Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cryptowallethash (PyPI) MAL-2026-846 | Malicious | Not scored | 10 Feb, 2026 | PyPI cryptowallethash |
Malicious release: Malicious code in requests-auth-toolkit (PyPI) MAL-2026-847 | Malicious | Not scored | 10 Feb, 2026 | PyPI requests-auth-toolkit |
Malicious release: Malicious code in gpu-discovery (PyPI) MAL-2024-12373 | Malicious | Not scored | 10 Feb, 2026 | PyPI gpu-discovery |
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages CVE-2026-26013, GHSA-2g6r-c272-w58r, PYSEC-2026-2562 | Low | 0.4% | 10 Feb, 2026 | PyPI langchain-core |
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007, GHSA-r6ph-v2qm-q3c2, PYSEC-2026-2141 | High | 0.4% | 10 Feb, 2026 | PyPI cryptography |
Malicious release: Malicious code in rzr-home (PyPI) MAL-2026-845 | Malicious | Not scored | 10 Feb, 2026 | PyPI rzr-home |
Malicious release: Malicious code in amplify-python-logging (PyPI) MAL-2026-842 | Malicious | Not scored | 10 Feb, 2026 | PyPI amplify-python-logging |
Malicious release: Malicious code in vllm-plugins (PyPI) MAL-2026-844 | Malicious | Not scored | 10 Feb, 2026 | PyPI vllm-plugins |
Malicious release: Malicious code in requests-core-plugin (PyPI) MAL-2026-843 | Malicious | Not scored | 10 Feb, 2026 | PyPI requests-core-plugin |
Malicious release: Malicious code in lyroxpy (PyPI) MAL-2026-841 | Malicious | Not scored | 10 Feb, 2026 | PyPI lyroxpy |
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE CVE-2026-21531, GHSA-436v-jg82-p533, PYSEC-2026-289 | Critical | 2.6% | 10 Feb, 2026 | PyPI azure-ai-language-conversations-authoring |
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service CVE-2026-25577, GHSA-x6cr-mq53-cc76, PYSEC-2026-2469 | High | 0.3% | 10 Feb, 2026 | PyPI emmett-core |
Malicious release: Malicious code in testppe-pkg (PyPI) MAL-2026-826 | Malicious | Not scored | 10 Feb, 2026 | PyPI testppe-pkg |
Malicious release: Malicious code in dev-pipline-test (PyPI) MAL-2026-824 | Malicious | Not scored | 10 Feb, 2026 | PyPI dev-pipline-test |
Malicious release: Malicious code in devtools-webhook-cicd-utils (PyPI) MAL-2026-825 | Malicious | Not scored | 10 Feb, 2026 | PyPI devtools-webhook-cicd-utils |
Malicious release: Malicious code in ntoutils (PyPI) MAL-2026-823 | Malicious | Not scored | 10 Feb, 2026 | PyPI ntoutils |
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection CVE-2026-25528, GHSA-v34v-rq6j-cj6p, PYSEC-2026-2584 | Medium | 0.3% | 09 Feb, 2026 | PyPI langsmith npm langsmith |
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) CVE-2026-25480, GHSA-vxqx-rh46-q2pg, PYSEC-2026-2197 | Medium | 0.5% | 09 Feb, 2026 | PyPI litestar |
Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns CVE-2026-25479, GHSA-93ph-p7v4-hwh4, PYSEC-2026-2196 | Medium | 0.4% | 09 Feb, 2026 | PyPI litestar |
Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed origins CVE-2026-25478, GHSA-2p2x-hpg8-cqp2, PYSEC-2026-2195 | High | 0.4% | 09 Feb, 2026 | PyPI litestar |
Malicious release: Malicious code in thecorrectjames (PyPI) MAL-2026-818 | Malicious | Not scored | 09 Feb, 2026 | PyPI thecorrectjames |
Malicious release: Malicious code in ctf-pipline-test (PyPI) MAL-2026-817 | Malicious | Not scored | 09 Feb, 2026 | PyPI ctf-pipline-test |
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users BIT-airflow-2026-24098, CVE-2026-24098, GHSA-5g2w-9f8g-g5q7, PYSEC-2026-12 | Medium | 0.8% | 09 Feb, 2026 | PyPI apache-airflow |
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access BIT-airflow-2026-22922, CVE-2026-22922, GHSA-pm44-x5x7-24c4, PYSEC-2026-11 | Medium | 0.4% | 09 Feb, 2026 | PyPI apache-airflow |
Malicious release: Malicious code in http-notifier-test (PyPI) MAL-2026-814 | Malicious | Not scored | 09 Feb, 2026 | PyPI http-notifier-test |
MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability CVE-2026-25905, GHSA-pfv4-wmph-5gc6, PYSEC-2026-2628 | Medium | 0.2% | 09 Feb, 2026 | PyPI mcp-run-python |
MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access CVE-2026-25904, GHSA-6fgp-m6q4-j3q5, PYSEC-2026-2627 | Medium | 0.2% | 09 Feb, 2026 | PyPI mcp-run-python |
Malicious release: Malicious code in skydeo (PyPI) MAL-2026-815 | Malicious | Not scored | 09 Feb, 2026 | PyPI skydeo |
Malicious release: Malicious code in teligram (PyPI) MAL-2026-813 | Malicious | Not scored | 08 Feb, 2026 | PyPI teligram |
Malicious release: Malicious code in hardixx-code (PyPI) MAL-2026-812 | Malicious | Not scored | 08 Feb, 2026 | PyPI hardixx-code |
Malicious release: Malicious code in grokwrapper (PyPI) MAL-2026-811 | Malicious | Not scored | 08 Feb, 2026 | PyPI grokwrapper |
Malicious release: Malicious code in ccxt-bullish (PyPI) MAL-2026-809 | Malicious | Not scored | 08 Feb, 2026 | PyPI ccxt-bullish |
Malicious release: Malicious code in thread-pipeline-test (PyPI) MAL-2026-810 | Malicious | Not scored | 08 Feb, 2026 | PyPI thread-pipeline-test |
Keylime Missing Authentication for Critical Function and Improper Authentication CVE-2026-1709, GHSA-4jqp-9qjv-57m2, PYSEC-2026-74 | Critical | 5.8% | 06 Feb, 2026 | PyPI keylime |
A single post-release of dydx-v4-client contained obfuscated multi-stage loader GHSA-4f84-67cv-qrv3 | Critical | Not scored | 06 Feb, 2026 | PyPI dydx-v4-client |
MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token CVE-2026-25650, GHSA-vf6j-c56p-cq58, PYSEC-2026-2629 | High | 0.5% | 06 Feb, 2026 | PyPI mcp-salesforce-connector |
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL CVE-2026-25640, GHSA-wjp5-868j-wqv7, PYSEC-2026-2979, PYSEC-2026-2983 | High | 0.4% | 06 Feb, 2026 | PyPI pydantic-ai PyPI pydantic-ai-slim |
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK CVE-2026-25592, GHSA-2ww3-72rp-wpp4, PYSEC-2026-531 | Critical | 2.6% | 06 Feb, 2026 | NuGet Microsoft.SemanticKernel.Core PyPI semantic-kernel |
Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling CVE-2026-25580, GHSA-2jrp-274c-jhv3, PYSEC-2026-2976, PYSEC-2026-2980 | High | 0.7% | 06 Feb, 2026 | PyPI pydantic-ai PyPI pydantic-ai-slim |
Malicious release: Malicious code in carcent (PyPI) MAL-2026-808 | Malicious | Not scored | 06 Feb, 2026 | PyPI carcent |
Malicious release: Malicious code in gridifies (PyPI) MAL-2025-193012 | Malicious | Not scored | 06 Feb, 2026 | PyPI gridifies |
Malicious release: Malicious code in moveworks-pipeline-test (PyPI) MAL-2026-803 | Malicious | Not scored | 06 Feb, 2026 | PyPI moveworks-pipeline-test |
Malicious release: Malicious code in p7zip-full (PyPI) MAL-2026-790 | Malicious | Not scored | 06 Feb, 2026 | PyPI p7zip-full |
Malicious release: Malicious code in adminbypasser (PyPI) MAL-2026-774 | Malicious | Not scored | 06 Feb, 2026 | PyPI adminbypasser |
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write CVE-2026-25732, GHSA-9ffm-fxg3-xrhh, PYSEC-2026-95 | High | 3.4% | 05 Feb, 2026 | PyPI nicegui |
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability CVE-2026-1707, GHSA-3p7x-94q9-jq9x, PYSEC-2026-2864 | High | 0.4% | 05 Feb, 2026 | PyPI pgadmin4 |
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content CVE-2026-25516, GHSA-v82v-c5x8-w282, PYSEC-2026-2231 | Medium | 0.3% | 05 Feb, 2026 | PyPI nicegui |
Malicious release: Malicious code in greeter-pro-test (PyPI) MAL-2026-766 | Malicious | Not scored | 05 Feb, 2026 | PyPI greeter-pro-test |
Malicious release: Malicious code in web3-meme-tool (PyPI) MAL-2026-763 | Malicious | Not scored | 05 Feb, 2026 | PyPI web3-meme-tool |
Malicious release: Malicious code in metadata-checker (PyPI) MAL-2026-762 | Malicious | Not scored | 05 Feb, 2026 | PyPI metadata-checker |