Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3` BIT-tensorflow-2022-36026, CVE-2022-36026, GHSA-9cr2-8pwr-fhfq, PYSEC-2026-3149, PYSEC-2026-3304, PYSEC-2026-976 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange` BIT-tensorflow-2022-35974, CVE-2022-35974, GHSA-vgvh-2pf4-jr2x, PYSEC-2026-1039, PYSEC-2026-3246, PYSEC-2026-3373 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedMatMul` BIT-tensorflow-2022-35973, CVE-2022-35973, GHSA-689c-r7h2-fv9v, PYSEC-2026-3119, PYSEC-2026-3285, PYSEC-2026-959 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedBiasAdd` BIT-tensorflow-2022-35972, CVE-2022-35972, GHSA-4pc4-m9mj-v2r9, PYSEC-2026-3101, PYSEC-2026-3272, PYSEC-2026-948 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars` BIT-tensorflow-2022-35971, CVE-2022-35971, GHSA-9fpg-838v-wpv7, PYSEC-2026-3150, PYSEC-2026-3305, PYSEC-2026-977 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedInstanceNorm` BIT-tensorflow-2022-35970, CVE-2022-35970, GHSA-g35r-369w-3fqp, PYSEC-2026-3183, PYSEC-2026-3326, PYSEC-2026-995 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput` BIT-tensorflow-2022-35969, CVE-2022-35969, GHSA-q2c3-jpmc-gfjx, PYSEC-2026-1028, PYSEC-2026-3227, PYSEC-2026-3360 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad` BIT-tensorflow-2022-35968, CVE-2022-35968, GHSA-2475-53vw-vp25, PYSEC-2026-3083, PYSEC-2026-3263, PYSEC-2026-940 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedAdd` BIT-tensorflow-2022-35967, CVE-2022-35967, GHSA-v6h3-348g-6h5x, PYSEC-2026-1037, PYSEC-2026-3244, PYSEC-2026-3371 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `QuantizedAvgPool` BIT-tensorflow-2022-35966, CVE-2022-35966, GHSA-4w68-4x85-mjj9, PYSEC-2026-3103, PYSEC-2026-3273, PYSEC-2026-949 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `LowerBound` and `UpperBound` BIT-tensorflow-2022-35965, CVE-2022-35965, GHSA-qxpx-j395-pw36, PYSEC-2026-1030, PYSEC-2026-3233, PYSEC-2026-3363 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to segfault in `BlockLSTMGradV2` BIT-tensorflow-2022-35964, CVE-2022-35964, GHSA-f7r5-q7cx-h668, PYSEC-2026-3170, PYSEC-2026-3318, PYSEC-2026-988 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant` BIT-tensorflow-2022-36018, CVE-2022-36018, GHSA-m6cv-4fmf-66xf, PYSEC-2026-1016, PYSEC-2026-3212, PYSEC-2026-3348 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` BIT-tensorflow-2022-36019, CVE-2022-36019, GHSA-9j4v-pp28-mxv7, PYSEC-2026-3152, PYSEC-2026-3306, PYSEC-2026-978 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions BIT-tensorflow-2022-36027, CVE-2022-36027, GHSA-79h2-q768-fpxr, PYSEC-2026-3128, PYSEC-2026-3291, PYSEC-2026-965 | High | 0.8% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
SFTPGo vulnerable to recovery codes abuse CVE-2022-36071, GHSA-54qx-8p8w-xhg8, GO-2022-0964 | High | 0.5% | 16 Sep, 2022 | Go github.com/drakkan/sftpgo Go github.com/drakkan/sftpgo/v2 |
Go-CVSS has Out-of-bounds Read vulnerability in ParseVector function CVE-2022-39213, GHSA-xhmf-mmv2-4hhx, GO-2022-1002 | High | 1.7% | 16 Sep, 2022 | Go github.com/pandatix/go-cvss |
TensorFlow vulnerable to `CHECK` failures in `FractionalAvgPoolGrad` BIT-tensorflow-2022-35963, CVE-2022-35963, GHSA-84jm-4cf3-9jfm, PYSEC-2026-3133, PYSEC-2026-3296, PYSEC-2026-969 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation BIT-tensorflow-2022-35960, CVE-2022-35960, GHSA-v5xg-3q2c-c2r4, PYSEC-2026-1036, PYSEC-2026-3243, PYSEC-2026-3370 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad` BIT-tensorflow-2022-35959, CVE-2022-35959, GHSA-wxjj-cgcx-r3vq, PYSEC-2026-1046, PYSEC-2026-3257, PYSEC-2026-3380 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failures in `UnbatchGradOp` BIT-tensorflow-2022-35952, CVE-2022-35952, GHSA-h5vq-gw2c-pq47, PYSEC-2026-1005, PYSEC-2026-3198, PYSEC-2026-3337 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp` BIT-tensorflow-2022-35941, CVE-2022-35941, GHSA-mgmh-g2v6-mqw5, PYSEC-2026-1019, PYSEC-2026-3215, PYSEC-2026-3351 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to Int overflow in `RaggedRangeOp` BIT-tensorflow-2022-35940, CVE-2022-35940, GHSA-x989-q2pq-4q5x, PYSEC-2026-1047, PYSEC-2026-3259, PYSEC-2026-3381 | High | 0.7% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation BIT-tensorflow-2022-35935, CVE-2022-35935, GHSA-97p7-w86h-vcf9, PYSEC-2026-3144, PYSEC-2026-3302, PYSEC-2026-974 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows BIT-tensorflow-2022-35934, CVE-2022-35934, GHSA-f4w6-h4f5-wx45, PYSEC-2026-3168, PYSEC-2026-3316, PYSEC-2026-987 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Harbor fails to validate the user permissions when viewing Webhook policies BIT-harbor-2022-31666, CVE-2022-31666, GHSA-8hwq-5f22-jfr3, GHSA-jf8p-3vjh-pq94 | High | 0.5% | 16 Sep, 2022 | Go github.com/goharbor/harbor |
