Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
rattler has an entry-point path traversal in noarch:python install (arbitrary file write) CVE-2026-47425, GHSA-q53q-5r4j-5729, PYSEC-2026-2971 | Medium | 0.2% | 01 Jun, 2026 | PyPI py-rattler crates.io rattler |
Apache Airflow has no certificate validation on SMTP STARTTLS connections BIT-airflow-2026-49267, CVE-2026-49267, GHSA-799x-qp47-8qwq, PYSEC-2026-2346 | Medium | 0.2% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Auth manager doesn't invalidate JWT tokens after users click logout BIT-airflow-2026-48726, CVE-2026-48726, GHSA-vr7m-c6v4-8cx8, PYSEC-2026-187 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has an Authorization Bypass Through User-Controlled Key BIT-airflow-2026-46764, CVE-2026-46764, GHSA-qphr-3mvq-v466, PYSEC-2026-2354 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor BIT-airflow-2026-42360, CVE-2026-42360, GHSA-cg3x-89rc-x9mw, PYSEC-2026-172 | Medium | 0.3% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor BIT-airflow-2026-42358, CVE-2026-42358, GHSA-33g2-gx67-c2h3, PYSEC-2026-2343 | Medium | 0.3% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute BIT-airflow-2026-41017, CVE-2026-41017, GHSA-95v7-h9j5-gvjr, PYSEC-2026-171 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Missing Authorization issue BIT-airflow-2026-41014, CVE-2026-41014, GHSA-x2x7-p37c-43cr, PYSEC-2026-182 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Link Following issue BIT-airflow-2026-40861, CVE-2026-40861, GHSA-89cj-xrpx-j79m, PYSEC-2026-181 | Medium | 0.7% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Incomplete redaction allowlist exposes secrets in Connection `extra` to read-permitted users BIT-airflow-2026-45192, CVE-2026-45192, GHSA-2883-wwh7-x57v, PYSEC-2026-173 | Medium | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
hermes-agent has an Uncontrolled Resource Consumption issue CVE-2026-10224, GHSA-pmqc-57g8-c22c, PYSEC-2026-3576 | Medium | 0.4% | 01 Jun, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-10221, GHSA-xq8w-9jvx-gm3v, PYSEC-2026-3577 | Medium | 0.3% | 01 Jun, 2026 | PyPI hermes-agent |
praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership CVE-2026-47408, GHSA-27p4-pjqv-whgj, PYSEC-2026-2927 | Medium | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context CVE-2026-47395, GHSA-5cxw-77wg-jrf3, PYSEC-2026-2903, PYSEC-2026-2942 | Medium | 0.2% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings CVE-2026-47390, GHSA-5c6w-wwfq-7qqm, PYSEC-2026-2902, PYSEC-2026-2941 | Medium | 0.2% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |
Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024 CVE-2026-47233, GHSA-xw54-c3mx-9pm3 | Medium | 0.3% | 29 May, 2026 | Packagist admidio/admidio |
Admidio writes session IDs and auto-login cookie values to application logs CVE-2026-47234, GHSA-mch8-wf3h-6x88 | Medium | 0.2% | 29 May, 2026 | Packagist admidio/admidio |
Admidio PKCS#12 private key export action lacks CSRF protection CVE-2026-47232, GHSA-4rgq-38mh-9xqg | Medium | 0.1% | 29 May, 2026 | Packagist admidio/admidio |
Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders CVE-2026-47230, GHSA-q6w3-hpfv-rg36 | Medium | 0.3% | 29 May, 2026 | Packagist admidio/admidio |
Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation CVE-2026-47229, GHSA-xg76-5qj2-2hhv | Medium | 0.1% | 29 May, 2026 | Packagist admidio/admidio |
Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords CVE-2026-47228, GHSA-mx25-j3rc-6w2w | Medium | 0.2% | 29 May, 2026 | Packagist admidio/admidio |
Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php` CVE-2026-47227, GHSA-rwjr-qjj3-mq2f | Medium | 0.3% | 29 May, 2026 | Packagist admidio/admidio |
Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges CVE-2026-47226, GHSA-qc4c-hrmc-4f78 | Medium | 0.3% | 29 May, 2026 | Packagist admidio/admidio |
BoxLite has a Timeout Bypass Vulnerability CVE-2026-47213, GHSA-xjhv-pp2r-6f82, PYSEC-2026-2400 | Medium | 0.3% | 29 May, 2026 | PyPI boxlite |
Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification CVE-2026-47212, GHSA-55rj-x2vc-4whq | Medium | 1.5% | 29 May, 2026 | Packagist symfony/symfony Packagist symfony/twilio-notifier |
zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood CVE-2026-47184, GHSA-rfg2-pjw2-56x2, PYSEC-2026-3439 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
Spatie Laravel Media Library contains a server-side request forgery vulnerability CVE-2026-48555, GHSA-fggg-964j-3j7h | Medium | 0.2% | 29 May, 2026 | Packagist spatie/laravel-medialibrary |
zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion CVE-2026-47183, GHSA-phvx-9mgw-67r5, PYSEC-2026-3437 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service CVE-2026-47180, GHSA-9pgc-3ccv-5297, PYSEC-2026-3436 | Medium | 0.4% | 29 May, 2026 | PyPI zeroconf |
Parse Server's GraphQL "Did you mean ...?" validation suggestions disclose schema to unauthenticated callers BIT-parse-2026-47248, CVE-2026-47248, GHSA-8cph-rgr4-g5vj | Medium | 0.3% | 29 May, 2026 | npm parse-server |
Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables CVE-2026-47745, GHSA-fxqw-97cc-7g5c | Medium | 0.2% | 29 May, 2026 | Packagist shopper/framework |
Shopper: Missing authorization on Product admin Livewire sub-form components CVE-2026-47742, GHSA-h4mp-g9c6-xwph | Medium | 0.2% | 29 May, 2026 | Packagist shopper/framework |
NodeVM observability builtins leak host process and HTTP request data CVE-2026-47141, GHSA-9g8x-92q2-p28f | Medium | 0.4% | 29 May, 2026 | npm vm2 |
Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` CVE-2026-47200, GHSA-hg3f-28rg-4jxj | Medium | 0.2% | 29 May, 2026 | npm @nuxt/nitro-server npm nuxt |
OpenClaw: Browser debug/export routes could reuse already-open blocked tabs CVE-2026-35673, GHSA-hcm3-8f6r-6xwg | Medium | 0.2% | 29 May, 2026 | npm openclaw |
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions CVE-2026-32906, GHSA-wv26-j37q-2g7p | Medium | 0.2% | 29 May, 2026 | npm openclaw |
Axios has a Patch Bypass: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix CVE-2026-44489, GHSA-654m-c8p4-x5fp | Medium | 0.2% | 29 May, 2026 | npm axios |
WWBN AVideo: Stored XSS via unescaped Gallery category description CVE-2026-47694, GHSA-c8h8-vq34-9fw2 | Medium | 0.2% | 29 May, 2026 | Packagist WWBN/AVideo |
Mautic has Stored Cross-Site Scripting (XSS) in Project Option Selector CVE-2026-9811, GHSA-5hvg-w58j-545m | Medium | 0.2% | 29 May, 2026 | Packagist mautic/core |
Mautic Focus component Vulnerable to SSRF CVE-2026-9557, GHSA-jmv8-8j9j-rcpc | Medium | 0.1% | 29 May, 2026 | Packagist mautic/core |
tuf has platform-dependent delegation path matching GHSA-qp9x-wp8f-qgjj | Medium | Not scored | 28 May, 2026 | PyPI tuf |
OpenStack Neutron has an Incorrect Authorization issue CVE-2026-49299, GHSA-xv24-hxh9-2hh9, PYSEC-2026-2678 | Medium | 0.3% | 28 May, 2026 | PyPI neutron |
FUXA provides guest and invalid-token access to protected read APIs in secure mode CVE-2026-47718, GHSA-r9g5-7q8j-958c | Medium | 0.5% | 28 May, 2026 | npm fuxa-server |
Shamefile has an arbitrary file read via shamefile.yaml in shame next CVE-2026-47144, GHSA-x6p3-76f2-xxvh, PYSEC-2026-3065 | Medium | 0.2% | 28 May, 2026 | PyPI shamefile crates.io shamefile npm shamefile |
symfony/polyfill-intl-idn: xn-- labels with ASCII-only Punycode payloads are treated as equivalent to their decoded form CVE-2026-46644, GHSA-2xf4-cg6j-vhgq | Medium | 0.5% | 28 May, 2026 | Packagist symfony/polyfill Packagist symfony/polyfill-intl-idn |
local-deep-research has an SSRF bypass in `safe_get` CVE-2026-46526, GHSA-g23j-2vwm-5c25, PYSEC-2026-2611 | Medium | 0.3% | 28 May, 2026 | PyPI local-deep-research |
compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem CVE-2026-46380, GHSA-w76h-q7c6-jpjp, PYSEC-2026-2427 | Medium | 0.1% | 28 May, 2026 | PyPI compliance-trestle |
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal CVE-2026-45774, GHSA-mj4x-vf5c-5xg8, PYSEC-2026-2426 | Medium | 0.5% | 28 May, 2026 | PyPI compliance-trestle |
Symfony's Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection CVE-2026-45755, GHSA-59f3-vp2f-mp9w | Medium | 0.3% | 28 May, 2026 | Packagist symfony/mailtrap-mailer Packagist symfony/symfony |
Symfony's Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection CVE-2026-45754, GHSA-64hg-93w9-fc35 | Medium | 0.4% | 28 May, 2026 | Packagist symfony/lox24-notifier Packagist symfony/mailjet-mailer Packagist symfony/symfony |