Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature BIT-ghost-2026-59817, CVE-2026-59817, GHSA-xm43-3m56-w3wf | Medium | 0.4% | 09 Jul, 2026 | npm ghost |
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal CVE-2026-59221, GHSA-frvj-c5qp-xj4w, PYSEC-2026-3597 | High | 0.5% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave) CVE-2026-59715, GHSA-gmfw-g93r-vg53, PYSEC-2026-3599 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission CVE-2026-59227, GHSA-rqj7-6wrp-6g2g, PYSEC-2026-3604 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation CVE-2026-59226, GHSA-mvx4-532p-xfm9, PYSEC-2026-3602 | Medium | 0.5% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Arena task endpoints can bypass underlying model access controls CVE-2026-59225, GHSA-m3qf-58wf-w979, PYSEC-2026-3601 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection) CVE-2026-59224, GHSA-j657-m4c4-24jq, PYSEC-2026-3600 | High | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching CVE-2026-59223, GHSA-qg3f-8x3j-ggf2, PYSEC-2026-3603 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials CVE-2026-59222, GHSA-gh7p-78x6-jw6m, PYSEC-2026-3598 | Medium | 0.5% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config CVE-2026-59220, GHSA-ffpj-xv5c-p3gw, PYSEC-2026-3596 | Medium | 0.6% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout CVE-2026-59219, GHSA-855v-hq7w-jmjw, PYSEC-2026-3595 | High | 0.6% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Account enumeration via observable login timing discrepancy CVE-2026-59218, GHSA-7rw5-9f7q-xj36, PYSEC-2026-3594 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB) CVE-2026-59217, GHSA-7r7x-gjvr-448g, PYSEC-2026-3593 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id CVE-2026-59216, GHSA-74h3-cxq7-vc5q, PYSEC-2026-3592 | Critical | 0.5% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding CVE-2026-59215, GHSA-73x5-h92w-xc2j, PYSEC-2026-3591 | Low | 0.3% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Stored web worker XSS via Pyodide CVE-2026-59214, GHSA-4r2p-27mh-5m22, PYSEC-2026-3590 | Critical | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse) CVE-2026-59213, GHSA-3wp3-xxj9-5jqq, PYSEC-2026-3589 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete CVE-2026-59212, GHSA-2xwm-4h2q-ggfx, PYSEC-2026-3588 | Medium | 0.4% | 09 Jul, 2026 | PyPI open-webui |
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression CVE-2026-59209, GHSA-q3j5-8vrg-4p9q | High | 0.4% | 09 Jul, 2026 | npm n8n |
Malicious release: Malicious code in dl-pp-latm (npm) MAL-2026-10086 | Malicious | Not scored | 09 Jul, 2026 | npm dl-pp-latm |
Malicious release: Malicious code in neon-poly-utls (npm) GHSA-3fwc-79pq-r47c, MAL-2026-10089 | Malicious | Not scored | 09 Jul, 2026 | npm neon-poly-utls |
Malicious release: Malicious code in chain-async-dom (npm) GHSA-4r3j-x465-77rv, MAL-2026-10082 | Malicious | Not scored | 09 Jul, 2026 | npm chain-async-dom |
Malicious release: Malicious code in clob-math-v2 (npm) MAL-2026-10083 | Malicious | Not scored | 09 Jul, 2026 | npm clob-math-v2 |
Malicious release: Malicious code in conversionvaluemanager (npm) GHSA-c8w9-r7mv-28q4, MAL-2026-10084 | Malicious | Not scored | 09 Jul, 2026 | npm conversionvaluemanager |
Malicious release: Malicious code in lovable-tager (npm) MAL-2026-10088 | Malicious | Not scored | 09 Jul, 2026 | npm lovable-tager |
Malicious release: Malicious code in qlinforge (PyPI) MAL-2026-10091 | Malicious | Not scored | 09 Jul, 2026 | PyPI qlinforge |
Malicious release: Malicious code in eslint-plus (npm) MAL-2026-10087 | Malicious | Not scored | 09 Jul, 2026 | npm eslint-plus |
Malicious release: Malicious code in nonenull1 (npm) MAL-2026-10090 | Malicious | Not scored | 09 Jul, 2026 | npm nonenull1 |
Malicious release: Malicious code in cookie-js-ease (npm) MAL-2026-10058 | Malicious | Not scored | 09 Jul, 2026 | npm cookie-js-ease |
Malicious release: Malicious code in cookie-parser-es (npm) MAL-2026-10059 | Malicious | Not scored | 09 Jul, 2026 | npm cookie-parser-es |
Malicious release: Malicious code in cookie-parser-js (npm) MAL-2026-10060 | Malicious | Not scored | 09 Jul, 2026 | npm cookie-parser-js |
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution CVE-2026-59208, GHSA-mq3m-f8x3-579w | High | 0.3% | 09 Jul, 2026 | npm n8n |
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector CVE-2026-59207, GHSA-h44j-f5r5-ph73 | High | 0.4% | 09 Jul, 2026 | npm n8n |
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration CVE-2026-59206, GHSA-75qm-gp28-rcq9 | High | 0.7% | 09 Jul, 2026 | npm n8n |
Malicious release: Malicious code in multer-orm (npm) MAL-2026-10064 | Malicious | Not scored | 09 Jul, 2026 | npm multer-orm |
Malicious release: Malicious code in express-router-engine (npm) MAL-2026-10063 | Malicious | Not scored | 09 Jul, 2026 | npm express-router-engine |
Malicious release: Malicious code in chunk-parser (npm) MAL-2026-10057 | Malicious | Not scored | 09 Jul, 2026 | npm chunk-parser |
Malicious release: Malicious code in type-slint (npm) GHSA-634c-4fgc-67w9, MAL-2026-10077 | Malicious | Not scored | 09 Jul, 2026 | npm type-slint |
Malicious release: Malicious code in nps-retrieval-diagnostics (npm) MAL-2026-10066 | Malicious | Not scored | 09 Jul, 2026 | npm nps-retrieval-diagnostics |
Malicious release: Malicious code in cursed-ecto-d3ab00 (npm) GHSA-9x5f-jcqq-j88c, MAL-2026-10061 | Malicious | Not scored | 09 Jul, 2026 | npm cursed-ecto-d3ab00 |
Malicious release: Malicious code in polymarket-apis (npm) GHSA-rwp8-c6qg-x8g3, MAL-2026-10067 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-apis |
Malicious release: Malicious code in polymarket-trader-apis (npm) GHSA-773r-gj6w-h338, MAL-2026-10072 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-trader-apis |
Malicious release: Malicious code in polymarket-kelly-math (npm) MAL-2026-10068 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-kelly-math |
Malicious release: Malicious code in polymarket-kelly-stake-math (npm) GHSA-q8cr-mw55-69x7, MAL-2026-10070 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-kelly-stake-math |
Malicious release: Malicious code in polymarket-kit (npm) MAL-2026-10071 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-kit |
Malicious release: Malicious code in polymarket-kelly-maths (npm) MAL-2026-10069 | Malicious | Not scored | 09 Jul, 2026 | npm polymarket-kelly-maths |
Malicious release: Malicious code in es6-codify (npm) GHSA-7q22-q58w-5f27, MAL-2026-10062 | Malicious | Not scored | 09 Jul, 2026 | npm es6-codify |
Malicious release: Malicious code in webrix-docs1 (npm) MAL-2026-10081 | Malicious | Not scored | 09 Jul, 2026 | npm webrix-docs1 |
Malicious release: Malicious code in webrix-docs (npm) MAL-2026-10080 | Malicious | Not scored | 09 Jul, 2026 | npm webrix-docs |
Malicious release: Malicious code in vybscan-testbed-obfuscated-postinstall (npm) GHSA-43r2-4jr2-rhjf, MAL-2026-10079 | Malicious | Not scored | 09 Jul, 2026 | npm vybscan-testbed-obfuscated-postinstall |