Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Home Assistant has stored XSS in history-graphs CVE-2026-33045, GHSA-46j8-vpx8-6p72, PYSEC-2026-2516 | High | 0.2% | 27 Mar, 2026 | PyPI homeassistant |
Home Assistant has stored XSS in Map-card through malicious device name CVE-2026-33044, GHSA-r584-6283-p7xc, PYSEC-2026-2517 | High | 0.2% | 27 Mar, 2026 | PyPI homeassistant |
cryptography has incomplete DNS name constraint enforcement on peer names CVE-2026-34073, GHSA-m959-cc7f-wv43, PYSEC-2026-35 | Low | 0.2% | 27 Mar, 2026 | PyPI cryptography |
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions CVE-2026-34070, GHSA-qh6h-p6c9-ff54, PYSEC-2026-2193 | High | 1.4% | 27 Mar, 2026 | PyPI langchain-core |
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check CVE-2026-34046, GHSA-8c4j-f57c-35cf, PYSEC-2026-2567, PYSEC-2026-2570 | High | 0.5% | 27 Mar, 2026 | PyPI langflow PyPI langflow-base |
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters CVE-2026-33981, GHSA-58r7-4wr5-hfx8, PYSEC-2026-2130 | High | 0.5% | 27 Mar, 2026 | PyPI changedetection-io PyPI changedetection.io |
Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries CVE-2026-33980, GHSA-vphc-468g-8rfp, PYSEC-2026-2327 | High | 0.4% | 27 Mar, 2026 | PyPI adx-mcp-server |
pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration CVE-2026-33992, GHSA-m74m-f7cr-432x, PYSEC-2026-497 | Critical | 0.4% | 27 Mar, 2026 | PyPI pyload-ng |
Hugging Face Smolagents has an Injection issue CVE-2026-4963, GHSA-54fq-v6x8-244g, PYSEC-2026-3066 | Low | 0.6% | 27 Mar, 2026 | PyPI smolagents |
MLFlow allows Tracing + Assessments Access CVE-2025-15381, GHSA-g6pg-52vf-843h, PYSEC-2026-2657 | High | 0.3% | 27 Mar, 2026 | PyPI mlflow |
Malicious release: Malicious code in copytrading (PyPI) MAL-2026-2270 | Malicious | Not scored | 27 Mar, 2026 | PyPI copytrading |
Malicious release: Malicious code in trustwallet (PyPI) MAL-2026-2273 | Malicious | Not scored | 27 Mar, 2026 | PyPI trustwallet |
Malicious release: Malicious code in metamask-api (PyPI) MAL-2026-2271 | Malicious | Not scored | 27 Mar, 2026 | PyPI metamask-api |
Malicious release: Malicious code in claude-lite (PyPI) MAL-2026-2269 | Malicious | Not scored | 27 Mar, 2026 | PyPI claude-lite |
Malicious release: Malicious code in solana-api (PyPI) MAL-2026-2272 | Malicious | Not scored | 27 Mar, 2026 | PyPI solana-api |
Malicious release: Malicious code in gemini-ai-api (PyPI) MAL-2026-2268 | Malicious | Not scored | 27 Mar, 2026 | PyPI gemini-ai-api |
python-ecdsa: Denial of Service via improper DER length validation in crafted private keys CVE-2026-33936, GHSA-9f5j-8jwj-x28g, PYSEC-2026-2467 | Medium | 0.5% | 27 Mar, 2026 | PyPI ecdsa |
Two telnyx versions published containing credential harvesting malware PYSEC-2026-3 | Not scored | 27 Mar, 2026 | PyPI telnyx | |
Malicious release: Malicious code in thisismytest123 (PyPI) MAL-2026-2255 | Malicious | Not scored | 27 Mar, 2026 | PyPI thisismytest123 |
Malicious release: Malicious code in telnyx (PyPI) MAL-2026-2254 | Malicious | Not scored | 27 Mar, 2026 | PyPI telnyx |
Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories CVE-2026-29071, GHSA-w9f8-gxf9-rhvw, PYSEC-2026-2765 | Medium | 0.3% | 27 Mar, 2026 | PyPI open-webui |
Open WebUI has unauthorized deletion of knowledge files CVE-2026-29070, GHSA-26gm-93rw-cchf, PYSEC-2026-2693 | High | 0.3% | 27 Mar, 2026 | PyPI open-webui |
Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite CVE-2026-28788, GHSA-jjp7-g2jw-wh3j, PYSEC-2026-2742 | High | 3.0% | 27 Mar, 2026 | PyPI open-webui |
Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions` CVE-2026-28786, GHSA-vvxm-vxmr-624h, PYSEC-2026-2764 | Medium | 0.6% | 27 Mar, 2026 | PyPI open-webui |
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out CVE-2026-27893, GHSA-7972-pg2x-xr59, PYSEC-2026-2297 | High | 1.4% | 27 Mar, 2026 | PyPI vllm |
