Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) CVE-2026-44512, GHSA-hwpq-hmq9-wj77, PYSEC-2026-2689 | Medium | 0.2% | 07 Jul, 2026 | PyPI onnx |
Apache Airflow exposes deferred trigger kwargs in task-instance API responses BIT-airflow-2026-49487, CVE-2026-49487, GHSA-22hf-vx2v-gjff, PYSEC-2026-2088 | Medium | 0.7% | 07 Jul, 2026 | PyPI apache-airflow |
apache-airflow DAG source authorization bypass exposes co-located DAG source BIT-airflow-2026-49296, CVE-2026-49296, GHSA-4fh7-7jx4-8f6c, PYSEC-2026-2083 | Medium | 0.6% | 07 Jul, 2026 | PyPI apache-airflow |
Apache Airflow exposes secrets backend credentials through the Config API BIT-airflow-2026-48892, CVE-2026-48892, GHSA-9933-5rrp-mfwx, PYSEC-2026-2087 | Medium | 0.7% | 07 Jul, 2026 | PyPI apache-airflow |
Apache Airflow exposes unreadable DAG identifiers in the scheduling dependencies graph BIT-airflow-2026-48891, CVE-2026-48891, GHSA-3322-mjxh-9mp5, PYSEC-2026-2086 | Medium | 0.6% | 07 Jul, 2026 | PyPI apache-airflow |
Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API BIT-airflow-2026-48828, CVE-2026-48828, GHSA-563f-2439-rmq4, PYSEC-2026-3806 | Medium | 0.7% | 07 Jul, 2026 | PyPI apache-airflow |
Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint CVE-2026-54724, GHSA-hmj5-jm8h-h9fh, PYSEC-2026-2552 | Medium | 0.3% | 06 Jul, 2026 | PyPI kiwitcms |
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read CVE-2026-55646, GHSA-v82g-2437-67m2, PYSEC-2026-2305 | Medium | 0.5% | 06 Jul, 2026 | PyPI vllm |
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path BIT-pillow-2026-55798, CVE-2026-55798, GHSA-4x4j-2g7c-83w6, PYSEC-2026-2257 | Medium | 0.2% | 06 Jul, 2026 | PyPI Pillow PyPI pillow |
WeasyPrint has CSS Injection via Presentational Hints CVE-2026-49452, GHSA-jhhc-3hcp-qhm5, PYSEC-2026-3412 | Medium | 0.4% | 06 Jul, 2026 | PyPI weasyprint |
Wagtail: Pages translations can be created without page permissions when using simple_translation CVE-2026-54262, GHSA-8634-mr4j-r72c, PYSEC-2026-615 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Improper permission handling in image preview CVE-2026-54261, GHSA-r6p4-grq7-xm4m, PYSEC-2026-614 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Denial of service via unbounded filter specs in the image preview CVE-2026-54260, GHSA-f2p5-j6fg-5cxf, PYSEC-2026-613 | Medium | 0.4% | 01 Jul, 2026 | PyPI wagtail |
Wagtail: Improper restriction handling on Documents and Images chosen endpoints CVE-2026-54259, GHSA-h54r-xq46-qwqm, PYSEC-2026-612 | Medium | 0.3% | 01 Jul, 2026 | PyPI wagtail |
AWS CLI: Overly permissive File Permissions CVE-2026-13769, GHSA-wfp6-f47h-hxc3, PYSEC-2026-3548 | Medium | 0.2% | 01 Jul, 2026 | PyPI awscli |
Keras: HDF5 virtual datasets can disclose local files CVE-2026-12480, GHSA-26c4-7vv6-867j, PYSEC-2026-3629 | Medium | 0.2% | 01 Jul, 2026 | PyPI keras |
Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers GHSA-75mw-h36v-2jv7 | Medium | Not scored | 26 Jun, 2026 | PyPI dosage |
nono-py's policy JSON accepts unknown security fields GHSA-m8j6-rc5x-wv36 | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
nono-py vulnerable to authorization bypass / policy confusion GHSA-9j7f-3r4p-pwh6 | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
nono-py has proxy-only network fallback bypass on older Linux kernels GHSA-72w7-mf9g-733p | Medium | Not scored | 26 Jun, 2026 | PyPI nono-py |
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO CVE-2026-55165, GHSA-r9gp-7f88-9r54, PYSEC-2026-2589 | Medium | 0.2% | 25 Jun, 2026 | PyPI lemur |
Lemur user-update path stores plaintext passwords CVE-2026-55164, GHSA-q437-g7fv-2jvv, PYSEC-2026-2587 | Medium | 0.3% | 25 Jun, 2026 | PyPI lemur |
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id> CVE-2026-55163, GHSA-x3vf-mgxj-7785, PYSEC-2026-2591 | Medium | 0.2% | 25 Jun, 2026 | PyPI lemur |
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF CVE-2026-55162, GHSA-54vg-pfh7-jq95, PYSEC-2026-2586 | Medium | 0.2% | 25 Jun, 2026 | PyPI lemur |
justhtml: to_markdown() code-span blank-line breakout enables XSS CVE-2026-77088, GHSA-jf6w-2mvx-633j | Medium | 0.3% | 25 Jun, 2026 | PyPI justhtml |
Flask-Security has an Open Redirect issue GHSA-w2j7-f3c6-g8cw | Medium | Not scored | 23 Jun, 2026 | PyPI Flask-Security PyPI flask-security |
foreman-mcp-server Inserts Sensitive Information into Log File CVE-2026-9073, GHSA-7rcj-2493-83x3, PYSEC-2026-4050 | Medium | 0.2% | 23 Jun, 2026 | PyPI foreman-mcp-server |
motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution CVE-2026-55863, GHSA-j67x-q29f-qcvv, PYSEC-2026-2665 | Medium | 0.5% | 23 Jun, 2026 | PyPI motioneye |
OpenStack Swift vulnerable to authenticated server-side request forgery CVE-2026-50221, GHSA-h8rc-w822-q8vq, PYSEC-2026-4173 | Medium | 0.2% | 23 Jun, 2026 | PyPI swift |
OctoPrint has XSS in its Suppressed Command Notifications CVE-2026-35163, GHSA-p6qx-ghxm-389h, PYSEC-2026-2688 | Medium | 0.2% | 23 Jun, 2026 | PyPI OctoPrint PyPI octoprint |
OpenHarness remote project-context commands allow persistent prompt poisoning CVE-2026-56696, GHSA-24cw-228q-3rx9, PYSEC-2026-3880 | Medium | 0.4% | 23 Jun, 2026 | PyPI openharness-ai |
zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet CVE-2026-48487, GHSA-qc2x-6f54-m6h9, PYSEC-2026-3438 | Medium | 0.5% | 22 Jun, 2026 | PyPI zeroconf |
Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack CVE-2026-46611, GHSA-w856-8p3r-p338, PYSEC-2026-2498 | Medium | 0.1% | 22 Jun, 2026 | PyPI glances |
pypdf: Possible infinite loop when processing threads/articles in writer CVE-2026-54651, GHSA-g9xf-7f8q-9mcj, PYSEC-2026-3018 | Medium | 0.2% | 22 Jun, 2026 | PyPI pypdf |
motionEye's World-Readable Configuration File Exposes Admin Password Hash CVE-2026-32315, GHSA-rhgp-6wq6-9j67, PYSEC-2026-2666 | Medium | 1.7% | 22 Jun, 2026 | PyPI motioneye |
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint CVE-2026-31978, GHSA-g9fx-5r4h-pcw3, PYSEC-2026-2664 | Medium | 0.3% | 22 Jun, 2026 | PyPI motioneye |
Keras: DiskIOStore permits path traversal through crafted layer names CVE-2026-12479, GHSA-gh82-f9x8-5frx, PYSEC-2026-3632 | Medium | 0.4% | 22 Jun, 2026 | PyPI keras |
LiteLLM: SSO Debug Flow Has Improper Authentication CVE-2026-12795, GHSA-j37q-q7p9-vpwm, PYSEC-2026-4071 | Medium | 0.8% | 21 Jun, 2026 | PyPI litellm |
LiteLLM: MCP Proxy Has Improper Authentication CVE-2026-12773, GHSA-4jcj-7x88-m979, PYSEC-2026-4067 | Medium | 1.0% | 21 Jun, 2026 | PyPI litellm |
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size CVE-2026-58203, GHSA-4xgf-cpjx-pc3j | Medium | 0.2% | 19 Jun, 2026 | PyPI pydantic-settings |
Zeep: Server-Side Request Forgery (SSRF) CVE-2026-58501, GHSA-4cc2-g9w2-fhf6, PYSEC-2026-2323 | Medium | 0.4% | 19 Jun, 2026 | PyPI zeep |
Anki: User scripts in iframes have access to the internal Anki API CVE-2026-58266, GHSA-cw6h-ffmh-x6vh | Medium | 0.2% | 19 Jun, 2026 | PyPI aqt |
ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer CVE-2026-58198, GHSA-wvrh-2f4m-924v | Medium | 0.1% | 19 Jun, 2026 | PyPI ChatterBot PyPI chatterbot |
Langflow: Logout button does not clear session CVE-2026-55423, GHSA-7hw8-6q6r-4276, PYSEC-2026-222 | Medium | 0.2% | 19 Jun, 2026 | PyPI langflow |
dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens CVE-2026-55837, GHSA-jr33-mw75-7j8f, PYSEC-2026-2443 | Medium | 0.3% | 19 Jun, 2026 | PyPI dbt-mcp |
UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() CVE-2026-54911, GHSA-3j69-69wj-xqx2, PYSEC-2026-2294 | Medium | 0.4% | 19 Jun, 2026 | PyPI ujson |
JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol BIT-jupyterlab-2026-67338, CVE-2026-67338, GHSA-vmhf-c436-hxj4 | Medium | 0.3% | 19 Jun, 2026 | PyPI jupyterlab |
praisonai-platform: Authorization Bypass Through User-Controlled Key CVE-2026-58653, GHSA-2fjj-qqg8-fg7x | Medium | 0.3% | 18 Jun, 2026 | PyPI praisonai-platform |
pypdf: Missing stream length values ignore defined limits CVE-2026-57204, GHSA-jm82-fx9c-mx94 | Medium | 0.4% | 18 Jun, 2026 | PyPI pypdf |
PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder CVE-2026-57120, GHSA-pv2j-rghr-v5r9, PYSEC-2026-3533 | Medium | 0.6% | 18 Jun, 2026 | PyPI praisonaiagents |