-airflow-2025-57735, CVE-2025-57735, GHSA-c92r-g8j5-vhcx, PYSEC-2026-269 | Critical | 0.7% | 09 Apr, 2026 | PyPI apache-airflow |
Apache Airflow has an authorization bypass in DagRun wait endpoint BIT-airflow-2026-34538, CVE-2026-34538, GHSA-r7vr-m4jw-r794, PYSEC-2026-21 | Medium | 0.7% | 09 Apr, 2026 | PyPI apache-airflow |
Malicious release: Malicious code in just4testlm (PyPI) MAL-2026-2519 | Malicious | Not scored | 09 Apr, 2026 | PyPI just4testlm |
PraisonAI Vulnerable to OS Command Injection CVE-2026-40088, GHSA-2763-cj5r-c79m, PYSEC-2026-461 | Critical | 0.4% | 08 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
LangChain has incomplete f-string validation in prompt templates CVE-2026-40087, GHSA-926x-3r5x-gfhw, PYSEC-2026-2563 | Medium | 0.3% | 08 Apr, 2026 | PyPI langchain-core |
Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass CVE-2026-39987, GHSA-2679-6mx9-h9xc, PYSEC-2026-407 | CriticalExploited | 99.6% | 08 Apr, 2026 | PyPI marimo |
Malicious release: Malicious code in kraken-trader (PyPI) MAL-2026-2517 | Malicious | Not scored | 08 Apr, 2026 | PyPI kraken-trader |
AGiXT Vulnerable to Path Traversal in safe_join() CVE-2026-39981, GHSA-5gfj-64gh-mgmw, PYSEC-2026-2093 | High | 1.3% | 08 Apr, 2026 | PyPI agixt |
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs CVE-2026-39892, GHSA-p423-j2cm-9vmq, PYSEC-2026-36 | Medium | 0.7% | 08 Apr, 2026 | PyPI cryptography |
PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling CVE-2026-56078, GHSA-766v-q9x3-g744, PYSEC-2026-2943 | High | 0.9% | 08 Apr, 2026 | PyPI praisonaiagents |
PraisonAI has Template Injection in Agent Tool Definitions CVE-2026-39891, GHSA-hwg5-x759-7wjg, PYSEC-2026-2917 | High | 0.6% | 08 Apr, 2026 | PyPI praisonai |
PraisonAI Has Unauthenticated SSE Event Stream that Exposes All Agent Activity in A2U Server CVE-2026-39889, GHSA-f292-66h9-fpmf, PYSEC-2026-2911 | High | 0.4% | 08 Apr, 2026 | PyPI praisonai |
PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode) CVE-2026-39888, GHSA-qf73-2hrx-xprp, PYSEC-2026-486 | Critical | 0.5% | 08 Apr, 2026 | PyPI praisonaiagents |
PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading CVE-2026-39890, GHSA-32vr-5gcf-3pw2, PYSEC-2026-462 | Critical | 0.6% | 08 Apr, 2026 | PyPI praisonai |
Malicious release: Malicious code in sentinel-tool (PyPI) MAL-2026-2516 | Malicious | Not scored | 08 Apr, 2026 | PyPI sentinel-tool |
stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution CVE-2026-31040, GHSA-jpcj-7wfg-mqxv, PYSEC-2026-3076 | Critical | 0.6% | 08 Apr, 2026 | PyPI stata-mcp |
NiceGUI: Upload filename sanitization bypass via backslashes allows path traversal on Windows CVE-2026-39844, GHSA-w8wv-vfpc-hw2w, PYSEC-2026-2234 | High | 0.4% | 08 Apr, 2026 | PyPI nicegui |
rfc3161-client Has Improper Certificate Validation CVE-2026-33753, GHSA-3xxc-pwj6-jgrj, PYSEC-2026-3051 | High | 0.2% | 08 Apr, 2026 | PyPI rfc3161-client |
pretix: API leaks check-in data between events of the same organizer CVE-2026-5600, GHSA-wr8q-c73g-m7gp, PYSEC-2026-111 | Medium | 0.3% | 08 Apr, 2026 | PyPI pretix |
Malicious release: Malicious code in granulate-utils (PyPI) MAL-2026-2515 | Malicious | Not scored | 08 Apr, 2026 | PyPI granulate-utils |
Malicious release: Malicious code in gprofiler-logging (PyPI) MAL-2026-2514 | Malicious | Not scored | 08 Apr, 2026 | PyPI gprofiler-logging |
Malicious release: Malicious code in roboat-utils (PyPI) MAL-2026-2512 | Malicious | Not scored | 08 Apr, 2026 | PyPI roboat-utils |
parisneo/lollms has an insufficient session expiration vulnerability CVE-2026-1163, GHSA-8jg2-726g-xh43, PYSEC-2026-2612 | Medium | 0.2% | 08 Apr, 2026 | PyPI lollms |
pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions CVE-2026-40071, GHSA-rfgh-63mg-8pwm, PYSEC-2026-2997 | Medium | 0.2% | 08 Apr, 2026 | PyPI pyload-ng |
lightrag-hku: JWT Algorithm Confusion Vulnerability CVE-2026-39413, GHSA-8ffj-4hx4-9pgf, PYSEC-2026-2592 | Medium | 0.2% | 08 Apr, 2026 | PyPI lightrag-hku |
