Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher CVE-2026-53721, GHSA-mm7m-92g8-7m47 | High | 0.4% | 12 Jun, 2026 | npm nuxt |
OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows CVE-2026-53819, GHSA-8wg3-5mcm-fjq8 | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Control UI locality spoofing could mint a durable admin device token CVE-2026-53817, GHSA-chr9-m4q2-76hw | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance CVE-2026-53816, GHSA-3c6j-hq33-3jv4 | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Message read actions could skip channel allowlist checks CVE-2026-53815, GHSA-q7q8-3mgw-q67r | High | 0.2% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority CVE-2026-53814, GHSA-6fvr-66p3-3qj4 | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Fake package roots could influence memory-core artifact loading CVE-2026-53813, GHSA-v8cx-933x-r976 | High | 0.1% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Matrix allowFrom could bind to mutable display names CVE-2026-53811, GHSA-7hxm-f538-3xp6 | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw's marketplace runtime extension metadata could point at unscanned payloads CVE-2026-53810, GHSA-v6r2-jh58-xx6w | High | 0.4% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Telegram interactive callbacks could skip commands.allowFrom CVE-2026-53807, GHSA-w5ww-7chg-mxcq | High | 0.3% | 11 Jun, 2026 | npm openclaw |
OpenClaw: Combined POSIX shell options could confuse exec revalidation CVE-2026-53806, GHSA-vxx3-6hc9-7cc3 | High | 0.4% | 11 Jun, 2026 | npm openclaw |
WsgiDAV encoded dot segments can escape filesystem share roots CVE-2026-48099, GHSA-wxq4-cc2q-338q, PYSEC-2026-3428 | High | 0.3% | 11 Jun, 2026 | PyPI wsgidav |
tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template CVE-2026-49982, GHSA-7c78-jf6q-g5cm | High | 0.5% | 11 Jun, 2026 | npm tmp |
Keras archive extraction utilities allow path traversal and arbitrary file writes CVE-2026-11816, GHSA-hqp4-2352-xf5r, PYSEC-2026-2324 | High | 0.6% | 11 Jun, 2026 | PyPI keras |
@grpc/grpc-js: A malformed request can cause a server crash CVE-2026-48068, GHSA-5375-pq7m-f5r2 | High | 0.9% | 11 Jun, 2026 | npm @grpc/grpc-js |
@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash CVE-2026-48069, GHSA-99f4-grh7-6pcq | High | 0.9% | 11 Jun, 2026 | npm @grpc/grpc-js |
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri CVE-2026-48054, GHSA-4x76-22x2-rx8v | High | 0.6% | 11 Jun, 2026 | npm @openzeppelin/wizard |
Element Call reports full URLs of visited pages to analytics server CVE-2026-48007, GHSA-6vhh-4xw6-h2h2 | High | 0.3% | 11 Jun, 2026 | npm @element-hq/element-call-embedded |
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing CVE-2026-47781, GHSA-qq6c-99pv-prvf, PYSEC-2026-2863 | High | 0.2% | 11 Jun, 2026 | PyPI pdm |
vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method CVE-2026-5497, GHSA-wcwg-c5fc-9vrc, PYSEC-2026-2302 | High | 0.5% | 11 Jun, 2026 | PyPI vllm |
Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload CVE-2026-52726, GHSA-gfhv-vqv2-4544, PYSEC-2026-2465 | High | 0.4% | 10 Jun, 2026 | PyPI dulwich |
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges CVE-2026-50131, GHSA-xw9q-2mv6-9fr8 | High | 0.4% | 10 Jun, 2026 | npm @fedify/fedify npm @fedify/vocab-runtime |
kafka-python vulnerable to denial of service through an unbounded SCRAM iteration count CVE-2026-10143, GHSA-2jcm-hq8r-84wx, PYSEC-2026-2191 | High | 0.5% | 10 Jun, 2026 | PyPI kafka-python |
kafka-python vulnerable to denial of service through an unvalidated protocol frame length CVE-2026-10142, GHSA-m3px-q5gj-j9x7, PYSEC-2026-2190 | High | 0.3% | 10 Jun, 2026 | PyPI kafka-python |
PDM wheel installation leads to Path Traversal via overridden write_to_fs CVE-2026-47764, GHSA-78v8-vpjp-cjqh, PYSEC-2026-2861 | High | 0.2% | 10 Jun, 2026 | PyPI pdm |
