Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SillyTavern has a Path Traversal issue CVE-2026-44650, GHSA-886q-f44j-h6wh | Critical | 0.6% | 12 May, 2026 | npm sillytavern |
SillyTavern has Authentication Bypass via SSO Header Injection CVE-2026-44649, GHSA-gxx6-h3g6-vwjh | Critical | 0.2% | 12 May, 2026 | npm sillytavern |
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub CVE-2026-31239, GHSA-pq2f-x424-6fjm, PYSEC-2026-406 | Critical | 0.4% | 12 May, 2026 | PyPI mamba-ssm |
Ludwig framework is vulnerable to insecure deserialization in its model serving component CVE-2026-31238, GHSA-xp5q-5q7g-q26r, PYSEC-2026-405 | Critical | 0.5% | 12 May, 2026 | PyPI ludwig |
Ludwig framework is vulnerable to insecure deserialization through its predict() method. CVE-2026-31237, GHSA-wcr3-gm9f-f87q, PYSEC-2026-404 | Critical | 0.6% | 12 May, 2026 | PyPI ludwig |
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument CVE-2026-31236, GHSA-g76p-4vg5-f4qh, PYSEC-2026-400 | Critical | 0.3% | 12 May, 2026 | PyPI llm |
imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module CVE-2026-31235, GHSA-g82g-j283-hj97, PYSEC-2026-356 | Critical | 0.5% | 12 May, 2026 | PyPI imgaug |
Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component CVE-2026-31234, GHSA-mf8f-x4r3-jm8c, PYSEC-2026-354 | Critical | 0.7% | 12 May, 2026 | PyPI horovod |
Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism CVE-2026-31233, GHSA-r6hf-g5x6-7pv9, PYSEC-2026-347 | Critical | 0.6% | 12 May, 2026 | PyPI guardrails-ai |
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page CVE-2025-65719, GHSA-94gr-w3q5-rfqr, PYSEC-2026-371 | Critical | 0.6% | 12 May, 2026 | PyPI kubectl-mcp-server npm kubectl-mcp-server |
OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input CVE-2026-42074, GHSA-m77w-p5jj-xmhg | Critical | 0.6% | 12 May, 2026 | npm openclaude |
PySyft server-side arbitrary Python execution after code approval CVE-2026-31220, GHSA-cfpg-c974-jfhq, PYSEC-2026-546 | Critical | 0.6% | 12 May, 2026 | PyPI syft |
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) CVE-2026-45091, GHSA-x3r2-fj3r-g5mv | Critical | 0.3% | 12 May, 2026 | Maven io.github.davidalmeidac:sealed-env-core npm sealed-env |
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys CVE-2026-45321, GHSA-g7cv-rxg3-hmpx | CriticalExploited | 3.3% | 12 May, 2026 | npm @tanstack/arktype-adapter npm @tanstack/eslint-plugin-router npm @tanstack/eslint-plugin-start npm @tanstack/history +38 more |
SandboxJS has a sandbox escape via Function.caller leakage of internal call op CVE-2026-43898, GHSA-g8f2-4f4f-5jqw | Critical | 0.5% | 11 May, 2026 | npm @nyariv/sandboxjs |
WebdriverIO BrowserStack Service has a Command Injection issue CVE-2026-25244, GHSA-5c46-x3qw-q7j7 | Critical | 3.3% | 11 May, 2026 | npm @wdio/browserstack-service |
torrentpier has PHP Serialize Injections GHSA-h29g-c9cx-c73q | Critical | Not scored | 11 May, 2026 | Packagist torrentpier/torrentpier |
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules CVE-2026-7813, GHSA-h2x2-q2mc-24gw, PYSEC-2026-452 | Critical | 0.5% | 11 May, 2026 | PyPI pgadmin4 |
Angular Expressions - Remote Code Execution using filters CVE-2026-44643, GHSA-pw8r-6689-xvf4 | Critical | 0.5% | 11 May, 2026 | npm angular-expressions |
Open WebUI has a CORS misconfiguration and session validation issue CVE-2026-56400, GHSA-6xcp-7mpr-m7wm | Critical | 0.5% | 11 May, 2026 | PyPI open-webui |
@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module GHSA-v6wj-c83f-v46x | Critical | Not scored | 09 May, 2026 | npm @profullstack/mcp-server |
Velocity.js has a Prototype Pollution vulnerability through #set path assignment CVE-2026-44966, GHSA-j658-c2gf-x6pq | Critical | 0.5% | 09 May, 2026 | npm velocityjs |
@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools CVE-2026-44895, GHSA-8jr5-6gvj-rfpf | Critical | 0.4% | 09 May, 2026 | npm @yoda.digital/gitlab-mcp-server |
Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal CVE-2026-44566, GHSA-9pgh-j74g-qj6m, PYSEC-2026-2717 | Critical | 0.3% | 08 May, 2026 | PyPI open-webui |
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability CVE-2026-44211, GHSA-5c57-rqjx-35g2 | Critical | 0.2% | 08 May, 2026 | npm cline |
Open WebUI has an LDAP Empty Password Authentication Bypass CVE-2026-44551, GHSA-2r4p-jpmg-48f4, PYSEC-2026-435 | Critical | 1.5% | 08 May, 2026 | PyPI open-webui |
dash-uploader has a directory traversal vulnerability CVE-2026-38360, GHSA-3rf6-x59v-5jfv, PYSEC-2026-320 | Critical | 6.0% | 08 May, 2026 | PyPI dash-uploader |
PrestaShop has a stored XSS executable in customer service view CVE-2026-44212, GHSA-w9f3-qc75-qgx9 | Critical | 0.4% | 08 May, 2026 | Packagist prestashop/prestashop |
vm2 has Sandbox Breakout Through Null Proto Exception CVE-2026-44009, GHSA-9vg3-4rfj-wgcm | Critical | 0.8% | 08 May, 2026 | npm vm2 |
vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` CVE-2026-44008, GHSA-9qj6-qjgg-37qq | Critical | 0.9% | 08 May, 2026 | npm vm2 |
PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection CVE-2026-44336, GHSA-9mqq-jqxf-grvw, PYSEC-2026-472 | Critical | 0.6% | 08 May, 2026 | PyPI PraisonAI PyPI praisonai |
Electerm users can run dangrous code through link or command line CVE-2026-43944, GHSA-mpm8-cx2p-626q | Critical | 0.4% | 08 May, 2026 | npm electerm |
Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click CVE-2026-43941, GHSA-fwf6-j56g-m97c | Critical | 0.4% | 08 May, 2026 | npm electerm |
Electerm runWidget has a path traversal that leads to arbitrary code execution CVE-2026-43940, GHSA-f77v-9vpc-6pjm | Critical | 0.2% | 08 May, 2026 | npm electerm |
Snipe-IT has insecure permissions in file uploads CVE-2026-37709, GHSA-xg82-2hrv-hf64 | Critical | 0.6% | 07 May, 2026 | Packagist snipe/snipe-it |
Compromised version of intercom-client published to npm GHSA-54pg-9963-v8vg | Critical | Not scored | 07 May, 2026 | npm intercom-client |
Compromised tag of intercom-php published via GitHub GHSA-gr3r-crp5-qrrm | Critical | Not scored | 07 May, 2026 | Packagist intercom/intercom-php |
query-parser-string is vulnerable to Prototype Pollution CVE-2025-63704, GHSA-587p-w43q-4hjx | Critical | 0.5% | 07 May, 2026 | npm query-string-parser |
parse-ini is vulnerable to Prototype Pollution in index.js() CVE-2025-63703, GHSA-x72j-hv9f-qqh4 | Critical | 0.4% | 07 May, 2026 | npm parse-ini |
next-npm-version is vulnerable to Command injection CVE-2025-63706, GHSA-2xx6-qf7x-grqh | Critical | 1.5% | 07 May, 2026 | npm @jswork/next-npm-version |
vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution CVE-2026-44007, GHSA-8hg8-63c5-gwmx | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape CVE-2026-43999, GHSA-947f-4v7f-x2v8 | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape CVE-2026-44005, GHSA-vwrp-x96c-mhwq | Critical | 0.8% | 07 May, 2026 | npm vm2 |
vm2 Access to Host Object Enables Sandbox Escape CVE-2026-43997, GHSA-47x8-96vw-5wg6 | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2 has a Sandbox Escape Vulnerability CVE-2026-44006, GHSA-qcp4-v2jj-fjx8 | Critical | 0.8% | 07 May, 2026 | npm vm2 |
Compromise of PyTorch Lightning PyPi Package Versions CVE-2026-44484, GHSA-w37p-236h-pfx3, PYSEC-2026-3973, PYSEC-2026-508 | Critical | 0.4% | 07 May, 2026 | PyPI lightning PyPI pytorch-lightning |
misp-modules website - Missing CSRF protection in the website home blueprint CVE-2026-44364, GHSA-j4rh-7jcr-qm69, PYSEC-2026-414 | Critical | 0.2% | 06 May, 2026 | PyPI misp-modules |
fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver CVE-2026-44351, GHSA-gmvf-9v4p-v8jc | Critical | 0.3% | 06 May, 2026 | npm fast-jwt |
phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha CVE-2026-46364, GHSA-289f-fq7w-6q2w | Critical | 1.7% | 06 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id CVE-2026-45010, GHSA-9pq7-mfwh-xx2j | Critical | 0.4% | 06 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |