Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Langflow has Authenticated Code Execution in Agentic Assistant Validation CVE-2026-33873, GHSA-v8hw-mh8c-jxfc, PYSEC-2026-82 | Critical | 1.5% | 26 Mar, 2026 | PyPI langflow |
AVideo has Plaintext Video Password Storage CVE-2026-33867, GHSA-363v-5rh8-23wg | Critical | 0.2% | 26 Mar, 2026 | Packagist wwbn/avideo |
OpenHands is Vulnerable to Command Injection through its Git Diff Handler CVE-2026-33718, GHSA-7h8w-hj9j-8rjw, PYSEC-2026-106 | Critical | 2.0% | 25 Mar, 2026 | PyPI openhands-ai |
n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE CVE-2026-33696, GHSA-mxrg-77hm-89hv | Critical | 0.8% | 25 Mar, 2026 | npm n8n |
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode CVE-2026-33660, GHSA-58qr-rcgv-642v | Critical | 1.0% | 25 Mar, 2026 | npm n8n |
thumbler allows OS Command Injection CVE-2026-26833, GHSA-mvhf-547c-h55r | Critical | 2.4% | 25 Mar, 2026 | npm thumbler |
node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter CVE-2026-26832, GHSA-8j44-735h-w4w2 | Critical | 1.7% | 25 Mar, 2026 | npm node-tesseract-ocr |
textract is vulnerable to OS Command Injection CVE-2026-26831, GHSA-9pcj-m5rr-p28g | Critical | 2.5% | 25 Mar, 2026 | npm textract |
pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter CVE-2026-26830, GHSA-q5mh-72xg-628w | Critical | 2.5% | 25 Mar, 2026 | npm pdf-image |
Two LiteLLM versions published containing credential harvesting malware GHSA-5mg7-485q-xm76 | Critical | Not scored | 25 Mar, 2026 | PyPI litellm |
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution CVE-2026-24159, GHSA-v7v2-m736-cf3c, PYSEC-2026-2675 | Critical | 0.7% | 24 Mar, 2026 | PyPI nemo-toolkit |
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading CVE-2026-24157, GHSA-m4jw-wgmf-889x, PYSEC-2026-2674 | Critical | 0.7% | 24 Mar, 2026 | PyPI nemo-toolkit |
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path` CVE-2026-33768, GHSA-mr6q-rp88-fx84 | Critical | 0.3% | 24 Mar, 2026 | npm @astrojs/vercel |
Aquasecurity Trivy Embedded Malicious Code Vulnerability CVE-2026-33634 | CriticalExploited | 59.7% | 23 Mar, 2026 | |
Citrix NetScaler Out-of-Bounds Read Vulnerability CVE-2026-3055 | CriticalExploited | 91.5% | 23 Mar, 2026 | |
MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL CVE-2026-30849, GHSA-phrq-pc6r-f6gh | Critical | 1.8% | 23 Mar, 2026 | Packagist mantisbt/mantisbt |
AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php CVE-2026-33716, GHSA-9hv9-gvwm-95f2 | Critical | 0.4% | 23 Mar, 2026 | Packagist wwbn/avideo |
jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation CVE-2026-4599, GHSA-5jx8-q4cp-rhh6 | Critical | 0.5% | 23 Mar, 2026 | npm jsrsasign |
AVideo has Unauthenticated SSRF via plugin/Live/test.php CVE-2026-33502, GHSA-3fpm-8rjr-v5mc | Critical | 0.4% | 20 Mar, 2026 | Packagist wwbn/avideo |
AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection CVE-2026-33478, GHSA-687q-32c6-8x68 | Critical | 13.3% | 20 Mar, 2026 | Packagist wwbn/avideo |
AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass) CVE-2026-33352, GHSA-mcj5-6qr4-95fj | Critical | 0.5% | 19 Mar, 2026 | Packagist wwbn/avideo |
AVideo has Unauthenticated SSRF via `webSiteRootURL` Parameter in saveDVR.json.php, Chaining to Verification Bypass CVE-2026-33351, GHSA-5f7v-4f6g-74rj | Critical | 0.4% | 19 Mar, 2026 | Packagist wwbn/avideo |
Langflow has an Arbitrary File Write (RCE) via v2 API CVE-2026-33309, GHSA-g2j9-7rj2-gm6c, PYSEC-2026-79 | Critical | 13.5% | 19 Mar, 2026 | PyPI langflow |
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor CVE-2026-27953, GHSA-f964-whrq-44h8, PYSEC-2026-2247 | Critical | 1.2% | 19 Mar, 2026 | PyPI ormar |
MCP Connect has unauthenticated remote OS command execution via /bridge endpoint GHSA-wvr4-3wq4-gpc5 | Critical | Not scored | 19 Mar, 2026 | npm mcp-bridge |