Litestar has HTML Injection Through its CSRF Token CVE-2026-48060, GHSA-542p-wvx7-72m4, PYSEC-2026-2604 | High | 0.4% | 10 Jun, 2026 | PyPI litestar |
aws-cdk-lib: OS Command Injection in NodejsFunction Bundling CVE-2026-11417, GHSA-999r-qq7v-r334 | High | 1.0% | 10 Jun, 2026 | npm aws-cdk-lib |
image-size: ICNS parser allows denial of service through an infinite loop CVE-2025-71330, GHSA-w3rx-r6r6-pgpr | High | 0.4% | 10 Jun, 2026 | npm image-size |
image-size: JXL and HEIF parsers allow denial of service through infinite loops CVE-2025-71329, GHSA-5p2g-fcmc-qvqq | High | 0.4% | 10 Jun, 2026 | npm image-size |
@hulumi/drift: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts CVE-2026-48036, GHSA-32g3-35g9-wc9g | High | 0.5% | 10 Jun, 2026 | npm @hulumi/drift |
@hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened CVE-2026-48035, GHSA-2mxr-p26x-mj73 | High | 0.5% | 10 Jun, 2026 | npm @hulumi/baseline |
@hulumi/policies has a HULUMI-H5 bypass via decoy sibling resources targeting a different bucket CVE-2026-48034, GHSA-9vc9-4jv3-rf86 | High | 0.4% | 10 Jun, 2026 | npm @hulumi/policies |
@hulumi/policies bypasses policy packs with a forged Pulumi-URN logical name CVE-2026-48033, GHSA-rhgj-6g2c-frmm | High | 0.5% | 10 Jun, 2026 | npm @hulumi/policies |
@hulumi/policies bypasses IAM-role policy checks when the role trusts multiple OIDC providers CVE-2026-48032, GHSA-g759-4pxw-6692 | High | 0.5% | 10 Jun, 2026 | npm @hulumi/policies |
Concrete CMS: PHP Object Injection via unserialize() calls CVE-2026-10721, GHSA-g82f-9pw7-773w | High | 0.1% | 10 Jun, 2026 | Packagist concrete5/concrete5 |
BuddyPress: Authenticated attackers can access arbitrary private message threads via user_id request parameter CVE-2026-53673, GHSA-j3j5-5m8v-7gvc | High | 0.4% | 10 Jun, 2026 | Packagist buddypress/buddypress |
SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch CVE-2026-47767, GHSA-fqc7-9xjw-jrh3 | High | 0.7% | 09 Jun, 2026 | Packagist symfony/runtime Packagist symfony/symfony |
LimeSurvey has a SQL Injection issue CVE-2026-50636, GHSA-pr6f-87hf-hx24 | High | 0.4% | 09 Jun, 2026 | Packagist limesurvey/limesurvey |
LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. CVE-2026-50635, GHSA-5c37-5j7w-8mh8 | High | 0.4% | 09 Jun, 2026 | Packagist limesurvey/limesurvey |
TYPO3 CMS has Broken Access Control in its Media Module CVE-2026-49742, GHSA-chm7-4vch-h8vr | High | 0.3% | 09 Jun, 2026 | Packagist typo3/cms-core Packagist typo3/cms-filelist |
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework CVE-2026-49741, GHSA-jh32-v29g-68pq | High | 0.2% | 09 Jun, 2026 | Packagist typo3/cms-core Packagist typo3/cms-form |
TYPO3 CMS has Broken Access Control in its Form Framework CVE-2026-47346, GHSA-hwvq-2w67-rvxp | High | 0.3% | 09 Jun, 2026 | Packagist typo3/cms-core Packagist typo3/cms-form |
TYPO3 CMS: Destructive Actions on File Mount Folders CVE-2026-47343, GHSA-3v8v-4wg6-r7qh | High | 0.2% | 09 Jun, 2026 | Packagist typo3/cms-core |
TYPO3 CMS has Broken Access Control in its Form Framework CVE-2026-11607, GHSA-pjpj-v387-x4vq | High | 0.2% | 09 Jun, 2026 | Packagist typo3/cms-core Packagist typo3/cms-form |
degit has a Command Injection issue CVE-2026-11572, GHSA-77c7-pq4r-6mcq | High | 1.0% | 09 Jun, 2026 | npm degit |
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 | HighExploited | 2.4% | 09 Jun, 2026 | |
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading CVE-2026-47719, GHSA-w86f-rf9w-h3x6 | High | 0.6% | 08 Jun, 2026 | npm fuxa-server |
AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping CVE-2026-11393, GHSA-m4x6-gwgp-4pm7 | High | 0.3% | 08 Jun, 2026 | npm @aws/agentcore |
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users CVE-2026-48507, GHSA-6f75-x745-xcpr | High | 0.2% | 08 Jun, 2026 | Packagist snipe/snipe-it |
Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points CVE-2026-47732, GHSA-pr2w-4gpj-cpq4 | High | 0.4% | 05 Jun, 2026 | Packagist twig/twig |