justhtml: Mutation XSS with custom foreign-namespace sanitization policies CVE-2026-5751, GHSA-r758-8hxw-4845 | Medium | 0.3% | 08 Apr, 2026 | PyPI justhtml |
LiteLLM: Password hash exposure and pass-the-hash authentication bypass GHSA-69x8-hrgq-fjj8 | High | Not scored | 08 Apr, 2026 | PyPI litellm |
Emmett has a path traversal in internal assets handler CVE-2026-39847, GHSA-pr46-2v3c-5356, PYSEC-2026-59 | High | 0.5% | 07 Apr, 2026 | PyPI emmett |
MONAI: Unsafe functions lead to pickle deserialization rce CVE-2026-100846, GHSA-89gg-p5r5-q6r4, PYSEC-2026-4021 | High | 0.4% | 07 Apr, 2026 | PyPI monai |
FastFeedParser has an infinite redirect loop DoS via meta-refresh chain CVE-2026-39376, GHSA-4gx2-pc4f-wq37, PYSEC-2026-60 | High | 0.3% | 07 Apr, 2026 | PyPI fastfeedparser |
JWCrypto: JWE ZIP decompression bomb CVE-2026-39373, GHSA-fjrm-76x2-c4q4, PYSEC-2026-70 | Medium | 0.3% | 07 Apr, 2026 | PyPI jwcrypto |
OpenViking contains a missing authorization vulnerability in the task polling endpoints CVE-2026-22680, GHSA-h336-2wxm-pr6q, PYSEC-2026-2855 | Medium | 0.4% | 07 Apr, 2026 | PyPI OpenViking PyPI openviking |
pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass CVE-2026-35592, GHSA-mvwx-582f-56r7, PYSEC-2026-124 | Medium | 0.3% | 07 Apr, 2026 | PyPI pyload-ng |
pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng CVE-2026-35586, GHSA-ppvx-rwh9-7rj7, PYSEC-2026-123 | Medium | 0.1% | 07 Apr, 2026 | PyPI pyload-ng |
Django vulnerable to privilege abuse in ModelAdmin.list_editable BIT-django-2026-4292, CVE-2026-4292, GHSA-mmwr-2jhp-mc7j, PYSEC-2026-53 | Low | 0.3% | 07 Apr, 2026 | PyPI Django PyPI django |
Django vulnerable to privilege abuse in GenericInlineModelAdmin BIT-django-2026-4277, CVE-2026-4277, GHSA-pwjp-ccjc-ghwg, PYSEC-2026-52 | Critical | 0.5% | 07 Apr, 2026 | PyPI Django PyPI django |
Django vulnerable to ASGI header spoofing via underscore/hyphen conflation BIT-django-2026-3902, CVE-2026-3902, GHSA-mvfq-ggxm-9mc5, PYSEC-2026-51 | High | 0.4% | 07 Apr, 2026 | PyPI Django PyPI django |
Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit BIT-django-2026-33034, CVE-2026-33034, GHSA-933h-hp56-hf7m, PYSEC-2026-49 | High | 0.8% | 07 Apr, 2026 | PyPI Django PyPI django |
Django has potential DoS via MultiPartParser through crafted multipart uploads BIT-django-2026-33033, CVE-2026-33033, GHSA-5mf9-h53q-7mhq, PYSEC-2026-48 | Medium | 0.9% | 07 Apr, 2026 | PyPI Django PyPI django |
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint BIT-mlflow-2026-33866, CVE-2026-33866, GHSA-46r5-x6jq-v8g6, PYSEC-2026-94 | Medium | 0.4% | 07 Apr, 2026 | PyPI mlflow |
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface BIT-mlflow-2026-33865, CVE-2026-33865, GHSA-fh64-r2vc-xvhr, PYSEC-2026-93 | Medium | 0.2% | 07 Apr, 2026 | PyPI mlflow |
Malicious release: Malicious code in genesis-1p-tools-rpm-bundle (PyPI) MAL-2026-2503 | Malicious | Not scored | 07 Apr, 2026 | PyPI genesis-1p-tools-rpm-bundle |
LoLLMs is vulnerable to Improper Access Control through weak secret key CVE-2026-1114, GHSA-9296-v3fr-j92j, PYSEC-2026-170 | Critical | 0.5% | 07 Apr, 2026 | PyPI lollms |
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class CVE-2026-1839, GHSA-69w3-r845-3855, PYSEC-2026-2288 | High | 0.4% | 07 Apr, 2026 | PyPI transformers |
Malicious release: Malicious code in databasenaps (PyPI) MAL-2026-2502 | Malicious | Not scored | 07 Apr, 2026 | PyPI databasenaps |
Malicious release: Malicious code in databaselooks (PyPI) MAL-2026-2501 | Malicious | Not scored | 07 Apr, 2026 | PyPI databaselooks |
PraisonAI Has Path Traversal in FileTools CVE-2026-35615, GHSA-693f-pf34-72c5, PYSEC-2026-464 | Critical | 0.4% | 06 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI recipe registry publish path traversal allows out-of-root file write CVE-2026-39308, GHSA-r9x3-wx45-2v7f, PYSEC-2026-2922 | High | 0.3% | 06 Apr, 2026 | PyPI PraisonAI PyPI praisonai |