C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922) GHSA-wcjx-v2wj-xg87 | High | Not scored | 26 Mar, 2026 | PyPI c2cciutils |
Malicious release: Malicious code in requests-testik111 (PyPI) MAL-2026-2245 | Malicious | Not scored | 26 Mar, 2026 | PyPI requests-testik111 |
Malicious release: Malicious code in fluxhttp (PyPI) MAL-2026-2244 | Malicious | Not scored | 26 Mar, 2026 | PyPI fluxhttp |
Malicious release: Malicious code in somepentest-test-package (PyPI) MAL-2026-2242 | Malicious | Not scored | 26 Mar, 2026 | PyPI somepentest-test-package |
Langflow has Authenticated Code Execution in Agentic Assistant Validation CVE-2026-33873, GHSA-v8hw-mh8c-jxfc, PYSEC-2026-82 | Critical | 1.5% | 26 Mar, 2026 | PyPI langflow |
Malicious release: Malicious code in chaostoolkit-turbulence (PyPI) MAL-2026-2239 | Malicious | Not scored | 26 Mar, 2026 | PyPI chaostoolkit-turbulence |
Malicious release: Malicious code in magtape (PyPI) MAL-2026-2240 | Malicious | Not scored | 26 Mar, 2026 | PyPI magtape |
Malicious release: Malicious code in pacbot (PyPI) MAL-2026-2241 | Malicious | Not scored | 26 Mar, 2026 | PyPI pacbot |
Malicious release: Malicious code in lightmock (PyPI) MAL-2026-2233 | Malicious | Not scored | 26 Mar, 2026 | PyPI lightmock |
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml CVE-2026-33744, GHSA-jfjg-vc52-wqvf, PYSEC-2026-157 | High | 0.3% | 26 Mar, 2026 | PyPI bentoml |
OpenHands is Vulnerable to Command Injection through its Git Diff Handler CVE-2026-33718, GHSA-7h8w-hj9j-8rjw, PYSEC-2026-106 | Critical | 2.0% | 25 Mar, 2026 | PyPI openhands-ai |
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure) CVE-2026-33682, GHSA-7p48-42j8-8846, PYSEC-2026-2285 | Medium | 0.3% | 25 Mar, 2026 | PyPI Streamlit PyPI streamlit |
pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream CVE-2026-33699, GHSA-87mj-5ggw-8qc3, PYSEC-2026-3012 | Medium | 0.5% | 25 Mar, 2026 | PyPI pypdf |
Signify allows a remote attacker to escalate privileges via the signed_data.py and the context.py components CVE-2025-70887, GHSA-p4hh-mq57-gq8x, PYSEC-2026-2278 | High | 0.3% | 25 Mar, 2026 | PyPI signify |
Modoboa has OS Command Injection CVE-2026-27602, GHSA-wwv8-cqpr-vx3m, PYSEC-2026-2223 | High | 0.6% | 25 Mar, 2026 | PyPI modoboa |
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function CVE-2026-25645, GHSA-gc5v-m9x4-r6x2, PYSEC-2026-2275 | Medium | 0.2% | 25 Mar, 2026 | PyPI requests |
Two LiteLLM versions published containing credential harvesting malware GHSA-5mg7-485q-xm76 | Critical | Not scored | 25 Mar, 2026 | PyPI litellm |
Malicious release: Malicious code in vision-service-python-client-internal (PyPI) MAL-2026-2187 | Malicious | Not scored | 25 Mar, 2026 | PyPI vision-service-python-client-internal |
Malicious release: Malicious code in vision-service-python-client (PyPI) MAL-2026-2186 | Malicious | Not scored | 25 Mar, 2026 | PyPI vision-service-python-client |
Malicious release: Malicious code in hy-api-utilities (PyPI) MAL-2026-2185 | Malicious | Not scored | 25 Mar, 2026 | PyPI hy-api-utilities |
Malicious release: Malicious code in auth0-ai-ms-agent (PyPI) MAL-2026-2184 | Malicious | Not scored | 25 Mar, 2026 | PyPI auth0-ai-ms-agent |
Malicious release: Malicious code in linting (PyPI) MAL-2026-2177 | Malicious | Not scored | 25 Mar, 2026 | PyPI linting |
Malicious release: Malicious code in yeshsurya (PyPI) MAL-2026-2183 | Malicious | Not scored | 25 Mar, 2026 | PyPI yeshsurya |
Malicious release: Malicious code in facebookresearch (PyPI) MAL-2026-2175 | Malicious | Not scored | 25 Mar, 2026 | PyPI facebookresearch |
Malicious release: Malicious code in fairness-bias (PyPI) MAL-2026-2170 | Malicious | Not scored | 25 Mar, 2026 | PyPI fairness-bias |