Arbitrary file write via tar traversal in mlflow BIT-mlflow-2025-15031, CVE-2025-15031, GHSA-fhff-qmm8-h2fp, PYSEC-2026-2656 | Critical | 0.9% | 18 Mar, 2026 | PyPI mlflow |
JustHTML has a Sanitizer Bypass (in Markdown) CVE-2026-8445, GHSA-3rcm-vjrc-p45j | Critical | 0.6% | 18 Mar, 2026 | PyPI justhtml |
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py CVE-2026-33057, GHSA-gjgx-rvqr-6w6v, PYSEC-2026-412 | Critical | 5.3% | 18 Mar, 2026 | PyPI mesop |
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion CVE-2026-33054, GHSA-8qvf-mr4w-9x2c, PYSEC-2026-411 | Critical | 0.7% | 18 Mar, 2026 | PyPI mesop |
ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction CVE-2026-32731, GHSA-mwxc-m426-3f78 | Critical | 0.5% | 18 Mar, 2026 | npm @apostrophecms/import-export |
h3 has a middleware bypass with one gadget CVE-2026-33131, GHSA-3vj8-jmxq-cgj5 | Critical | 0.4% | 18 Mar, 2026 | npm h3 |
h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields CVE-2026-33128, GHSA-22cc-p3c6-wpvm | Critical | 0.6% | 18 Mar, 2026 | npm h3 |
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint CVE-2026-33017, GHSA-vwmf-pq79-vjvx, PYSEC-2026-379 | CriticalExploited | 96.2% | 17 Mar, 2026 | PyPI langflow |
jsPDF has HTML Injection in New Window paths CVE-2026-31938, GHSA-wfv2-pwc8-crg5 | Critical | 0.3% | 17 Mar, 2026 | npm jspdf |
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion CVE-2026-32817, GHSA-rmpj-3x5m-9m5f | Critical | 0.3% | 16 Mar, 2026 | Packagist admidio/admidio |
OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection CVE-2026-32917, GHSA-g2f6-pwvx-r275 | Critical | 2.0% | 16 Mar, 2026 | npm openclaw |
OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval CVE-2026-32987, GHSA-63f5-hhc7-cx6p | Critical | 0.4% | 16 Mar, 2026 | npm openclaw |
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist` CVE-2026-32633, GHSA-r297-p3v4-wp8m, PYSEC-2026-343 | Critical | 0.5% | 16 Mar, 2026 | PyPI Glances PyPI glances |
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements CVE-2026-32611, GHSA-49g7-2ww7-3vf5, PYSEC-2026-2170 | Critical | 0.3% | 16 Mar, 2026 | PyPI Glances PyPI glances |
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack CVE-2026-28500, GHSA-hqmj-h5c6-369m, PYSEC-2026-103 | Critical | 0.3% | 16 Mar, 2026 | PyPI onnx |
Authlib JWS JWK Header Injection: Signature Verification Bypass CVE-2026-27962, GHSA-wvwj-cvrp-7pv5, PYSEC-2026-287 | Critical | 0.6% | 16 Mar, 2026 | PyPI authlib |
OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes CVE-2026-22172, GHSA-rqpp-rjj8-7wv8 | Critical | 0.6% | 13 Mar, 2026 | npm openclaw |
`OpenClaw: session_status` let sandboxed subagents access parent or sibling session state CVE-2026-32918, GHSA-wcxr-59v9-rxr8 | Critical | 0.1% | 13 Mar, 2026 | npm openclaw |
Apollo Federation vulnerable to prototype pollution via incomplete key sanitization CVE-2026-32621, GHSA-pfjj-6f4p-rvmh | Critical | 0.5% | 13 Mar, 2026 | npm @apollo/federation-internals npm @apollo/gateway npm @apollo/query-planner |
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters CVE-2026-32306, GHSA-p5g2-jm85-8g35 | Critical | 0.7% | 13 Mar, 2026 | npm oneuptime |
Locutus vulnerable to RCE via unsanitized input in create_function() CVE-2026-32304, GHSA-vh9h-29pq-r5m8 | Critical | 0.6% | 13 Mar, 2026 | npm locutus |
OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity CVE-2026-32978, GHSA-qc36-x95h-7j53 | Critical | 0.2% | 13 Mar, 2026 | npm openclaw |
OpenClaw: Leaf subagents could steer sibling sessions across sandbox boundaries CVE-2026-32915, GHSA-4w7m-58cg-cmff | Critical | 0.1% | 13 Mar, 2026 | npm openclaw |
OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE CVE-2026-32922, GHSA-4jpw-hj22-2xmc | Critical | 0.7% | 13 Mar, 2026 | npm openclaw |
OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes CVE-2026-32916, GHSA-xw77-45gv-p728 | Critical | 0.5% | 13 Mar, 2026 | npm openclaw |