Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS CVE-2026-50272, GHSA-wxqq-gcq8-c443 | High | 0.8% | 15 Jul, 2026 | npm dd-trace |
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS CVE-2026-50271, GHSA-mw54-j2v2-42hr, PYSEC-2026-3461 | High | 0.8% | 15 Jul, 2026 | PyPI ddtrace |
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization CVE-2026-105315, GHSA-r3hx-x5rh-p9vv | High | 0.3% | 15 Jul, 2026 | PyPI django-haystack |
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint CVE-2026-54457, GHSA-824w-x939-6cmc, PYSEC-2026-3541 | High | 0.4% | 15 Jul, 2026 | PyPI tensorzero |
obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete GHSA-62gx-5q78-wrvx | High | Not scored | 15 Jul, 2026 | npm obsidian-local-rest-api |
MCP Python SDK: WebSocket server transport does not support Host/Origin validation CVE-2026-59950, GHSA-vj7q-gjh5-988w, PYSEC-2026-3483 | High | 0.2% | 15 Jul, 2026 | PyPI mcp |
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade CVE-2026-56679, GHSA-vmjq-hvgq-2wv4 | High | 0.4% | 15 Jul, 2026 | npm 9router |
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks CVE-2026-52870, GHSA-hvrp-rf83-w775, PYSEC-2026-3481 | High | 0.4% | 15 Jul, 2026 | PyPI mcp |
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal CVE-2026-52869, GHSA-jpw9-pfvf-9f58, PYSEC-2026-3482 | High | 0.5% | 15 Jul, 2026 | PyPI mcp |
jsii-diff: Command Injection via npm: package argument CVE-2026-15895, GHSA-wcx4-wpfv-mc5c | High | 1.1% | 15 Jul, 2026 | npm jsii-diff |
MantisBT: Stored XSS in print_all_bug_page_word.php CVE-2026-62944, GHSA-h2wf-967x-gxvw | High | Not scored | 15 Jul, 2026 | Packagist mantisbt/mantisbt |
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters CVE-2026-58659, GHSA-qqmf-gpg7-g8gw, PYSEC-2026-3624, PYSEC-2026-3967 | High | 0.6% | 15 Jul, 2026 | PyPI lightning PyPI pytorch-lightning |
@better-auth/sso: SSO provider may allow registration for any org member without a checking their role CVE-2026-53515, GHSA-gv74-j8m3-fg5f | High | 0.4% | 15 Jul, 2026 | npm @better-auth/sso |
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths CVE-2026-54491, GHSA-6qvr-wjmv-v8mm | High | 0.4% | 15 Jul, 2026 | Packagist phanan/koel |
LangBot: Authenticated RCE Via MCP Configuration CVE-2026-54449, GHSA-3pvh-63gf-j9mw, PYSEC-2026-3473 | High | 0.7% | 15 Jul, 2026 | PyPI langbot |
garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store CVE-2026-54447, GHSA-wjhr-76vg-2hvc, PYSEC-2026-3467 | High | 0.2% | 15 Jul, 2026 | PyPI garminconnect |
Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations CVE-2026-54493, GHSA-6p96-cfg5-4vhp | High | 0.4% | 15 Jul, 2026 | Packagist phanan/koel |
MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php CVE-2026-49273, GHSA-v84x-qvhg-f36r | High | Not scored | 15 Jul, 2026 | Packagist mantisbt/mantisbt |
MantisBT: SQL Injection via history_order Configuration Value CVE-2026-47142, GHSA-mw6p-33vw-46cc | High | Not scored | 15 Jul, 2026 | Packagist mantisbt/mantisbt |
Directus: Authorization-dependent response served from unsegmented cache key CVE-2026-61836, GHSA-c6w9-5g5j-jh2p | High | 0.5% | 15 Jul, 2026 | npm directus |
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import CVE-2026-61835, GHSA-j5h6-vqc3-phqh | High | 0.4% | 15 Jul, 2026 | npm directus |
Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer CVE-2026-61449, GHSA-8h9x-89f2-m7x3 | High | 0.3% | 15 Jul, 2026 | Packagist getgrav/grav |
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification CVE-2026-61446, GHSA-m6wp-h223-4c8g, PYSEC-2026-4271 | High | 0.3% | 15 Jul, 2026 | PyPI praisonaiagents |
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation CVE-2026-61443, GHSA-c44f-37qr-gw3f, PYSEC-2026-4270 | High | 0.6% | 15 Jul, 2026 | PyPI praisonaiagents |
PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization CVE-2026-61440, GHSA-xxgv-vgvj-qvxh, PYSEC-2026-4264 | High | 0.3% | 15 Jul, 2026 | PyPI praisonai-platform |
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox CVE-2026-61438, GHSA-26mh-57q7-jfvr | High | 0.3% | 15 Jul, 2026 | PyPI praisonai |
PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents CVE-2026-61436, GHSA-7c92-x8vg-4258, PYSEC-2026-4252 | High | 0.4% | 15 Jul, 2026 | PyPI praisonai |
PraisonAI: Call API localhost-only authentication bypass via spoofed Host header CVE-2026-61435, GHSA-2gpf-2492-q9jh, PYSEC-2026-4247 | High | 0.5% | 15 Jul, 2026 | PyPI praisonai |
PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source CVE-2026-61433, GHSA-79fv-7hq9-w7xg, PYSEC-2026-4251 | High | 0.2% | 15 Jul, 2026 | PyPI praisonai |
PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure CVE-2026-61430, GHSA-qg25-6gc4-48mg, PYSEC-2026-4272 | High | 0.3% | 15 Jul, 2026 | PyPI praisonaiagents |
PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface CVE-2026-61427, GHSA-hc5v-gxvj-58wh, PYSEC-2026-4257 | High | 0.4% | 15 Jul, 2026 | PyPI praisonai |
PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend CVE-2026-60085, GHSA-5r6c-gj4g-r697, PYSEC-2026-4250 | High | 0.3% | 15 Jul, 2026 | PyPI praisonai |
NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode CVE-2026-54446, GHSA-x9vc-9ffq-p3gj, PYSEC-2026-3490 | High | 0.6% | 14 Jul, 2026 | PyPI netlicensing-mcp |
SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 | HighExploited | 11.8% | 14 Jul, 2026 | |
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField CVE-2026-54087, GHSA-8559-gwj3-q37r | High | 0.4% | 14 Jul, 2026 | Packagist easycorp/easyadmin-bundle |
FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export CVE-2026-45263, GHSA-2p5x-4jr6-x5jg | High | Not scored | 14 Jul, 2026 | Packagist facturascripts/facturascripts |
pyasn1: Uncontrolled resource consumption when converting decoded REAL values CVE-2026-59886, GHSA-hm4w-wwcw-mr6r, PYSEC-2026-3457 | High | 0.6% | 14 Jul, 2026 | PyPI pyasn1 |
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service CVE-2026-59885, GHSA-8ppf-4f7h-5ppj, PYSEC-2026-3456 | High | 0.6% | 14 Jul, 2026 | PyPI pyasn1 |
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs CVE-2026-59884, GHSA-m4p7-r5rc-7g4j, PYSEC-2026-3455 | High | 0.6% | 14 Jul, 2026 | PyPI pyasn1 |
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() BIT-pillow-2026-59200, CVE-2026-59200, GHSA-jjj6-mw9f-p565, PYSEC-2026-3495 | High | 0.4% | 14 Jul, 2026 | PyPI Pillow PyPI pillow |
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` BIT-pillow-2026-59197, CVE-2026-59197, GHSA-xj96-63gp-2gmr, PYSEC-2026-3454 | High | 0.4% | 14 Jul, 2026 | PyPI Pillow PyPI pillow |
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability CVE-2026-56155 | HighExploited | 0.3% | 14 Jul, 2026 | |
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) BIT-pillow-2026-54058, CVE-2026-54058, GHSA-62p4-gmf7-7g93, PYSEC-2026-3493 | High | 0.5% | 14 Jul, 2026 | PyPI pillow |
FacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents CVE-2026-45693, GHSA-cv65-7cg8-r623 | High | Not scored | 14 Jul, 2026 | Packagist facturascripts/facturascripts |
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch BIT-pillow-2026-59205, CVE-2026-59205, GHSA-9hw9-ch79-4vh6, PYSEC-2026-3453 | High | 0.4% | 14 Jul, 2026 | PyPI pillow |
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service BIT-pillow-2026-59204, CVE-2026-59204, GHSA-vjc4-5qp5-m44j, PYSEC-2026-3496 | High | 0.4% | 14 Jul, 2026 | PyPI pillow |
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service BIT-pillow-2026-59203, CVE-2026-59203, GHSA-pg7v-jwj7-p798, PYSEC-2026-3452 | High | 0.4% | 14 Jul, 2026 | PyPI pillow |
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow BIT-pillow-2026-59199, CVE-2026-59199, GHSA-6r8x-57c9-28j4, PYSEC-2026-3451 | High | 0.4% | 14 Jul, 2026 | PyPI Pillow PyPI pillow |
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images BIT-pillow-2026-59198, CVE-2026-59198, GHSA-fj7v-r99m-22gq, PYSEC-2026-3494 | High | 0.3% | 14 Jul, 2026 | PyPI Pillow PyPI pillow |
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure CVE-2026-55651, GHSA-4vmm-5qvc-w5p7 | High | 0.2% | 14 Jul, 2026 | Packagist alextselegidis/easyappointments |