Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
aiohttp server lacks an initial request/header timeout CVE-2026-111064, GHSA-5wr8-gcqf-gqf3 | High | 0.4% | 10 days ago | PyPI aiohttp |
AIOHTTP: Secure attribute not enforced for shared cookie CVE-2026-111063, GHSA-494j-54xm-rwp3 | Medium | 0.2% | 10 days ago | PyPI aiohttp |
aiohttp: Multiple instances of excessive or unbounded memory/CPU use GHSA-2g87-pp6c-29x5 | High | Not scored | 10 days ago | PyPI aiohttp |
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML CVE-2026-111059, GHSA-2658-85cv-9wwq | Medium | 0.3% | 10 days ago | PyPI mercury |
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo GHSA-pcc4-rvhr-2pr8 | Medium | Not scored | 10 days ago | PyPI graphifyy |
Mercury: Unauthenticated Remote Code Execution via /api/kernels CVE-2026-111058, GHSA-rv4m-xm3f-3ccq | Critical | 0.5% | 10 days ago | PyPI mercury |
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass CVE-2026-111057, GHSA-f8c7-rwf9-fmgm | Critical | 0.7% | 10 days ago | PyPI mercury |
Malicious release: Malicious code in vinted-mocked-apis (PyPI) MAL-2026-17943 | Malicious | Not scored | 10 days ago | PyPI vinted-mocked-apis |
Malicious release: Malicious code in fabdeploycheck (PyPI) MAL-2026-17926 | Malicious | Not scored | 11 days ago | PyPI fabdeploycheck |
Malicious release: Malicious code in fabtoolkit (PyPI) MAL-2026-17927 | Malicious | Not scored | 11 days ago | PyPI fabtoolkit |
Malicious release: Malicious code in leakdeep (PyPI) MAL-2026-17921 | Malicious | Not scored | 12 days ago | PyPI leakdeep |
Malicious release: Malicious code in tonemaptts (PyPI) MAL-2026-17918 | Malicious | Not scored | 12 days ago | PyPI tonemaptts |
Malicious release: Malicious code in pyrechoasr (PyPI) MAL-2026-17916 | Malicious | Not scored | 12 days ago | PyPI pyrechoasr |
Malicious release: Malicious code in driftwavets (PyPI) MAL-2026-17912 | Malicious | Not scored | 12 days ago | PyPI driftwavets |
Malicious release: Malicious code in novalithtts (PyPI) MAL-2026-17915 | Malicious | Not scored | 12 days ago | PyPI novalithtts |
Malicious release: Malicious code in voltswannts (PyPI) MAL-2026-17920 | Malicious | Not scored | 12 days ago | PyPI voltswannts |
Malicious release: Malicious code in glassbeakasr (PyPI) MAL-2026-17914 | Malicious | Not scored | 12 days ago | PyPI glassbeakasr |
Malicious release: Malicious code in emberlytts (PyPI) MAL-2026-17913 | Malicious | Not scored | 12 days ago | PyPI emberlytts |
Malicious release: Malicious code in quasitonnts (PyPI) MAL-2026-17917 | Malicious | Not scored | 12 days ago | PyPI quasitonnts |
Malicious release: Malicious code in ukraine69 (PyPI) MAL-2026-17919 | Malicious | Not scored | 12 days ago | PyPI ukraine69 |
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files CVE-2026-108372, GHSA-vx2m-gpq4-8j5q | High | 0.3% | 13 days ago | PyPI loopx |
Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution CVE-2026-96620, GHSA-h4mw-j7qp-8mwm | Critical | 0.7% | 13 days ago | PyPI claude-agent-sdk |
ClickMigrate has Path Traversal in "revision -m" argument CVE-2026-68549, GHSA-vgf9-9mxx-hq54 | Low | Not scored | 13 days ago | PyPI ClickMigrate PyPI clickmigrate |
Malicious release: Malicious code in pyyi (PyPI) MAL-2026-17866 | Malicious | Not scored | 13 days ago | PyPI pyyi |
Malicious release: Malicious code in marocolor (PyPI) MAL-2026-17900 | Malicious | Not scored | 13 days ago | PyPI marocolor |
Malicious release: Malicious code in fromthehotel-poems (PyPI) MAL-2026-17897 | Malicious | Not scored | 14 days ago | PyPI fromthehotel-poems |
Malicious release: Malicious code in proxyrobika (PyPI) MAL-2026-17889 | Malicious | Not scored | 14 days ago | PyPI proxyrobika |
borg extract might modify out-of-tree files when extracting maliciously crafted archives CVE-2026-62268, GHSA-gfp8-w835-v44j | Medium | Not scored | 14 days ago | PyPI borgbackup |
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign) CVE-2026-62322, GHSA-526j-582w-7fm9 | Medium | 0.2% | 14 days ago | PyPI social-auth-core |
tinytag: Infinite loop when parsing certain M4A files containing invalid atoms CVE-2026-104266, GHSA-24cc-9352-h2pg | Medium | 0.3% | 14 days ago | PyPI tinytag |
Malicious release: Malicious code in proxy-rubikis (PyPI) MAL-2026-17887 | Malicious | Not scored | 14 days ago | PyPI proxy-rubikis |
Malicious release: Malicious code in py-wormgpt (PyPI) MAL-2026-17886 | Malicious | Not scored | 14 days ago | PyPI py-wormgpt |
Malicious release: Malicious code in proxyrubika (PyPI) MAL-2026-17885 | Malicious | Not scored | 14 days ago | PyPI proxyrubika |
Malicious release: Malicious code in getpubip (PyPI) MAL-2026-17884 | Malicious | Not scored | 14 days ago | PyPI getpubip |
Malicious release: Malicious code in py-worm (PyPI) MAL-2026-17883 | Malicious | Not scored | 14 days ago | PyPI py-worm |
Malicious release: Malicious code in py-sock2 (PyPI) MAL-2026-17881 | Malicious | Not scored | 14 days ago | PyPI py-sock2 |
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree CVE-2026-110860, GHSA-gq48-pqfc-9p58 | Medium | 0.2% | 15 days ago | PyPI GitPython PyPI gitpython |
GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679) CVE-2026-110859, GHSA-23mf-xhv8-69c2 | High | 0.4% | 15 days ago | PyPI GitPython PyPI gitpython |
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution CVE-2026-110858, GHSA-f9j4-qggq-h239 | Critical | 0.5% | 15 days ago | PyPI GitPython PyPI gitpython |
GitPython command wrappers omit unsafe protocol and option checks CVE-2026-110857, GHSA-w8jc-g24h-crhw | High | 0.4% | 15 days ago | PyPI GitPython PyPI gitpython |
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines CVE-2026-110856, GHSA-m64x-33q8-m5h7 | High | 0.3% | 15 days ago | PyPI GitPython PyPI gitpython |
GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name CVE-2026-110855, GHSA-fx3j-rwgx-fr94 | High | 0.3% | 15 days ago | PyPI GitPython PyPI gitpython |
Malicious release: Malicious code in saeka (PyPI) MAL-2026-17877 | Malicious | Not scored | 15 days ago | PyPI saeka |
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation CVE-2026-102682, GHSA-hqm2-cfx2-2vgh | Medium | 0.2% | 15 days ago | PyPI pipecat-ai |
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion CVE-2026-59951, GHSA-84m7-p3x7-pcfv | Medium | 0.5% | 15 days ago | PyPI mcp |
Malicious release: Malicious code in crelic-bqwheel-52f66a3f1d (PyPI) MAL-2026-17863 | Malicious | Not scored | 16 days ago | PyPI crelic-bqwheel-52f66a3f1d |
Malicious release: Malicious code in fontcase (PyPI) MAL-2026-17862 | Malicious | Not scored | 16 days ago | PyPI fontcase |
Malicious release: Malicious code in sysdiagd (PyPI) MAL-2026-17861 | Malicious | Not scored | 16 days ago | PyPI sysdiagd |
unstructured: Stored XSS via unescaped HTML generation CVE-2026-104250, GHSA-v5mq-3xhg-98m9 | Medium | 0.2% | 16 days ago | PyPI unstructured |
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked CVE-2026-102832, GHSA-jwrc-gm9j-263p | Medium | 0.1% | 16 days ago | PyPI jupyterlab PyPI jupyterlite-core PyPI notebook |