Harbor fails to validate the user permissions when updating tag retention policies BIT-harbor-2022-31670, CVE-2022-31670, GHSA-3637-v6vq-xqqw | High | 0.5% | 16 Sep, 2022 | Go github.com/goharbor/harbor |
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross` BIT-tensorflow-2022-35997, CVE-2022-35997, GHSA-p7hr-f446-x6qf, PYSEC-2026-1024, PYSEC-2026-3220, PYSEC-2026-3356 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput` BIT-tensorflow-2022-35999, CVE-2022-35999, GHSA-37jf-mjv6-xfqw, PYSEC-2026-3092, PYSEC-2026-3269, PYSEC-2026-946 | High | 0.5% | 16 Sep, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Helm Controller denial of service BIT-flux-2022-36049, BIT-helm-2022-36049, CVE-2022-36049, GHSA-p2g7-xwvr-rrw3 | High | 1.5% | 16 Sep, 2022 | Go github.com/fluxcd/flux2 Go github.com/fluxcd/helm-controller |
Talos worker join token can be used to get elevated access level to the Talos API CVE-2022-36103, GHSA-7hgc-php5-77qq, GO-2022-0995 | High | 0.7% | 16 Sep, 2022 | Go github.com/talos-systems/talos |
Talos vulnerable dependency due to race condition in Linux kernel's IP framework XFRM GHSA-34vw-m4rh-r36p | High | Not scored | 16 Sep, 2022 | Go github.com/talos-systems/talos |
steal vulnerable to Regular Expression Denial of Service via input variable CVE-2022-37260, GHSA-7f3x-2wcx-hww8 | High | 1.3% | 15 Sep, 2022 | npm steal |
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments CVE-2022-37262, GHSA-28v4-jf82-jvj8 | High | 1.4% | 15 Sep, 2022 | npm steal |
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access CVE-2022-3221, GHSA-vq4h-xrwc-m639, PYSEC-2022-278 | High | 0.8% | 15 Sep, 2022 | PyPI rdiffweb |
Netmaker vulnerable to Insufficient Granularity of Access Control CVE-2022-36110, GHSA-ggf6-638m-vqmg, GO-2022-0986 | High | 0.9% | 15 Sep, 2022 | Go github.com/gravitl/netmaker |
Dendrite signature checks not applied to some retrieved missing events CVE-2022-39200, GHSA-pfw4-xjgm-267c, GO-2022-0989 | High | 0.4% | 15 Sep, 2022 | Go github.com/matrix-org/dendrite |
Pageflow vulnerable to insecure direct object reference in membership update endpoint GHSA-qcqv-38jg-2r43 | High | Not scored | 15 Sep, 2022 | RubyGems pageflow |
Pageflow vulnerable to sensitive user data extraction via Ransack query injection GHSA-wrrw-crp8-979q | High | Not scored | 15 Sep, 2022 | RubyGems pageflow |
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification CVE-2022-2989, GHSA-4wjj-jwc9-2x96 | High | 0.3% | 14 Sep, 2022 | Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification CVE-2022-2990, GHSA-fjm8-m7m6-2fjp, GO-2022-1008 | High | 0.3% | 14 Sep, 2022 | Go github.com/containers/buildah |
LIEF vulnerable to heap based buffer overflow CVE-2022-38306, GHSA-52xx-r3g2-p8jm, PYSEC-2022-274 | High | 0.3% | 13 Sep, 2022 | PyPI lief |
LIEF vulnerable to heap based buffer overflow via print_binary function CVE-2022-38495, GHSA-42vg-2q93-fj6j, PYSEC-2022-276 | High | 0.3% | 13 Sep, 2022 | PyPI lief |
Parsing issue in matrix-org/node-irc leading to room takeovers CVE-2022-39203, GHSA-xvqg-mv25-rwvw | High | 0.9% | 13 Sep, 2022 | npm matrix-appservice-irc |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CVE-2022-37969 | HighExploited | 28.5% | 13 Sep, 2022 | |
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling BIT-typo3-2022-36104, CVE-2022-36104, GHSA-fffr-7x4x-f98q | High | 1.6% | 13 Sep, 2022 | Packagist typo3/cms Packagist typo3/cms-core |
OPA Compiler: Bypass of WithUnsafeBuiltins using "with" keyword to mock functions CVE-2022-36085, GHSA-f524-rf33-2jjr, GO-2022-0978 | High | 1.6% | 13 Sep, 2022 | Go github.com/open-policy-agent/opa |
rdiffweb contains Weak Password Requirements CVE-2022-3179, GHSA-mp5p-g2jv-r8qw, PYSEC-2022-272 | High | 1.0% | 13 Sep, 2022 | PyPI rdiffweb |
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2022-3174, GHSA-mjw4-xvx6-3grg, PYSEC-2022-271 | High | 0.7% | 13 Sep, 2022 | PyPI rdiffweb |
Shopware access control list bypassed via crafted specific URLs CVE-2022-36102, GHSA-qc43-pgwq-3q2q | High | 0.8% | 12 Sep, 2022 | Packagist shopware/shopware |