Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Improper authorisation of members discloses room membership to non-members CVE-2021-39164, GHSA-3x4c-pq33-4w3q, PYSEC-2021-425 | Low | 1.5% | 31 Aug, 2021 | PyPI matrix-synapse |
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. CVE-2021-39163, GHSA-jj53-8fmw-f2w2, PYSEC-2021-424 | Low | 0.9% | 31 Aug, 2021 | PyPI matrix-synapse |
CSRF Vuln can expose user's QRcode GHSA-fxq4-r6mr-9x64 | Low | Not scored | 08 Apr, 2021 | PyPI Flask-Security-Too PyPI flask-security-too |
Potential sensitive information disclosed in error reports CVE-2021-21416, GHSA-58c7-px5v-82hh, PYSEC-2021-11 | Low | 0.4% | 01 Apr, 2021 | PyPI django-registration |
Key Caching behavior in the DynamoDB Encryption Client. GHSA-4ph2-8337-hm62 | Low | Not scored | 08 Feb, 2021 | PyPI dynamodb-encryption-sdk |
UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend GHSA-47qg-q58v-7vrp | Low | Not scored | 02 Dec, 2020 | PyPI amundsen-frontend |
datasette-graphql leaks details of the schema of private database files GHSA-74hv-qjjq-h7g5 | Low | Not scored | 24 Nov, 2020 | PyPI datasette-graphql |
CLI does not correctly implement strict mode GHSA-2xwp-m7mq-7q3r | Low | Not scored | 28 Oct, 2020 | PyPI aws-encryption-sdk-cli |
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request CVE-2020-15239, GHSA-hwv5-w8gm-fq9f, PYSEC-2020-158 | Low | 1.9% | 06 Oct, 2020 | PyPI xmpp-http-upload |
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration GHSA-f366-4rvv-95x2 | Low | Not scored | 02 Oct, 2020 | PyPI cryptoauthlib |
personnummer/python vulnerable to Improper Input Validation GHSA-rxq3-5249-8hgg | Low | Not scored | 09 Sep, 2020 | PyPI personnummer |
freewvs's nested directory structure can interrupt scan CVE-2020-15101, GHSA-7pmh-vrww-25xx, PYSEC-2020-233 | Low | 0.7% | 14 Jul, 2020 | PyPI freewvs |
freewvs vulnerable to denial of service through large files CVE-2020-15100, GHSA-9cfv-9463-8gqv, PYSEC-2020-232 | Low | 0.3% | 14 Jul, 2020 | PyPI freewvs |
Incorrect Provision of Specified Functionality in qutebrowser CVE-2020-11054, GHSA-4rcq-jv2f-898j, PYSEC-2020-97 | Low | 1.5% | 07 May, 2020 | PyPI qutebrowser |
Argument Injection in Ansible CVE-2020-1738, GHSA-f85h-23mf-2fwh, PYSEC-2020-10 | Low | 0.4% | 16 Mar, 2020 | PyPI ansible |
Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1739, GHSA-923p-fr2c-g5m2, PYSEC-2020-11 | Low | 0.4% | 12 Mar, 2020 | PyPI ansible |
OpenStack Nova can leak consoleauth token into log files CVE-2015-9543, GHSA-22jm-4hxw-35jf, PYSEC-2026-857 | Low | 0.4% | 19 Feb, 2020 | PyPI Nova PyPI nova |
MySQL Connectors Privilege Escalation CVE-2017-3590, GHSA-2cf3-g243-hhfx, PYSEC-2026-682 | Low | 0.4% | 24 Apr, 2017 | PyPI mysql-connector-python |
Salt uses weak permissions on the cache data CVE-2015-8034, GHSA-6prw-8xhm-h247, PYSEC-2017-32 | Low | 0.4% | 30 Jan, 2017 | PyPI salt |
Django User Enumeration Vulnerability CVE-2016-2513, GHSA-fp6p-5xvw-m74f, PYSEC-2016-16 | Low | 3.3% | 08 Apr, 2016 | PyPI django |
OpenStack Neutron Race condition vulnerability CVE-2015-5240, GHSA-hhpj-6pj7-wpx5, PYSEC-2026-853 | Low | 1.0% | 27 Oct, 2015 | PyPI neutron |
ceph-deploy allows local users to obtain sensitive information by reading the file CVE-2015-3010, GHSA-9w4f-3v37-6f75, PYSEC-2015-2 | Low | 0.4% | 16 Jun, 2015 | PyPI ceph-deploy |
ceph-deploy uses world-readable permissions on client.admin key CVE-2015-4053, GHSA-79jf-ccm8-43w7, PYSEC-2015-3 | Low | 0.4% | 08 Jun, 2015 | PyPI ceph-deploy |
OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2014-3474, GHSA-j57p-g33w-95c5, PYSEC-2026-644 | Low | 1.9% | 31 Oct, 2014 | PyPI horizon |
OpenStack Oslo utility sensitive information exposure via log files CVE-2014-7231, GHSA-v933-vx5p-j7w2, PYSEC-2026-892 | Low | 0.5% | 08 Oct, 2014 | PyPI oslo-utils PyPI oslo.utils |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface CVE-2014-3594, GHSA-8g68-2hcj-h8vg, PYSEC-2026-641 | Low | 2.1% | 22 Aug, 2014 | PyPI horizon |
OpenStack Heat template URL information leakage CVE-2014-3801, GHSA-86qj-4h55-fvpw, PYSEC-2026-889 | Low | 1.6% | 23 May, 2014 | PyPI openstack-heat |
OpenStack Nova host data leak to vm instance in rescue mode CVE-2014-0134, GHSA-w429-xc55-hc48, PYSEC-2014-112 | Low | 1.5% | 08 May, 2014 | PyPI nova |
Plone Denial of Service vulnerability via decompressing large zip archives CVE-2013-4199, GHSA-xfjq-9rxq-ph6m, PYSEC-2014-63 | Low | 1.1% | 11 Mar, 2014 | PyPI plone |
OpenStack Nova denial of service through compressed disk images CVE-2013-4463, GHSA-5644-2v3h-5w4x, PYSEC-2026-865 | Low | 0.4% | 06 Feb, 2014 | PyPI nova |
RPLY Predictable Tmpfile Names Allows Cache Spoofing CVE-2014-1604, GHSA-9gcf-pq99-rjw3, PYSEC-2014-117, PYSEC-2014-17 | Low | 0.4% | 28 Jan, 2014 | PyPI RPLY PyPI rply |
pyxdg Arbitrary File Overwrite via Race Condition CVE-2014-1624, GHSA-7372-q459-jxhr, PYSEC-2014-95 | Low | 0.3% | 28 Jan, 2014 | PyPI pyxdg |
OpenStack Nova live snapshots use an insecure local directory CVE-2013-7048, GHSA-grp5-h379-j75x, PYSEC-2026-873 | Low | 0.5% | 23 Jan, 2014 | PyPI nova |
Libcloud does not properly scrub data when destroying a DigitalOcean node CVE-2013-6480, GHSA-g892-9h8m-r69r, PYSEC-2014-97 | Low | 2.1% | 07 Jan, 2014 | PyPI apache-libcloud |
OpenStack Identity Keystone Privilege Escalation vulnerability CVE-2013-4477, GHSA-f889-wfwm-6p7m, PYSEC-2026-831 | Low | 0.4% | 02 Nov, 2013 | PyPI keystone |
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2013-4469, GHSA-2w87-5qcj-j6gx, PYSEC-2026-860 | Low | 0.4% | 02 Nov, 2013 | PyPI nova |
python-keystoneclient unsecure user password update CVE-2013-2013, GHSA-8q2m-pwxf-jc7g, PYSEC-2013-24 | Low | 0.4% | 01 Oct, 2013 | PyPI python-keystoneclient |
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors CVE-2013-4278, GHSA-43cm-73px-5v4m, PYSEC-2026-862 | Low | 1.5% | 16 Sep, 2013 | PyPI nova |
Ansible uses a socket with predictable filename in /tmp CVE-2013-4259, GHSA-fj24-ghp9-39v3, PYSEC-2013-1 | Low | 0.3% | 16 Sep, 2013 | PyPI Ansible PyPI ansible |
OpenStack Keystone Sensitive information disclosure via log files CVE-2013-2006, GHSA-rxrm-xvp4-jqvh, PYSEC-2013-40 | Low | 0.6% | 21 May, 2013 | PyPI keystone |
OpenStack Glance is vulnerable to Exposure of Sensitive Information CVE-2013-1840, GHSA-c8w9-83vg-r8vv, PYSEC-2013-46 | Low | 1.4% | 22 Mar, 2013 | PyPI glance |
OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-3371, GHSA-xxgm-qpj5-4886, PYSEC-2012-40 | Low | 1.9% | 17 Jul, 2012 | PyPI Nova PyPI nova |
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules CVE-2012-2101, GHSA-hq3f-9gf7-73r8, PYSEC-2012-36 | Low | 1.5% | 07 Jun, 2012 | PyPI nova |
GoLismero symlink attack CVE-2012-0054, GHSA-vwxc-3cfr-37jq, PYSEC-2012-31 | Low | 0.3% | 19 Mar, 2012 | PyPI golismero |
Loggerhead XSS via filename CVE-2011-0728, GHSA-qjmg-77xh-7mjw, PYSEC-2026-840 | Low | 1.8% | 29 Mar, 2011 | PyPI loggerhead |
Zope allows local users to read arbitrary files CVE-2006-3458, GHSA-jcjp-qqpq-pc54, PYSEC-2006-7 | Low | 0.4% | 07 Jul, 2006 | PyPI Zope2 PyPI zope2 |