Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @guildai-services/guildai (npm) GHSA-7322-f886-qg4p, MAL-2026-14125 | Malicious | Not scored | 18 Aug, 2026 | npm @guildai-services/guildai |
CodeWhale: js_execution leaks parent environment to model context via missing env scrub CVE-2026-75915, GHSA-h539-c7r8-3xq4 | High | 0.7% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes CVE-2026-75914, GHSA-w7wx-5q49-r59w | High | 0.5% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval CVE-2026-75913, GHSA-7j5w-7r7x-9v27 | High | 0.5% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval CVE-2026-75912, GHSA-c6mw-8xh8-gpq6 | High | 0.4% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository CVE-2026-75911, GHSA-gx45-xrj5-g6c4 | High | 0.2% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository CVE-2026-75859, GHSA-62f5-cp2p-vq95 | High | 0.5% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE) CVE-2026-75858, GHSA-wrj3-vj8c-784f | High | 0.4% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation) CVE-2026-75857, GHSA-g29h-pfmp-qp9r | High | 0.2% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning CVE-2026-75856, GHSA-6v2g-fpxh-pmmh | Critical | 0.5% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
Malicious release: Malicious code in @milleree/date-display (npm) GHSA-p7f6-r5h9-5w5w, MAL-2026-14126 | Malicious | Not scored | 18 Aug, 2026 | npm @milleree/date-display |
Malicious release: Malicious code in motionspring (npm) GHSA-f96p-92vv-5j49, MAL-2026-14128 | Malicious | Not scored | 18 Aug, 2026 | npm motionspring |
Copyparty vulnerable to file/dirkey confusion CVE-2026-70657, GHSA-x5pq-m9p8-f4vx, PYSEC-2026-3660 | Medium | 0.3% | 18 Aug, 2026 | PyPI copyparty |
Malicious release: Malicious code in alphazone (npm) GHSA-58r2-5x99-cjrp, MAL-2026-14124 | Malicious | Not scored | 18 Aug, 2026 | npm alphazone |
Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin CVE-2026-75837, GHSA-xhfv-7758-r9hx | Critical | 0.5% | 18 Aug, 2026 | Packagist getgrav/grav |
Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate CVE-2026-75834, GHSA-q2j8-x8hf-63ch | Medium | 0.3% | 18 Aug, 2026 | Packagist getgrav/grav |
Grav: Stored XSS via Markdown audio/video media <source> URL CVE-2026-75831, GHSA-6qw9-4vv5-jr97 | Medium | 0.4% | 18 Aug, 2026 | Packagist getgrav/grav |
Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS CVE-2026-75828, GHSA-vfmf-q6x9-cw96 | Critical | 0.4% | 18 Aug, 2026 | Packagist getgrav/grav |
Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write CVE-2026-75827, GHSA-f8wv-xp27-6gq7 | Critical | 0.9% | 18 Aug, 2026 | Packagist getgrav/grav |
Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`) CVE-2026-74907, GHSA-4v9q-p283-qc2m | High | 0.4% | 18 Aug, 2026 | Packagist getgrav/grav |
Malicious release: Malicious code in @oyo_tech/oyochat_user (npm) MAL-2026-14123 | Malicious | Not scored | 18 Aug, 2026 | npm @oyo_tech/oyochat_user |
Malicious release: Malicious code in bcc-design-icons (npm) GHSA-73q2-99qx-v576, MAL-2026-14119, SNYK-JS-BCCDESIGNICONS-19003147 | Malicious | Not scored | 18 Aug, 2026 | npm bcc-design-icons |
Malicious release: Malicious code in bcc-design (npm) GHSA-v36x-48h2-hc4f, MAL-2026-14117, SNYK-JS-BCCDESIGN-19003146 | Malicious | Not scored | 18 Aug, 2026 | npm bcc-design |
Malicious release: Malicious code in core-tailwindcss-utility (npm) MAL-2026-14118 | Malicious | Not scored | 18 Aug, 2026 | npm core-tailwindcss-utility |
Malicious release: Malicious code in blastradar (npm) GHSA-pp9x-4g56-7322, MAL-2026-14120 | Malicious | Not scored | 18 Aug, 2026 | npm blastradar |
Malicious release: Malicious code in ulebkit (npm) GHSA-w4vj-4cxr-299x, MAL-2026-14122 | Malicious | Not scored | 18 Aug, 2026 | npm ulebkit |
Malicious release: Malicious code in sui-move-graphql (npm) GHSA-xgmm-vq93-f5vx, MAL-2026-14121 | Malicious | Not scored | 18 Aug, 2026 | npm sui-move-graphql |
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id BIT-mlflow-2026-69148, CVE-2026-69148, GHSA-gqch-g4w5-7qcw | High | 0.4% | 17 Aug, 2026 | npm mlflow |
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth BIT-mlflow-2026-69146, CVE-2026-69146, GHSA-3p64-6gvh-82v5 | Medium | 0.4% | 17 Aug, 2026 | npm mlflow |
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) BIT-mlflow-2026-64849, CVE-2026-64849, GHSA-7gwp-5pfp-969j, PYSEC-2026-3687 | CriticalExploited | 10.0% | 17 Aug, 2026 | PyPI mlflow |
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint CVE-2026-56677, GHSA-8g4w-4ffg-8vgx | High | 0.4% | 17 Aug, 2026 | npm 9router |
atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard CVE-2026-91987, GHSA-j659-8xh6-5pq5 | High | 0.5% | 17 Aug, 2026 | PyPI atomic-agents-stack |
atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE) CVE-2026-91988, GHSA-xhcr-cqfr-m3hv | Critical | 0.3% | 17 Aug, 2026 | PyPI atomic-agents-stack |
Malicious release: Malicious code in socks5901 (PyPI) MAL-2026-14100 | Malicious | Not scored | 17 Aug, 2026 | PyPI socks5901 |
vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections CVE-2026-73560, GHSA-4hhp-h66f-j5j7, PYSEC-2026-3934 | Medium | 0.4% | 17 Aug, 2026 | PyPI vllm |
Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url` CVE-2026-54356, GHSA-6x9p-4r67-5gjx | High | 0.4% | 17 Aug, 2026 | npm @budibase/server |
ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS CVE-2026-71553, GHSA-vmg4-6gfg-83qx | High | 0.4% | 17 Aug, 2026 | npm apostrophe |
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds CVE-2026-71486, GHSA-8737-qx52-hjff, PYSEC-2026-3936 | Medium | 0.4% | 17 Aug, 2026 | PyPI vllm |
ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close CVE-2026-63670, GHSA-jxwj-j7wr-gfrw | Medium | 0.3% | 17 Aug, 2026 | npm sanitize-html |
ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree CVE-2026-63669, GHSA-wr5r-wqp2-x4fh | Medium | 0.3% | 17 Aug, 2026 | npm apostrophe |
ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal CVE-2026-63667, GHSA-79qf-vqgc-7xx3 | Medium | 0.5% | 17 Aug, 2026 | npm @apostrophecms/import-export |
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set GHSA-fhgh-wq4q-r37x, GO-2026-6246 | High | Not scored | 17 Aug, 2026 | Go gitlab.com/uniget-org/cli |
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) CVE-2026-59893, GHSA-prg7-hcfm-mfcr, PYSEC-2026-3698 | High | 0.3% | 17 Aug, 2026 | PyPI sqlparse |
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger CVE-2026-54284, GHSA-pwgv-4x5q-6m9f, PYSEC-2026-3699 | High | 0.3% | 17 Aug, 2026 | PyPI sqlparse |
Etherpad has stored XSS in HTML export via unescaped attribute-pool values CVE-2026-55090, GHSA-2jp7-wwpg-3p9w | High | 0.5% | 17 Aug, 2026 | npm ep_etherpad-lite |
Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling GHSA-92hr-gmr6-h8cp | Medium | Not scored | 17 Aug, 2026 | npm ep_etherpad-lite |
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability CVE-2026-55062, GHSA-m6jg-wr9m-cg2f, GO-2026-6247 | Medium | 0.2% | 17 Aug, 2026 | Go gitlab.com/uniget-org/cli |
uniget CLI has an EDITOR Command Injection CVE-2026-55061, GHSA-qmcq-xw74-w667, GO-2026-6248 | Medium | 0.2% | 17 Aug, 2026 | Go gitlab.com/uniget-org/cli |
vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass CVE-2026-92961, GHSA-v836-6xw4-9cx3 | High | 0.5% | 17 Aug, 2026 | npm vm2 |
vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f) CVE-2026-92960, GHSA-m5w8-4gq2-6f8x | Critical | 0.5% | 17 Aug, 2026 | npm vm2 |