Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
PraisonAI recipe registry pull path traversal writes files outside the chosen output directory CVE-2026-39306, GHSA-4rx4-4r3x-6534, PYSEC-2026-2900 | High | 0.3% | 06 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator CVE-2026-39305, GHSA-jfxc-v5g9-38xr, PYSEC-2026-475 | Critical | 0.3% | 06 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction CVE-2026-39307, GHSA-4ph2-f6pf-79wv, PYSEC-2026-2899 | High | 0.3% | 06 Apr, 2026 | PyPI PraisonAI PyPI praisonai |
strawberry-graphql: Denial of Service via unbounded WebSocket subscriptions CVE-2026-35526, GHSA-hv3w-m4g2-5x77, PYSEC-2026-134 | High | 0.3% | 06 Apr, 2026 | PyPI strawberry-graphql |
strawberry-graphql: Authentication bypass via legacy graphql-ws WebSocket subprotocol CVE-2026-35523, GHSA-vpwc-v33q-mq89, PYSEC-2026-133 | High | 0.4% | 06 Apr, 2026 | PyPI strawberry-graphql |
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering CVE-2026-35490, GHSA-jmrh-xmgh-x9j4, PYSEC-2026-28 | Critical | 0.5% | 06 Apr, 2026 | PyPI changedetection-io PyPI changedetection.io |
kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write CVE-2026-111170, CVE-2026-35492, GHSA-cjg8-h5qc-hrjv, PYSEC-2026-2545 | Medium | 0.4% | 06 Apr, 2026 | PyPI kedro-datasets |
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write CVE-2026-34589, GHSA-p8xc-w3q4-h64x, PYSEC-2026-2848 | High | 0.4% | 06 Apr, 2026 | PyPI OpenEXR PyPI openexr |
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write CVE-2026-34588, GHSA-588r-cr5c-w6hf, PYSEC-2026-2845 | High | 0.5% | 06 Apr, 2026 | PyPI OpenEXR PyPI openexr |
Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr CVE-2026-34444, GHSA-69v7-xpr6-6gjm, PYSEC-2026-2613 | High | 0.6% | 06 Apr, 2026 | PyPI lupa |
Malicious release: Malicious code in databasetapes (PyPI) MAL-2026-2494 | Malicious | Not scored | 05 Apr, 2026 | PyPI databasetapes |
PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py CVE-2026-5559, GHSA-23jg-5f8m-gw8c, PYSEC-2026-2975 | Low | 0.3% | 05 Apr, 2026 | PyPI pyblade |
Malicious release: Malicious code in databaserobooms (PyPI) MAL-2026-2489 | Malicious | Not scored | 04 Apr, 2026 | PyPI databaserobooms |
Malicious release: Malicious code in databaserotacos (PyPI) MAL-2026-2490 | Malicious | Not scored | 04 Apr, 2026 | PyPI databaserotacos |
Malicious release: Malicious code in photo-extractor (PyPI) MAL-2026-2488 | Malicious | Not scored | 04 Apr, 2026 | PyPI photo-extractor |
Malicious release: Malicious code in discord-request (PyPI) MAL-2026-2487 | Malicious | Not scored | 04 Apr, 2026 | PyPI discord-request |
Malicious release: Malicious code in gangomodule (PyPI) MAL-2026-2486 | Malicious | Not scored | 04 Apr, 2026 | PyPI gangomodule |
pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509) CVE-2026-35464, GHSA-4744-96p5-mp2j, PYSEC-2026-2989 | High | 0.5% | 04 Apr, 2026 | PyPI pyload-ng |
pyLoad: Improper Neutralization of Special Elements used in an OS Command CVE-2026-35463, GHSA-w48f-wwwf-f5fr, PYSEC-2026-2267 | High | 0.8% | 04 Apr, 2026 | PyPI pyload-ng |
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992) CVE-2026-35459, GHSA-7gvf-3w72-p2pg, PYSEC-2026-495 | Critical | 0.3% | 04 Apr, 2026 | PyPI pyload-ng |
web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling CVE-2026-111171, CVE-2026-40072, GHSA-5hr4-253g-cpx2, PYSEC-2026-3414 | Medium | 0.3% | 04 Apr, 2026 | PyPI web3 |
LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass CVE-2026-30762, GHSA-mcww-4hxq-hfr3, PYSEC-2026-2593 | High | Not scored | 04 Apr, 2026 | PyPI lightrag-hku |
pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter CVE-2026-35187, GHSA-2wvg-62qm-gj33, PYSEC-2026-2988 | High | 0.3% | 04 Apr, 2026 | PyPI pyload-ng |
BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation CVE-2026-35044, GHSA-v959-cwq9-7hr6, PYSEC-2026-159 | Critical | 0.4% | 03 Apr, 2026 | PyPI bentoml |
BentoML: Command Injection in cloud deployment setup script CVE-2026-35043, GHSA-fgv4-6jr3-jgfw, PYSEC-2026-158 | High | 0.3% | 03 Apr, 2026 | PyPI bentoml |
LiteLLM: Authentication bypass via OIDC userinfo cache key collision CVE-2026-35030, GHSA-jjhc-v7c2-5hh6, PYSEC-2026-390 | Critical | 0.6% | 03 Apr, 2026 | PyPI litellm |
LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint CVE-2026-35029, GHSA-53mr-6c8q-9789, PYSEC-2026-2597 | High | 38.6% | 03 Apr, 2026 | PyPI litellm |
Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service CVE-2026-34824, GHSA-3jr7-6hqp-x679, PYSEC-2026-2204 | High | 0.8% | 03 Apr, 2026 | PyPI mesop |
vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing CVE-2026-34755, GHSA-pq5c-rjhq-qp7p, PYSEC-2026-144 | Medium | 0.5% | 03 Apr, 2026 | PyPI vllm |
vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url ` CVE-2026-34753, GHSA-pf3h-qjgv-vcpr, PYSEC-2026-3410 | Medium | 0.2% | 03 Apr, 2026 | PyPI vllm |
LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) CVE-2026-34052, GHSA-8mxq-7xr7-2fxj, PYSEC-2026-2533 | Medium | 0.3% | 03 Apr, 2026 | PyPI jupyterhub-ltiauthenticator |
curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass) CVE-2026-33752, GHSA-qw2m-4pqf-rmpp, PYSEC-2026-2431 | High | 0.5% | 03 Apr, 2026 | PyPI curl-cffi PyPI curl_cffi |
JupyterHub has an Open Redirect Vulnerability BIT-jupyterhub-2026-33709, CVE-2026-33709, GHSA-3vff-hjqv-m7h8, PYSEC-2026-2188 | Medium | 0.2% | 03 Apr, 2026 | PyPI jupyterhub |
Auth0OAuthenticator has an Authentication Bypass via Unverified Email Claims CVE-2026-33175, GHSA-rrvg-cxh4-qhrv, PYSEC-2026-2238 | High | 0.4% | 03 Apr, 2026 | PyPI oauthenticator |
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization CVE-2026-0545, GHSA-7qhf-v65m-g5f3, PYSEC-2026-419 | Critical | 4.4% | 03 Apr, 2026 | PyPI mlflow |
vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server CVE-2026-34756, GHSA-3mwp-wvh9-7528, PYSEC-2026-2298 | Medium | 0.4% | 03 Apr, 2026 | PyPI vllm |
Malicious release: Malicious code in supervisors (PyPI) MAL-2026-2448 | Malicious | Not scored | 03 Apr, 2026 | PyPI supervisors |
pymetasploit3 vulnerable to command injection in console.run_module_with_output() CVE-2026-5463, GHSA-qpc3-8vqg-8g6w, PYSEC-2026-500 | Critical | 2.2% | 03 Apr, 2026 | PyPI pymetasploit3 |
Ajenti has an authorization bypass during custom package installation CVE-2026-35175, GHSA-73jv-44c3-j5p2, PYSEC-2026-2339 | High | 0.3% | 03 Apr, 2026 | PyPI ajenti-panel |
Kedro has Arbitrary Code Execution via Malicious Logging Configuration CVE-2026-35171, GHSA-9cqf-439c-j96r, PYSEC-2026-72 | Critical | 0.7% | 03 Apr, 2026 | PyPI kedro |
Kedro: Path Traversal in versioned dataset loading via unsanitized version string CVE-2026-35167, GHSA-6326-w46w-ppjw, PYSEC-2026-71 | High | 0.3% | 03 Apr, 2026 | PyPI kedro |
D-Tale: Remote Code Execution through redis/shelf storage CVE-2026-35052, GHSA-436g-fhfc-9g5w, PYSEC-2026-2460 | Medium | 0.6% | 03 Apr, 2026 | PyPI dtale |
Malicious release: Malicious code in pycolorlib3 (PyPI) MAL-2026-2433 | Malicious | Not scored | 02 Apr, 2026 | PyPI pycolorlib3 |
Malicious release: Malicious code in nwin64tls (PyPI) MAL-2026-2432 | Malicious | Not scored | 02 Apr, 2026 | PyPI nwin64tls |
Malicious release: Malicious code in nwin32tls (PyPI) MAL-2026-2431 | Malicious | Not scored | 02 Apr, 2026 | PyPI nwin32tls |
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models CVE-2026-34760, GHSA-6c4r-fmh3-7rh8, PYSEC-2026-2299 | High | 0.3% | 02 Apr, 2026 | PyPI vllm |
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall` CVE-2026-35002, GHSA-77rh-m34w-rv36, GHSA-m4w4-3r8h-jw98, PYSEC-2026-256 | Critical | 0.9% | 02 Apr, 2026 | PyPI agno |
Malicious release: Malicious code in k8s-node-health (PyPI) MAL-2026-2430 | Malicious | Not scored | 02 Apr, 2026 | PyPI k8s-node-health |
ONNX: TOCTOU arbitrary file read/write in save_external_dat CVE-2026-49114, GHSA-q56x-g2fj-4rj6, PYSEC-2026-3876 | High | 0.2% | 01 Apr, 2026 | PyPI onnx |
PraisonAI Has Authentication Bypass via OAuthManager.validate_token() CVE-2026-34953, GHSA-98f9-fqg5-hvq5, PYSEC-2026-468 | Critical | 0.4% | 01 Apr, 2026 | PyPI praisonai |