Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Zeep: Server-Side Request Forgery (SSRF) CVE-2026-58501, GHSA-4cc2-g9w2-fhf6, PYSEC-2026-2323 | Medium | 0.4% | 19 Jun, 2026 | PyPI zeep |
Anki: User scripts in iframes have access to the internal Anki API CVE-2026-58266, GHSA-cw6h-ffmh-x6vh | Medium | 0.2% | 19 Jun, 2026 | PyPI aqt |
ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer CVE-2026-58198, GHSA-wvrh-2f4m-924v | Medium | 0.1% | 19 Jun, 2026 | PyPI ChatterBot PyPI chatterbot |
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data CVE-2026-58413, GHSA-48x2-6pr9-2jjf | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups CVE-2026-58414, GHSA-6x2m-p4xp-wg22 | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions CVE-2026-58482, GHSA-mxjx-28vx-xjjj | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory CVE-2026-58481, GHSA-jvcm-f35g-w78p | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested CVE-2026-57442, GHSA-9c83-rr99-vfwj | Medium | 0.2% | 19 Jun, 2026 | npm @bitbonsai/mcpvault |
symfony/ux-icons: XSS via unsanitized SVG content in local files and Iconify on-demand responses CVE-2026-55877, GHSA-6v8j-33hc-mv84 | Medium | 0.3% | 19 Jun, 2026 | Packagist symfony/ux-icons |
Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure CVE-2026-55650, GHSA-wwf9-7jrc-rv4q | Medium | 0.2% | 19 Jun, 2026 | npm @outerbase/studio |
Langflow: Logout button does not clear session CVE-2026-55423, GHSA-7hw8-6q6r-4276, PYSEC-2026-222 | Medium | 0.2% | 19 Jun, 2026 | PyPI langflow |
dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens CVE-2026-55837, GHSA-jr33-mw75-7j8f, PYSEC-2026-2443 | Medium | 0.3% | 19 Jun, 2026 | PyPI dbt-mcp |
Craft Commerce: Coupon Code Brute-Force via Rate Limit Bypass CVE-2026-55795, GHSA-h5gm-x9wr-vhcm | Medium | 0.5% | 19 Jun, 2026 | Packagist craftcms/commerce |
Craft Commerce: Partial Payment Amount Without Lower Bound Validation GHSA-78vr-q6cf-c7p6 | Medium | Not scored | 19 Jun, 2026 | Packagist craftcms/commerce |
UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() CVE-2026-54911, GHSA-3j69-69wj-xqx2, PYSEC-2026-2294 | Medium | 0.4% | 19 Jun, 2026 | PyPI ujson |
symfony/ux-autocomplete: XSS via unescaped AJAX response data CVE-2026-49216, GHSA-mwqm-4fw3-cjvr | Medium | 0.3% | 19 Jun, 2026 | Packagist symfony/ux-autocomplete |
symfony/ux-live-component: LiveComponentHydrator HMAC checksum lacks component and slot binding CVE-2026-49212, GHSA-34w5-c283-j9fg | Medium | 0.2% | 19 Jun, 2026 | Packagist symfony/ux-live-component |
symfony/ux-autocomplete: Information exposure via unescaped LIKE wildcards in EntitySearchUtil CVE-2026-49211, GHSA-946h-jp5c-8fvh | Medium | 0.5% | 19 Jun, 2026 | Packagist symfony/ux-autocomplete |
symfony/ux-live-component: XSS via attacker-controlled child component tag CVE-2026-49210, GHSA-38x5-rcv4-xf7x | Medium | 0.3% | 19 Jun, 2026 | Packagist symfony/ux-live-component |
symfony/ux-live-component: Denial of service via unbounded batch action requests CVE-2026-49209, GHSA-mm82-c99c-h2cf | Medium | 0.6% | 19 Jun, 2026 | Packagist symfony/ux-live-component |
ux-live-component: Format-less date LiveProps parsed with the permissive DateTime constructor CVE-2026-49208, GHSA-89g7-22c8-3j23 | Medium | 0.4% | 19 Jun, 2026 | Packagist symfony/ux-live-component |
TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) GHSA-9ggv-8w38-r7pm | Medium | Not scored | 19 Jun, 2026 | npm typeorm |
@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter CVE-2026-49336, GHSA-396q-4vc8-28x9 | Medium | 0.7% | 19 Jun, 2026 | npm @microsoft/kiota-http-fetchlibrary |
Statamic CMS: Missing authorization on Control Panel fieldtype endpoints allows disclosure of restricted resources CVE-2026-49288, GHSA-2497-6pwj-pwg7 | Medium | 0.3% | 19 Jun, 2026 | Packagist statamic/cms |
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option CVE-2026-49359, GHSA-x8g9-h984-pc36 | Medium | 0.4% | 19 Jun, 2026 | Packagist pontedilana/php-weasyprint |
JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol BIT-jupyterlab-2026-67338, CVE-2026-67338, GHSA-vmhf-c436-hxj4 | Medium | 0.3% | 19 Jun, 2026 | PyPI jupyterlab |
guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts CVE-2026-55767, GHSA-cwxw-98qj-8qjx | Medium | 0.2% | 19 Jun, 2026 | Packagist guzzlehttp/guzzle |
guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization CVE-2026-55766, GHSA-vm85-hxw5-5432 | Medium | 0.2% | 19 Jun, 2026 | Packagist guzzlehttp/psr7 |
guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext CVE-2026-55568, GHSA-wpwq-4j6v-78m3 | Medium | 0.1% | 19 Jun, 2026 | Packagist guzzlehttp/guzzle |
canto-saas-api: OAuth credentials exposed in URL query string and exception messages CVE-2026-55375, GHSA-37pm-83g7-r22v | Medium | 0.4% | 19 Jun, 2026 | Packagist jleehr/canto-saas-api |
canto-saas-api: Authenticated API requests can be redirected via unencoded path variables CVE-2026-55374, GHSA-9qfv-wgh2-m6p8 | Medium | 0.4% | 19 Jun, 2026 | Packagist jleehr/canto-saas-api |
ts-deepmerge: Prototype Method Override leads to DoS CVE-2026-12644, GHSA-87mf-gv2c-c62c | Medium | 0.5% | 19 Jun, 2026 | npm ts-deepmerge |
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix) CVE-2026-49205, GHSA-8c6h-7g6x-m5x4 | Medium | 0.4% | 18 Jun, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints CVE-2026-55591, GHSA-q59x-jc9f-gfqf | Medium | 0.3% | 18 Jun, 2026 | npm signalk-server |
PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle GHSA-5739-39v2-5754 | Medium | Not scored | 18 Jun, 2026 | Packagist web-token/jwt-library |
PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption GHSA-6vvh-pxr4-25r7 | Medium | Not scored | 18 Jun, 2026 | Packagist web-token/jwt-experimental Packagist web-token/jwt-library |
spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError GHSA-2jx3-65f3-xr8r | Medium | Not scored | 18 Jun, 2026 | Packagist spomky-labs/otphp |
[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat CVE-2026-22551, GHSA-qwjm-9c66-w4q4 | Medium | 0.3% | 18 Jun, 2026 | npm @theia/ai-chat npm @theia/ai-chat-ui npm @theia/ai-claude-code npm @theia/ai-code-completion +3 more |
Kirby: Access to files of top-level drafts is not protected by permissions CVE-2026-54004, GHSA-89cp-7p28-jffg | Medium | 0.5% | 18 Jun, 2026 | Packagist getkirby/cms |
Kirby: Request header injection in `Http\Remote` CVE-2026-50188, GHSA-4v4h-m2qq-ppgw | Medium | 0.4% | 18 Jun, 2026 | Packagist getkirby/cms |
Kirby: `pages.access` permission is not checked in the pages picker for parent pages CVE-2026-49274, GHSA-23q2-54qv-rq5x | Medium | 0.5% | 18 Jun, 2026 | Packagist getkirby/cms |
Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr CVE-2026-55890, GHSA-pmf8-g7c8-7v54 | Medium | 0.5% | 18 Jun, 2026 | Packagist getgrav/grav |
praisonai-platform: Authorization Bypass Through User-Controlled Key CVE-2026-58653, GHSA-2fjj-qqg8-fg7x | Medium | 0.3% | 18 Jun, 2026 | PyPI praisonai-platform |
Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets CVE-2026-55885, GHSA-2f86-9cp8-6hcf | Medium | 0.2% | 18 Jun, 2026 | Packagist getgrav/grav |
pypdf: Missing stream length values ignore defined limits CVE-2026-57204, GHSA-jm82-fx9c-mx94 | Medium | 0.4% | 18 Jun, 2026 | PyPI pypdf |
DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) CVE-2026-65898, GHSA-cmwh-pvxp-8882 | Medium | 0.2% | 18 Jun, 2026 | npm dompurify |
PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder CVE-2026-57120, GHSA-pv2j-rghr-v5r9, PYSEC-2026-3533 | Medium | 0.6% | 18 Jun, 2026 | PyPI praisonaiagents |
PraisonAI: SpiderTools redirect-target SSRF protection bypass CVE-2026-57115, GHSA-6h9p-93hq-q7h6, PYSEC-2026-3531 | Medium | 0.4% | 18 Jun, 2026 | PyPI praisonaiagents |
PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint CVE-2026-57128, GHSA-35w5-pcw4-jx94, PYSEC-2026-3528 | Medium | 0.3% | 18 Jun, 2026 | PyPI praisonaiagents |
TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes CVE-2026-55661, GHSA-2vcc-5v34-9jc8 | Medium | 0.4% | 18 Jun, 2026 | npm @tinacms/mdx npm tinacms |