Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions BIT-consul-2021-41803, CVE-2021-41803, GHSA-hr3v-8cp3-68rf, GO-2024-2683 | High | 1.1% | 25 Sep, 2022 | Go github.com/hashicorp/consul |
secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery CVE-2022-41340, GHSA-q3f4-9h4p-vgr3 | High | 0.7% | 24 Sep, 2022 | npm @lionello/secp256k1-js |
Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library GHSA-gmhj-xjfh-cf6m | High | Not scored | 23 Sep, 2022 | Go github.com/mohammed90/caddy-ssh |
lakeFS vulnerable to authenticated users deleting files they are not authorized to delete GHSA-28q9-9c3g-v3f9, GO-2022-1019 | High | Not scored | 23 Sep, 2022 | Go github.com/treeverse/lakefs |
hoek subject to prototype pollution via the clone function. CVE-2020-36604, GHSA-c429-5p7v-vgjp | High | 1.2% | 23 Sep, 2022 | npm @hapi/hoek npm hoek |
rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed CVE-2022-3274, GHSA-gmj8-84r4-h46j, PYSEC-2022-289 | High | 0.5% | 22 Sep, 2022 | PyPI rdiffweb |
Grafana folders admin only permission privilege escalation BIT-grafana-2022-36062, CVE-2022-36062, GHSA-p978-56hq-r492, GO-2024-2854 | High | 0.7% | 22 Sep, 2022 | Go github.com/grafana/grafana |
ICEcoder vulnerable to Path Traversal CVE-2022-34026, GHSA-fvf5-xp83-vrqp | High | 1.8% | 22 Sep, 2022 | Packagist icecoder/icecoder |
protobuf-cpp and protobuf-python have potential Denial of Service issue CVE-2022-1941, GHSA-8gq9-2x98-w8hf, PYSEC-2026-899 | High | 1.5% | 22 Sep, 2022 | PyPI protobuf |
autogluon.multimodal vulnerable to unsafe YAML deserialization GHSA-6h2x-4gjf-jc5w | High | Not scored | 21 Sep, 2022 | PyPI autogluon-multimodal PyPI autogluon.multimodal |
arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm. CVE-2022-39224, GHSA-88cv-mj24-8w3q | High | 1.5% | 21 Sep, 2022 | RubyGems arr-pm |
OctoPrint Improper Privilege Management vulnerability CVE-2022-3068, GHSA-2p75-q37p-f852, PYSEC-2022-283 | High | 0.5% | 21 Sep, 2022 | PyPI OctoPrint PyPI octoprint |
Apache Airflow vulnerable to Use of Externally-Controlled Format String BIT-airflow-2022-40604, CVE-2022-40604, GHSA-5rp4-749p-vx26, PYSEC-2022-279 | High | 2.1% | 21 Sep, 2022 | PyPI apache-airflow |
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability CVE-2022-32917 | HighExploited | 5.6% | 20 Sep, 2022 | |
Fastly Compute@Edge JS Runtime has fixed random number seed during compilation CVE-2022-39218, GHSA-cmr8-5w4c-44v8 | High | 0.9% | 20 Sep, 2022 | npm @fastly/js-compute |
steal Inefficient Regular Expression Complexity vulnerability via string variable CVE-2022-37259, GHSA-rgqx-226f-2xp4 | High | 1.3% | 20 Sep, 2022 | npm steal |
WASM3 Improper Input Validation vulnerability CVE-2022-39974, GHSA-crf8-h2wq-2h9x, PYSEC-2022-43058 | High | 0.9% | 20 Sep, 2022 | PyPI pywasm3 crates.io wasm3 |
CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure CVE-2022-2995, GHSA-phjr-8j92-w5v7, GO-2022-1014 | High | 0.4% | 20 Sep, 2022 | Go github.com/cri-o/cri-o |
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 | HighExploited | 3.4% | 19 Sep, 2022 | |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` BIT-tensorflow-2022-35990, CVE-2022-35990, GHSA-h7ff-cfc9-wmmh, PYSEC-2026-1006, PYSEC-2026-3199, PYSEC-2026-3338 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `MaxPool` BIT-tensorflow-2022-35989, CVE-2022-35989, GHSA-j43h-pgmg-5hjq, PYSEC-2026-1011, PYSEC-2026-3205, PYSEC-2026-3343 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank` BIT-tensorflow-2022-35988, CVE-2022-35988, GHSA-9vqj-64pv-w55c, PYSEC-2026-3156, PYSEC-2026-3308, PYSEC-2026-980 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `RaggedBincount` BIT-tensorflow-2022-35986, CVE-2022-35986, GHSA-wr9v-g9vf-c74v, PYSEC-2026-938 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow |
TensorFlow vulnerable to `CHECK` fail in `LRNGrad` BIT-tensorflow-2022-35985, CVE-2022-35985, GHSA-9942-r22v-78cp, PYSEC-2026-3147, PYSEC-2026-3303, PYSEC-2026-975 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal` BIT-tensorflow-2022-35984, CVE-2022-35984, GHSA-p2xf-8hgm-hpw5, PYSEC-2026-1023, PYSEC-2026-3219, PYSEC-2026-3355 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices` BIT-tensorflow-2022-35983, CVE-2022-35983, GHSA-m6vp-8q9j-whx4, PYSEC-2026-1017, PYSEC-2026-3213, PYSEC-2026-3349 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `SparseBincount` BIT-tensorflow-2022-35982, CVE-2022-35982, GHSA-397c-5g2j-qxpv, PYSEC-2026-3093, PYSEC-2026-3270, PYSEC-2026-947 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad` BIT-tensorflow-2022-35981, CVE-2022-35981, GHSA-vxv8-r8q2-63xw, PYSEC-2026-1041, PYSEC-2026-3250, PYSEC-2026-3375 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6` BIT-tensorflow-2022-35979, CVE-2022-35979, GHSA-v7vw-577f-vp8x, PYSEC-2026-1038, PYSEC-2026-3245, PYSEC-2026-3372 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` BIT-tensorflow-2022-35991, CVE-2022-35991, GHSA-vm7x-4qhj-rrcq, PYSEC-2026-1040, PYSEC-2026-3248, PYSEC-2026-3374 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor` BIT-tensorflow-2022-35992, CVE-2022-35992, GHSA-9v8w-xmr4-wgxp, PYSEC-2026-3155, PYSEC-2026-3307, PYSEC-2026-979 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `SetSize` BIT-tensorflow-2022-35993, CVE-2022-35993, GHSA-wq6q-6m32-9rv9, PYSEC-2026-1044, PYSEC-2026-3255, PYSEC-2026-3378 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `CollectiveGather` BIT-tensorflow-2022-35994, CVE-2022-35994, GHSA-fhfc-2q7x-929f, PYSEC-2026-3172, PYSEC-2026-3320, PYSEC-2026-990 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to floating point exception in `Conv2D` BIT-tensorflow-2022-35996, CVE-2022-35996, GHSA-q5jv-m6qw-5g37, PYSEC-2026-1029, PYSEC-2026-3228, PYSEC-2026-3361 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `EmptyTensorList` BIT-tensorflow-2022-35998, CVE-2022-35998, GHSA-qhw4-wwr7-gjc5, PYSEC-2026-937 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow |
TensorFlow vulnerable to null dereference on MLIR on empty function attributes BIT-tensorflow-2022-36000, CVE-2022-36000, GHSA-fqxc-pvf8-2w9v, PYSEC-2026-3177, PYSEC-2026-3322, PYSEC-2026-991 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes` BIT-tensorflow-2022-36001, CVE-2022-36001, GHSA-jqm7-m5q7-3hm5, PYSEC-2026-1014, PYSEC-2026-3209, PYSEC-2026-3346 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Unbatch` BIT-tensorflow-2022-36002, CVE-2022-36002, GHSA-mh3m-62v7-68xg, PYSEC-2026-1020, PYSEC-2026-3216, PYSEC-2026-3352 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` BIT-tensorflow-2022-36013, CVE-2022-36013, GHSA-828c-5j5q-vrjq, PYSEC-2026-3132, PYSEC-2026-3295, PYSEC-2026-968 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to null dereference on MLIR on empty function attributes BIT-tensorflow-2022-36011, CVE-2022-36011, GHSA-fv43-93gv-vm8f, PYSEC-2026-3180, PYSEC-2026-3325, PYSEC-2026-994 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `Requantize` BIT-tensorflow-2022-36017, CVE-2022-36017, GHSA-wqmc-pm8c-2jhc, PYSEC-2026-1045, PYSEC-2026-3256, PYSEC-2026-3379 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2` BIT-tensorflow-2022-36003, CVE-2022-36003, GHSA-cv2p-32v3-vhwq, PYSEC-2026-3162, PYSEC-2026-3311, PYSEC-2026-982 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsGradient` BIT-tensorflow-2022-36005, CVE-2022-36005, GHSA-r26c-679w-mrjm, PYSEC-2026-1031, PYSEC-2026-3234, PYSEC-2026-3364 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2` BIT-tensorflow-2022-35995, CVE-2022-35995, GHSA-g9h5-vr8m-x2h4, PYSEC-2026-3186, PYSEC-2026-3329, PYSEC-2026-998 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma` BIT-tensorflow-2022-36004, CVE-2022-36004, GHSA-mv8m-8x97-937q, PYSEC-2026-1022, PYSEC-2026-3218, PYSEC-2026-3354 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` BIT-tensorflow-2022-36016, CVE-2022-36016, GHSA-g468-qj8g-vcjc, PYSEC-2026-3184, PYSEC-2026-3327, PYSEC-2026-996 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr` BIT-tensorflow-2022-36014, CVE-2022-36014, GHSA-7j3m-8g3c-9qqq, PYSEC-2026-3129, PYSEC-2026-3292, PYSEC-2026-966 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to integer overflow in math ops BIT-tensorflow-2022-36015, CVE-2022-36015, GHSA-rh87-q4vg-m45j, PYSEC-2026-1033, PYSEC-2026-3237, PYSEC-2026-3367 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to assertion fail on MLIR empty edge names BIT-tensorflow-2022-36012, CVE-2022-36012, GHSA-jvhc-5hhr-w3v5, PYSEC-2026-1015, PYSEC-2026-3210, PYSEC-2026-3347 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `DenseBincount` BIT-tensorflow-2022-35987, CVE-2022-35987, GHSA-w62h-8xjm-fv49, PYSEC-2026-1043, PYSEC-2026-3252, PYSEC-2026-3377 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |