Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Airflow Drill Provider vulnerable to improper input validation CVE-2023-28707, GHSA-85pf-r4c7-3j9r, PYSEC-2023-3, PYSEC-2026-1136 | High | 2.1% | 07 Apr, 2023 | PyPI apache-airflow PyPI apache-airflow-providers-apache-drill |
SvelteKit framework has Insufficient CSRF protection for CORS requests CVE-2023-29008, GHSA-gv7g-x59x-wf8f | High | 0.4% | 06 Apr, 2023 | npm @sveltejs/kit |
HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation CVE-2023-1782, GHSA-f8r8-h93m-mj77, GO-2023-1707 | High | 0.8% | 05 Apr, 2023 | Go github.com/hashicorp/nomad |
thorsten/phpmyfaq vulnerable to business logic errors CVE-2023-1887, GHSA-gx43-fqrx-6fcw | High | 0.7% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter CVE-2023-1882, GHSA-jph3-3j24-pg3j | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header CVE-2023-1881, GHSA-hhjm-mpmf-cxg9 | High | 0.5% | 05 Apr, 2023 | Packagist microweber/microweber |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter CVE-2023-1880, GHSA-m8q9-7v2f-qjx9 | High | 1.6% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog CVE-2023-1878, GHSA-gcmq-7652-x98j | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter CVE-2023-1758, GHSA-3j93-7rf7-p7m6 | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter CVE-2023-1757, GHSA-jvjx-qqh7-6x6c | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS) CVE-2023-0835, GHSA-qghr-877h-f9jh | High | 0.6% | 04 Apr, 2023 | npm markdown-pdf |
Uvdesk remote code execution vulnerability CVE-2023-0265, GHSA-2hw6-4rv9-82fp | High | 1.6% | 04 Apr, 2023 | Packagist uvdesk/community-skeleton |
SvelteKit vulnerable to Cross-Site Request Forgery CVE-2023-29003, GHSA-5p75-vc5g-8rv2 | High | 0.6% | 04 Apr, 2023 | npm @sveltejs/kit |
Docker Swarm encrypted overlay network may be unauthenticated CVE-2023-28840, GHSA-232p-vwff-86mp, GO-2023-1699 | High | 2.6% | 04 Apr, 2023 | Go github.com/docker/docker |
Phachon mm-wiki Cross Site Request Forgery vulnerability CVE-2020-19278, GHSA-f6xp-59jq-r35c | High | 0.5% | 04 Apr, 2023 | Go github.com/phachon/mm-wiki |
Fluent Fluentd and Fluent-ui use default password BIT-fluentd-2020-21514, CVE-2020-21514, GHSA-wrxf-x8rm-6ggg | High | 0.8% | 04 Apr, 2023 | RubyGems fluentd-ui |
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability CVE-2022-43769 | HighExploited | 97.7% | 03 Apr, 2023 | |
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views CVE-2023-28836, GHSA-5286-f2rf-35c2, PYSEC-2023-55 | High | 0.8% | 03 Apr, 2023 | PyPI wagtail |
ADMesh improper array index validation CVE-2022-38072, GHSA-v5hv-4pw3-q6h9, PYSEC-2023-263 | High | 1.1% | 03 Apr, 2023 | PyPI admesh |
zstd vulnerable to buffer overrun CVE-2022-4899, GHSA-5c9c-6x87-f9vm, PYSEC-2023-121 | High | 1.6% | 31 Mar, 2023 | PyPI zstd SwiftURL github.com/facebook/zstd |
Stud42 vulnerable to denial of service GHSA-3hwm-922r-47hw | High | Not scored | 31 Mar, 2023 | Go atomys.codes/stud42 |
Appwrite Server-Side Request Forgery vulnerability CVE-2023-27159, GHSA-hxgx-584x-vwm8 | High | 36.4% | 31 Mar, 2023 | Packagist appwrite/server-ce |
Ruby URI component ReDoS issue CVE-2023-28755, GHSA-hv5j-3h9f-99c2 | High | 2.6% | 31 Mar, 2023 | RubyGems uri |
Ruby Time component ReDoS issue BIT-ruby-2023-28756, BIT-ruby-min-2023-28756, CVE-2023-28756, GHSA-fg7x-g82r-94qc | High | 2.5% | 31 Mar, 2023 | RubyGems time |
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management CVE-2023-1762, GHSA-xww4-w6ff-5q3g | High | 0.9% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
mindsdb arbitrary file write when extracting a remotely retrieved Tarball CVE-2023-30620, GHSA-2g5w-29q9-w6hx, PYSEC-2023-27 | High | 1.0% | 30 Mar, 2023 | PyPI mindsdb |
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location CVE-2022-23522, GHSA-7x45-phmr-9wqp, PYSEC-2023-26 | High | 0.9% | 30 Mar, 2023 | PyPI mindsdb |
Kiwi TCMS Stored Cross-site Scripting via SVG file CVE-2023-27489, GHSA-2wcr-87wf-cf9j, PYSEC-2026-1496 | High | 0.5% | 29 Mar, 2023 | PyPI kiwitcms |
