Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls CVE-2026-61445, GHSA-9mp3-24cc-77mg, PYSEC-2026-4253 | Critical | 0.6% | 11 Jul, 2026 | PyPI praisonai |
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass CVE-2026-61442, GHSA-c78w-2q4r-68r7, PYSEC-2026-4262 | High | 0.3% | 11 Jul, 2026 | PyPI praisonai-platform |
PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats CVE-2026-61439, GHSA-fj8f-m44g-c479, PYSEC-2026-4255 | High | 0.3% | 11 Jul, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass CVE-2026-61429, GHSA-6g59-gm2v-qhvq, PYSEC-2026-4269 | High | 0.3% | 11 Jul, 2026 | PyPI praisonaiagents |
PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing CVE-2026-61428, GHSA-qj9c-59p6-8cgx, PYSEC-2026-4259 | High | 0.3% | 11 Jul, 2026 | PyPI praisonai |
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure CVE-2026-61426, GHSA-6wjp-v33h-5cvq | High | 0.4% | 11 Jul, 2026 | npm praisonai |
PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL CVE-2026-60090, GHSA-wf65-4jjx-q444, PYSEC-2026-4260 | Critical | 0.7% | 11 Jul, 2026 | PyPI praisonai |
PraisonAI: Project custom command templates can read outside-workspace files into model prompts CVE-2026-60088, GHSA-xpx6-x8c2-mw5w, PYSEC-2026-4261 | Medium | 0.2% | 11 Jul, 2026 | PyPI praisonai |
Malicious release: Malicious code in authvaultx (npm) GHSA-frr6-2jc6-6fhr, MAL-2026-10185 | Malicious | Not scored | 11 Jul, 2026 | npm authvaultx |
Malicious release: Malicious code in jscrambler (npm) GHSA-v3g3-4x77-rw68, MAL-2026-10187 | Malicious | Not scored | 11 Jul, 2026 | npm jscrambler |
Malicious release: Malicious code in polymarket-mcp-v2 (npm) MAL-2026-10481 | Malicious | Not scored | 11 Jul, 2026 | npm polymarket-mcp-v2 |
Malicious release: Malicious code in @uwr/colors (npm) GHSA-8rcq-736v-r8j8, MAL-2026-10179 | Malicious | Not scored | 10 Jul, 2026 | npm @uwr/colors |
Malicious release: Malicious code in fkext-browser-min (npm) GHSA-rc5q-c5vp-6g46, MAL-2026-10183 | Malicious | Not scored | 10 Jul, 2026 | npm fkext-browser-min |
Malicious release: Malicious code in @broadpeak/smartlib-ad (npm) MAL-2026-10178 | Malicious | Not scored | 10 Jul, 2026 | npm @broadpeak/smartlib-ad |
Malicious release: Malicious code in consumerweb (npm) GHSA-5jfq-x73h-v53x, MAL-2026-10181 | Malicious | Not scored | 10 Jul, 2026 | npm consumerweb |
Malicious release: Malicious code in express-guardian (npm) MAL-2026-10182 | Malicious | Not scored | 10 Jul, 2026 | npm express-guardian |
Malicious release: Malicious code in mongoose-schema-unique (npm) MAL-2026-10184 | Malicious | Not scored | 10 Jul, 2026 | npm mongoose-schema-unique |
Malicious release: Malicious code in auth-next-gen (npm) GHSA-8qpp-8j53-4wh7, MAL-2026-10180 | Malicious | Not scored | 10 Jul, 2026 | npm auth-next-gen |
Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS CVE-2026-57584, GHSA-x7rj-f32v-7jjg | High | 0.5% | 10 Jul, 2026 | Packagist phalcon/cphalcon |
Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel) CVE-2026-54736, GHSA-8jqh-95g6-7jpj | High | 0.2% | 10 Jul, 2026 | Packagist phalcon/cphalcon |
TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation GHSA-g936-7jqj-mwv8, GO-2026-5969 | Critical | Not scored | 10 Jul, 2026 | Go github.com/almeidapaulopt/tsdproxy |
melange: Incomplete package integrity verification allows data section substitution CVE-2026-54174, GHSA-fpg8-7664-jc5q, GO-2026-5968 | High | 0.2% | 10 Jul, 2026 | Go chainguard.dev/apko Go chainguard.dev/melange |
Malicious release: Malicious code in @jaymara/jsononifier (npm) MAL-2026-10177 | Malicious | Not scored | 10 Jul, 2026 | npm @jaymara/jsononifier |
Malicious release: Malicious code in chai-as-doc (npm) MAL-2026-10175 | Malicious | Not scored | 10 Jul, 2026 | npm chai-as-doc |
Malicious release: Malicious code in uncaxss (npm) MAL-2026-10176 | Malicious | Not scored | 10 Jul, 2026 | npm uncaxss |
Excon does not redact additional sensitive/risky headers when following redirects CVE-2026-54171, GHSA-48rx-c7pg-q66r | Medium | 0.4% | 10 Jul, 2026 | RubyGems excon |
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset GHSA-h4g2-xfmw-q2c9 | High | Not scored | 10 Jul, 2026 | PyPI clauster |
Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input CVE-2026-54163, GHSA-rqq5-2gf9-4w4q | Medium | 0.2% | 10 Jul, 2026 | RubyGems secure_headers |
SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content CVE-2026-50551, GHSA-56mp-4f3v-fgj2, GO-2026-5967 | Critical | 0.6% | 10 Jul, 2026 | Go github.com/siyuan-note/siyuan/kernel |
prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE CVE-2026-54159, GHSA-m5f5-28qr-9g9r | Critical | 0.8% | 10 Jul, 2026 | Packagist prestashop/ps_facetedsearch |
Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint CVE-2026-55515, GHSA-35cr-9hqq-p2mg | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has CSS Injection via `header_color` Setting CVE-2026-55481, GHSA-w7qw-5wfv-gwx9 | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has incorrect permission for legacy license checkin API CVE-2026-55479, GHSA-8frh-vhgh-64cf | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT's import created_by can be overwritten CVE-2026-55475, GHSA-5wx7-xq8j-v4qm | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has a path traversal vulnerability via CSV import `image` field CVE-2026-55469, GHSA-xr9m-gphc-9p63 | Medium | 0.6% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT vulnerable to stored XSS via inline-served attachment CVE-2026-55466, GHSA-jhph-5q74-pmfx | Medium | 0.4% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has an authorization bypass on print inventory page CVE-2026-55462, GHSA-fc33-6w3q-538h | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has an Open Redirect After User Edit CVE-2026-55461, GHSA-wg2f-x2c2-c4rp | Medium | 0.3% | 10 Jul, 2026 | Packagist snipe/snipe-it |
Snipe-IT has CSV formula injection in Activity Report export CVE-2026-55452, GHSA-whrx-mmgr-gpcf | Medium | 0.4% | 10 Jul, 2026 | Packagist snipe/snipe-it |
SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML() CVE-2026-54158, GHSA-5xfx-xj4h-5p7r, GO-2026-5957 | Critical | 0.4% | 10 Jul, 2026 | Go github.com/siyuan-note/siyuan/kernel |
mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment CVE-2026-73498, GHSA-g5r6-gv6m-f5jv, PYSEC-2026-3683 | High | 0.5% | 10 Jul, 2026 | PyPI mcp-atlassian |
mcp-atlassian: Arbitrary server-side file read via attachment upload CVE-2026-73496, GHSA-wm45-qh3g-v83f | High | 0.5% | 10 Jul, 2026 | PyPI mcp-atlassian |
SafeInstall agent guard shell parsing can miss raw package execution GHSA-xrmc-c5cg-rv7x | High | Not scored | 10 Jul, 2026 | npm safeinstall-cli |
NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file) CVE-2026-76913, GHSA-qv4m-m73m-8hj7 | High | Not scored | 10 Jul, 2026 | Packagist notrinos/notrinos-erp |
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py CVE-2026-54071, GHSA-m8gf-v64p-gfmg, PYSEC-2026-2389 | High | 0.4% | 10 Jul, 2026 | PyPI BabelDOC PyPI babeldoc |
File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) CVE-2026-54088, GHSA-m93h-4hw7-5qcm, GO-2026-5962 | Critical | 0.8% | 10 Jul, 2026 | Go github.com/filebrowser/filebrowser Go github.com/filebrowser/filebrowser/v2 |
SiYuan: Stored XSS in Bazaar marketplace via package README event handlers CVE-2026-54070, GHSA-w7cg-whh7-xp28, GO-2026-5965 | High | 0.3% | 10 Jul, 2026 | Go github.com/siyuan-note/siyuan/kernel |
File Browser: Authentication Bypass via Proxy Auth Header Forgery CVE-2026-54089, GHSA-xqp3-jq6g-x3qm, GO-2026-5966 | Critical | 0.6% | 10 Jul, 2026 | Go github.com/filebrowser/filebrowser Go github.com/filebrowser/filebrowser/v2 |
SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist CVE-2026-54069, GHSA-hvr9-72v2-fff3, GO-2026-5961 | Critical | 7.5% | 10 Jul, 2026 | Go github.com/siyuan-note/siyuan/kernel |
SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon CVE-2026-54068, GHSA-gcm7-57gf-953c, GO-2026-5958 | Medium | 4.3% | 10 Jul, 2026 | Go github.com/siyuan-note/siyuan/kernel |