Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration CVE-2026-47132, GHSA-6pvm-2vjj-rx4w | Medium | 0.3% | 12 Aug, 2026 | Packagist thorsten/phpmyfaq |
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment CVE-2026-45694, GHSA-jmqm-f8q4-v7wx | Medium | 0.2% | 12 Aug, 2026 | Packagist librenms/librenms |
Winter: Authenticated backend users can bypass Users controller permission checks CVE-2026-35445, GHSA-j5jq-cr68-v2xx | High | 0.4% | 12 Aug, 2026 | Packagist winter/wn-backend-module |
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads CVE-2026-32639, GHSA-5c4f-9pq9-6c77 | Medium | 0.5% | 12 Aug, 2026 | Packagist winter/wn-cms-module |
Malicious release: Malicious code in kit-map-vim (npm) GHSA-hg96-r46x-6f4w, MAL-2026-13915 | Malicious | Not scored | 12 Aug, 2026 | npm kit-map-vim |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-e (npm) MAL-2026-13888 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-e |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-f (npm) MAL-2026-13889 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-f |
Malicious release: Malicious code in @years18/n8n-nodes-utils-helper-y (npm) MAL-2026-13883 | Malicious | Not scored | 12 Aug, 2026 | npm @years18/n8n-nodes-utils-helper-y |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-a (npm) MAL-2026-13884 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-a |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-b (npm) MAL-2026-13885 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-d (npm) MAL-2026-13887 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-d |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-c (npm) MAL-2026-13886 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-g (npm) MAL-2026-13890 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-g |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-c (npm) MAL-2026-13911 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-a (npm) MAL-2026-13909 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-a |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-b (npm) MAL-2026-13910 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-f (npm) MAL-2026-13914 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-f |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-h (npm) MAL-2026-13891 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-h |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-j (npm) MAL-2026-13893 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-j |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-i (npm) MAL-2026-13892 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-i |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-k (npm) MAL-2026-13894 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-k |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-l (npm) MAL-2026-13895 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-l |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-n (npm) MAL-2026-13897 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-n |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-m (npm) MAL-2026-13896 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-m |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-p (npm) MAL-2026-13899 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-p |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-r (npm) MAL-2026-13901 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-r |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-o (npm) MAL-2026-13898 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-o |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-t (npm) MAL-2026-13903 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-t |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-v (npm) MAL-2026-13905 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-v |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-u (npm) MAL-2026-13904 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-u |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-s (npm) MAL-2026-13902 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-s |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-e (npm) MAL-2026-13913 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-e |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-x (npm) MAL-2026-13907 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-x |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-d (npm) MAL-2026-13912 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-d |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-y (npm) MAL-2026-13908 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-y |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-w (npm) MAL-2026-13906 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-w |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-q (npm) MAL-2026-13900 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-q |
Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax CVE-2026-32593, GHSA-m7jc-g4rc-jmvh | Medium | 0.3% | 12 Aug, 2026 | Packagist winter/wn-backend-module |
Winter: Stored XSS through Editor Settings custom styles CVE-2026-32258, GHSA-vgp4-2fc4-qff2 | High | 0.4% | 12 Aug, 2026 | Packagist winter/wn-backend-module |
Winter: Stored XSS through Brand Settings custom styles CVE-2026-32257, GHSA-v7cf-8gh9-gxmj | High | 0.4% | 12 Aug, 2026 | Packagist winter/wn-backend-module |
Malicious release: Malicious code in verify-cli (npm) MAL-2026-13882 | Malicious | Not scored | 12 Aug, 2026 | npm verify-cli |
Malicious release: Malicious code in @assetshop/verify-cli (npm) MAL-2026-13881 | Malicious | Not scored | 12 Aug, 2026 | npm @assetshop/verify-cli |
Malicious release: Malicious code in dakumangalsingh (npm) MAL-2026-13879 | Malicious | Not scored | 12 Aug, 2026 | npm dakumangalsingh |
Malicious release: Malicious code in mcp-util-helpers (npm) MAL-2026-13880 | Malicious | Not scored | 12 Aug, 2026 | npm mcp-util-helpers |
Malicious release: Malicious code in @years17/n8n-nodes-helper-utils (npm) MAL-2026-13869 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-helper-utils |
Malicious release: Malicious code in @years17/n8n-nodes-utils-helper-b (npm) MAL-2026-13871 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years17/n8n-nodes-utils-helper-c (npm) MAL-2026-13872 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years17/n8n-nodes-utils-helper (npm) MAL-2026-13870 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-utils-helper |
Malicious release: Malicious code in @years17/n8n-nodes-utils-helper-d (npm) MAL-2026-13873 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-utils-helper-d |
Malicious release: Malicious code in @years17/n8n-nodes-utils-helper-g (npm) MAL-2026-13876 | Malicious | Not scored | 12 Aug, 2026 | npm @years17/n8n-nodes-utils-helper-g |