Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset GHSA-vpp8-g58w-m8mp | High | Not scored | 5 hours ago | PyPI Twisted PyPI twisted |
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox CVE-2026-61438, GHSA-26mh-57q7-jfvr | High | Not scored | 5 hours ago | PyPI praisonai |
LangGraph JavaScript custom authentication may permit cross-user Store access CVE-2026-118668, GHSA-4hm6-w6qq-w73v | High | Not scored | 1 day ago | PyPI langgraph-api |
rucio has an Authorization Bypass on REST API endpoint for signing URLs CVE-2026-58273, GHSA-5j9r-fx4x-rpvg | High | Not scored | 1 day ago | PyPI rucio |
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source CVE-2026-116690, GHSA-m65p-9j7q-6w33 | High | 0.6% | 2 days ago | PyPI mlflow |
Hydra legacy target blacklist permits unsafe PyYAML loading GHSA-wf6j-7hvr-gr93 | High | Not scored | 2 days ago | PyPI hydra-core |
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage GHSA-3w55-933p-8pv5 | High | Not scored | 2 days ago | PyPI strands-agents |
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` GHSA-g5ff-637f-6q2m | High | Not scored | 2 days ago | PyPI litellm |
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow CVE-2026-49272, GHSA-3jp2-3mrg-2vxc | High | Not scored | 2 days ago | PyPI oauthlib |
Datadog dd-trace-py: IAST instrumentation can lead to application DOS CVE-2026-116589, GHSA-p3m5-h5v9-vqj6 | High | 0.3% | 2 days ago | PyPI ddtrace |
Datadog dd-trace-py: ReDoS in URL query string obfuscation CVE-2026-116588, GHSA-3633-r77q-h3v3 | High | 0.5% | 2 days ago | PyPI ddtrace |
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs CVE-2026-115924, GHSA-qr6x-7v33-6qmg | High | 0.4% | 3 days ago | PyPI rembg |
vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled CVE-2026-115912, GHSA-6757-hggm-hp2w, PYSEC-2026-4345 | High | 0.5% | 3 days ago | PyPI vllm |
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer CVE-2026-115776, GHSA-53xc-49m8-p798 | High | 0.5% | 6 days ago | PyPI Twisted PyPI twisted |
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer CVE-2026-115778, GHSA-cwm5-jh59-mwxr | High | 0.5% | 6 days ago | PyPI Twisted PyPI twisted |
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree CVE-2026-115775, GHSA-3476-c5c2-fr73 | High | 0.4% | 6 days ago | PyPI Twisted PyPI twisted |
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9) BIT-virtualenv-2026-115586, CVE-2026-115586, GHSA-cx6f-vjhg-g3cc | High | 0.2% | 6 days ago | PyPI virtualenv |
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) CVE-2026-115585, GHSA-jr96-gvgh-j3r4 | High | 0.4% | 6 days ago | PyPI pypdf |
pypdf: Possible long runtimes for large xref table header limits CVE-2026-115580, GHSA-gmh7-3g9r-mjh5 | High | 0.4% | 6 days ago | PyPI pypdf |
pypdf: Possible long runtimes for repeated references to the same missing object CVE-2026-115572, GHSA-6c7f-9265-g8fw | High | 0.4% | 6 days ago | PyPI pypdf |
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512) CVE-2026-114616, GHSA-8m4g-j4wp-wgcg | High | 0.2% | 6 days ago | PyPI Authlib PyPI authlib |
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys CVE-2026-114615, GHSA-7vr2-2fgp-9w7p | High | 0.1% | 6 days ago | PyPI authlib |
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server CVE-2026-115419, GHSA-4v6f-7vjh-6x4m | High | 0.4% | 7 days ago | PyPI strands-agents npm @strands-agents/sdk |
Mistune: Path Traversal and XSS in Include directive CVE-2026-115355, GHSA-h7ww-273w-6cm8 | High | 0.5% | 7 days ago | PyPI mistune |
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure CVE-2026-114613, GHSA-j586-36cw-2gc2 | High | 0.4% | 7 days ago | PyPI msgpack |
dnspython dns.name.from_wire_parser() excessive CPU use CVE-2026-114605, GHSA-45c3-73f7-pv4m | High | 0.3% | 7 days ago | PyPI dnspython |
Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() GHSA-78g4-xqwv-q3g8 | High | Not scored | 7 days ago | PyPI pillow |
GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit CVE-2026-75508, GHSA-r77w-qph3-7vf8 | High | 0.6% | 7 days ago | PyPI graphql-core |
GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule CVE-2026-75507, GHSA-vj8h-fx38-h3vc | High | 0.6% | 7 days ago | PyPI graphql-core |
Black: GitHub Action installs unvalidated required-version from pyproject.toml CVE-2026-114134, GHSA-cg8m-r9f2-5wm2 | High | Not scored | 7 days ago | PyPI black |
PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery GHSA-pxh4-856f-4h89 | High | Not scored | 7 days ago | PyPI pyjwt |
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content CVE-2026-114510, GHSA-vqrg-773h-4wxc | High | 0.2% | 7 days ago | PyPI flexible-graphrag |
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags CVE-2026-112902, GHSA-xvh5-g6gv-559v | High | Not scored | 8 days ago | PyPI Pillow PyPI pillow |
Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer BIT-pillow-2026-96778, CVE-2026-96778, GHSA-g7cr-3p24-7wf7 | High | 0.5% | 8 days ago | PyPI Pillow PyPI pillow |
Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) BIT-pillow-2026-96644, CVE-2026-96644, GHSA-9v9v-9qvf-h2hj, PYSEC-2026-4343 | High | 0.4% | 8 days ago | PyPI Pillow PyPI pillow |
Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time BIT-pillow-2026-96643, CVE-2026-96643, GHSA-g4qv-2jxx-769h, PYSEC-2026-4342 | High | 0.4% | 8 days ago | PyPI Pillow PyPI pillow |
Pillow: TarIO negative size field causes infinite CPU-spin loop BIT-pillow-2026-96642, CVE-2026-96642, GHSA-3j72-p6qg-6xp7, PYSEC-2026-4341 | High | 0.3% | 8 days ago | PyPI Pillow PyPI pillow |
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion BIT-pillow-2026-96640, CVE-2026-96640, GHSA-mrfp-p49p-3hf2 | High | 0.6% | 8 days ago | PyPI Pillow PyPI pillow |
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS BIT-pillow-2026-96637, CVE-2026-96637, GHSA-g842-9rc4-69pw, PYSEC-2026-4338 | High | 0.4% | 8 days ago | PyPI pillow |
GitPython validates a submodule's ".git" path only after cloning into it (RCE) CVE-2026-114145, GHSA-83vg-56qc-22m7 | High | 0.4% | 8 days ago | PyPI Gitpython PyPI gitpython |
nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc CVE-2026-114140, GHSA-pjvx-prjx-h659 | High | 0.4% | 8 days ago | PyPI nbconvert |
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation CVE-2026-114138, GHSA-33wh-fxxf-88vv | High | 0.5% | 8 days ago | PyPI djangorestframework |
Django REST framework: TokenProxy.delete() reports success and revokes nothing CVE-2026-114137, GHSA-xw6w-gcfp-cf8m | High | 0.5% | 8 days ago | PyPI djangorestframework |
Django REST framework: JSONParser applies an attacker-named codec to the request stream CVE-2026-114136, GHSA-3547-9m27-7rxg | High | 0.4% | 8 days ago | PyPI djangorestframework |
Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization CVE-2026-114135, GHSA-354v-3q48-cv69 | High | 0.5% | 8 days ago | PyPI jupyter-server |
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.) CVE-2026-114055, GHSA-gx7p-2j49-hfq4 | High | 0.4% | 8 days ago | PyPI vllm |
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine CVE-2026-114050, GHSA-p92p-rxj5-7p2x | High | 0.2% | 8 days ago | PyPI vllm |
virtualenv activation scripts run code from a path that contains a placeholder name BIT-virtualenv-2026-113776, CVE-2026-113776, GHSA-8rjx-v5ww-45pp | High | 0.3% | 8 days ago | PyPI virtualenv |
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote BIT-virtualenv-2026-113732, CVE-2026-113732, GHSA-c947-3pg5-gm8q | High | 0.2% | 8 days ago | PyPI virtualenv |
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST BIT-virtualenv-2026-113726, CVE-2026-113726, GHSA-5vjq-rrrf-7h2q | High | 0.3% | 8 days ago | PyPI virtualenv |