Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection CVE-2025-66469, GHSA-72qc-wxch-74mg, PYSEC-2026-1697 | Medium | 0.3% | 08 Dec, 2025 | PyPI nicegui |
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary dat CVE-2025-65548, PYSEC-2025-89 | Critical | 0.4% | 08 Dec, 2025 | PyPI cashu |
Malicious release: Malicious code in graphnode (PyPI) MAL-2025-192376 | Malicious | Not scored | 08 Dec, 2025 | PyPI graphnode |
Malicious release: Malicious code in hexdeci (PyPI) MAL-2025-192367 | Malicious | Not scored | 07 Dec, 2025 | PyPI hexdeci |
Malicious release: Malicious code in python-tg-bot (PyPI) MAL-2025-192365 | Malicious | Not scored | 07 Dec, 2025 | PyPI python-tg-bot |
Malicious release: Malicious code in blank-lib (PyPI) MAL-2025-192364 | Malicious | Not scored | 07 Dec, 2025 | PyPI blank-lib |
Malicious release: Malicious code in evil-rce2 (PyPI) MAL-2025-192362 | Malicious | Not scored | 06 Dec, 2025 | PyPI evil-rce2 |
Malicious release: Malicious code in telco (PyPI) MAL-2025-192363 | Malicious | Not scored | 06 Dec, 2025 | PyPI telco |
Malicious release: Malicious code in evil-rce (PyPI) MAL-2025-192351 | Malicious | Not scored | 06 Dec, 2025 | PyPI evil-rce |
Langflow CORS misconfiguration enables Account Takeover and RCE CVE-2025-34291, GHSA-577h-p2hh-v4mv, PYSEC-2025-78 | CriticalExploited | 92.8% | 05 Dec, 2025 | PyPI langflow |
Malicious release: Malicious code in qt-main (PyPI) MAL-2025-192349 | Malicious | Not scored | 05 Dec, 2025 | PyPI qt-main |
urllib3 streaming API improperly handles highly compressed data CVE-2025-66471, GHSA-2xpw-w6gg-jr37, PYSEC-2026-1994 | High | 0.7% | 05 Dec, 2025 | PyPI urllib3 |
Malicious release: Malicious code in rendom (PyPI) MAL-2025-192323 | Malicious | Not scored | 05 Dec, 2025 | PyPI rendom |
urllib3 allows an unbounded number of links in the decompression chain CVE-2025-66418, GHSA-gm62-xv2j-4w53, PYSEC-2026-1998 | High | 0.7% | 05 Dec, 2025 | PyPI urllib3 |
Malicious release: Malicious code in joyboyw (PyPI) MAL-2025-192322 | Malicious | Not scored | 05 Dec, 2025 | PyPI joyboyw |
Malicious release: Malicious code in dell-recovery (PyPI) MAL-2025-192305 | Malicious | Not scored | 04 Dec, 2025 | PyPI dell-recovery |
Malicious release: Malicious code in dell-restore-system (PyPI) MAL-2025-192306 | Malicious | Not scored | 04 Dec, 2025 | PyPI dell-restore-system |
Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web CVE-2025-65958, GHSA-c6xv-rcvw-v685, PYSEC-2026-1726 | High | 4.4% | 04 Dec, 2025 | PyPI open-webui |
open-webui is Vulnerable to Incorrect Access Control CVE-2025-63681, GHSA-frv8-gffc-37px, PYSEC-2026-1732 | Medium | 0.3% | 04 Dec, 2025 | PyPI open-webui |
ComposioHQ has a directory traversal vulnerability CVE-2025-56427, GHSA-3mwv-j45g-vp3w, PYSEC-2026-1262 | High | 0.9% | 04 Dec, 2025 | PyPI composio |
Malicious release: Malicious code in coremsft (PyPI) MAL-2025-192302 | Malicious | Not scored | 04 Dec, 2025 | PyPI coremsft |
Ansible Community General Collection is vulnerable to exposure of sensitive information CVE-2025-14010, GHSA-8ggh-xwr9-3373, PYSEC-2026-1119 | Medium | 0.2% | 04 Dec, 2025 | PyPI ansible |
Malicious release: Malicious code in hellospa (PyPI) MAL-2025-191972 | Malicious | Not scored | 03 Dec, 2025 | PyPI hellospa |
Malicious release: Malicious code in pulsecord (PyPI) MAL-2025-191830 | Malicious | Not scored | 02 Dec, 2025 | PyPI pulsecord |
Malicious release: Malicious code in gtkfuscator (PyPI) MAL-2025-191946 | Malicious | Not scored | 02 Dec, 2025 | PyPI gtkfuscator |
asyncmy is vulnerable to SQL injection via crafted dict keys CVE-2025-65896, GHSA-qhqw-rrw9-25rm, PYSEC-2026-286 | Critical | 0.4% | 02 Dec, 2025 | PyPI asyncmy |
arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints CVE-2025-66454, GHSA-g2jx-37x6-6438, PYSEC-2026-1192 | Medium | 0.3% | 02 Dec, 2025 | PyPI arcade-mcp-server |
Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default CVE-2025-66416, GHSA-9h52-p55h-vw2f, PYSEC-2026-1617 | High | 0.5% | 02 Dec, 2025 | PyPI mcp |
Django is vulnerable to DoS via XML serializer text extraction BIT-django-2025-64460, CVE-2025-64460, GHSA-vrcr-9hj9-jcg6, PYSEC-2025-109 | High | 2.1% | 02 Dec, 2025 | PyPI Django PyPI django |
Django is vulnerable to SQL injection in column aliases BIT-django-2025-13372, CVE-2025-13372, GHSA-rqw2-ghq9-44m7, PYSEC-2025-104 | Medium | 0.9% | 02 Dec, 2025 | PyPI Django PyPI django |
Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation CVE-2025-65858, GHSA-pc5g-j9j7-p4q3, PYSEC-2026-1234 | Low | 0.2% | 02 Dec, 2025 | PyPI calibreweb |
Malicious release: Malicious code in hooktest3 (PyPI) MAL-2025-191761 | Malicious | Not scored | 02 Dec, 2025 | PyPI hooktest3 |
vLLM vulnerable to remote code execution via transformers_utils/get_config CVE-2025-66448, GHSA-8fr4-5q9j-m8gm, PYSEC-2026-2015 | High | 0.7% | 01 Dec, 2025 | PyPI vllm |
Malicious release: Malicious code in python-doenv (PyPI) MAL-2025-191840 | Malicious | Not scored | 01 Dec, 2025 | PyPI python-doenv |
Malicious release: Malicious code in starexx (PyPI) MAL-2025-191662 | Malicious | Not scored | 01 Dec, 2025 | PyPI starexx |
Malicious release: Malicious code in rsa2026 (PyPI) MAL-2025-191660 | Malicious | Not scored | 01 Dec, 2025 | PyPI rsa2026 |
Malicious release: Malicious code in realstarexx (PyPI) MAL-2025-191656 | Malicious | Not scored | 01 Dec, 2025 | PyPI realstarexx |
Malicious release: Malicious code in imad213insta (PyPI) MAL-2025-191639 | Malicious | Not scored | 01 Dec, 2025 | PyPI imad213insta |
Malicious release: Malicious code in hexdeclink (PyPI) MAL-2025-191757 | Malicious | Not scored | 01 Dec, 2025 | PyPI hexdeclink |
Malicious release: Malicious code in multithreadedexecution (PyPI) MAL-2025-191798 | Malicious | Not scored | 30 Nov, 2025 | PyPI multithreadedexecution |
trytond does not enforce access rights for data export CVE-2025-66424, GHSA-2w93-qwpp-vgvj, PYSEC-2026-1989 | Medium | 0.3% | 30 Nov, 2025 | PyPI trytond |
trytond does not enforce access rights for the route of the HTML editor. CVE-2025-66423, GHSA-p3p5-xrmv-4j6x, PYSEC-2026-1991 | High | 0.2% | 30 Nov, 2025 | PyPI trytond |
trytond allows remote attackers to obtain sensitive trace-back (server setup) information CVE-2025-66422, GHSA-jqfc-9q34-prhg, PYSEC-2026-1990 | Medium | 0.3% | 30 Nov, 2025 | PyPI trytond |
Malicious release: Malicious code in chat-prompt-logger (PyPI) MAL-2025-191699 | Malicious | Not scored | 30 Nov, 2025 | PyPI chat-prompt-logger |
Malicious release: Malicious code in logguru (PyPI) MAL-2025-191783 | Malicious | Not scored | 29 Nov, 2025 | PyPI logguru |
Werkzeug safe_join() allows Windows special device names CVE-2025-66221, GHSA-hgf8-39gv-g3f2, PYSEC-2026-2046 | Medium | 0.5% | 29 Nov, 2025 | PyPI werkzeug |
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib CVE-2025-66034, GHSA-768j-98cg-p3fv, PYSEC-2026-1389 | Critical | 0.6% | 29 Nov, 2025 | PyPI fonttools |
Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack CVE-2025-12638, GHSA-9g7v-8wxv-mwxp | High | 0.7% | 28 Nov, 2025 | PyPI Keras PyPI keras |
Peppol-py is vulnerable to XXE attacks due to Saxon configuration CVE-2025-66371, GHSA-24hm-wm2h-h8w7, PYSEC-2026-1765 | Medium | 0.3% | 28 Nov, 2025 | PyPI peppol-py PyPI peppol_py |
Malicious release: Malicious code in discord-selfsbotsx (PyPI) MAL-2025-191718 | Malicious | Not scored | 27 Nov, 2025 | PyPI discord-selfsbotsx |