smarty Cross-site Scripting vulnerability in Javascript escaping CVE-2023-28447, GHSA-7j98-h7fp-4vwj | High | 1.0% | 28 Mar, 2023 | Packagist smarty/smarty |
Prototype pollution in matrix-js-sdk (part 2) CVE-2023-28427, GHSA-mwq8-fjpf-c2gr | High | 1.2% | 28 Mar, 2023 | npm matrix-js-sdk |
Prototype pollution in matrix-react-sdk CVE-2023-28103, GHSA-6g43-88cp-w5gv | High | 0.7% | 28 Mar, 2023 | npm matrix-react-sdk |
matrix-react-sdk Prototype pollution vulnerability CVE-2022-36060, GHSA-2x9c-qwgf-94xr | High | 0.9% | 28 Mar, 2023 | npm matrix-react-sdk |
matrix-js-sdk Prototype Pollution vulnerability CVE-2022-36059, GHSA-rfv9-x7hh-xc32 | High | 0.9% | 28 Mar, 2023 | npm matrix-js-sdk |
Magento Open Source allows XML Injection CVE-2023-22247, GHSA-2444-8gj8-6fmx | High | 0.9% | 27 Mar, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
redis-py Race Condition due to incomplete fix CVE-2023-28859, GHSA-8fww-64cx-x8p5, PYSEC-2023-46 | High | 1.0% | 26 Mar, 2023 | PyPI redis |
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/ GHSA-cpmr-mw4j-99r7 | High | Not scored | 24 Mar, 2023 | PyPI label-studio |
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch BIT-tensorflow-2023-25659, CVE-2023-25659, GHSA-93vr-9q9m-pj8p, PYSEC-2026-1959, PYSEC-2026-3142, PYSEC-2026-3300 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print` BIT-tensorflow-2023-25660, CVE-2023-25660, GHSA-qjqc-vqcf-5qvj, PYSEC-2026-1963, PYSEC-2026-3231, PYSEC-2026-3362 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to integer overflow in EditDistance BIT-tensorflow-2023-25662, CVE-2023-25662, GHSA-7jvm-xxmr-v5cw, PYSEC-2026-1958, PYSEC-2026-3130, PYSEC-2026-3293 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Null Pointer Error in TensorArrayConcatV2 BIT-tensorflow-2023-25663, CVE-2023-25663, GHSA-64jg-wjww-7c5w, PYSEC-2026-1957, PYSEC-2026-3116, PYSEC-2026-3282 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Null Pointer Error in SparseSparseMaximum BIT-tensorflow-2023-25665, CVE-2023-25665, GHSA-558h-mq8x-7q9g, PYSEC-2026-1956, PYSEC-2026-3106, PYSEC-2026-3276 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Floating Point Exception in AudioSpectrogram BIT-tensorflow-2023-25666, CVE-2023-25666, GHSA-f637-vh3r-vfh2, PYSEC-2026-1960, PYSEC-2026-3169, PYSEC-2026-3317 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault when opening multiframe gif BIT-tensorflow-2023-25667, CVE-2023-25667, GHSA-fqm2-gh8w-gr68, PYSEC-2026-1961, PYSEC-2026-3176, PYSEC-2026-3321 | High | 0.3% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA BIT-tensorflow-2023-25669, CVE-2023-25669, GHSA-rcf8-g8jv-vg6p, PYSEC-2026-1964, PYSEC-2026-3236, PYSEC-2026-3366 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize BIT-tensorflow-2023-25670, CVE-2023-25670, GHSA-49rq-hwc3-x77w, PYSEC-2026-1955, PYSEC-2026-3098, PYSEC-2026-3271 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has segmentation fault in tfg-translate BIT-tensorflow-2023-25671, CVE-2023-25671, GHSA-j5w9-hmfh-4cr6, PYSEC-2026-1953, PYSEC-2026-3206 | High | 0.5% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu |
TensorFlow has Null Pointer Error in LookupTableImportV2 BIT-tensorflow-2023-25672, CVE-2023-25672, GHSA-94mm-g2mv-8p7r, PYSEC-2026-3143, PYSEC-2026-3301, PYSEC-2026-973 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Floating Point Exception in TensorListSplit with XLA BIT-tensorflow-2023-25673, CVE-2023-25673, GHSA-647v-r7qq-24fh, PYSEC-2026-3115, PYSEC-2026-3281, PYSEC-2026-956 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable BIT-tensorflow-2023-25674, CVE-2023-25674, GHSA-gf97-q72m-7579, PYSEC-2026-3189, PYSEC-2026-3330, PYSEC-2026-999 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow has Segfault in Bincount with XLA BIT-tensorflow-2023-25675, CVE-2023-25675, GHSA-7x4v-9gxg-9hwj, PYSEC-2026-3131, PYSEC-2026-3294, PYSEC-2026-967 | High | 0.4% | 24 Mar, 2023 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |