Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Airflow Vulnerable to Deserialization of Untrusted Data BIT-airflow-2026-45360, CVE-2026-45360, GHSA-2r5m-76wx-56gx, PYSEC-2026-186 | High | 0.7% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has a Deserialization of Untrusted Data vulnerability BIT-airflow-2026-42359, CVE-2026-42359, GHSA-wr76-29cr-67w8, PYSEC-2026-185 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow Vulnerable to Authorization Bypass Through User-Controlled Key BIT-airflow-2026-41084, CVE-2026-41084, GHSA-mxq5-f9c5-w4p5, PYSEC-2026-183 | High | 0.5% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow: Authenticated users can bypass the `is_safe_url` check BIT-airflow-2026-40961, CVE-2026-40961, GHSA-6hcw-qqr8-pjj8, PYSEC-2026-2345 | High | 0.6% | 01 Jun, 2026 | PyPI apache-airflow |
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role CVE-2026-47409, GHSA-w388-2392-px73, PYSEC-2026-2938 | High | 0.3% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link) CVE-2026-47414, GHSA-5jx9-w35f-vp65, PYSEC-2026-2929 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks CVE-2026-47406, GHSA-4x6r-9v57-3gqw, PYSEC-2026-2928 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership CVE-2026-47405, GHSA-h37g-4h4p-9x97, PYSEC-2026-2936 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID CVE-2026-47399, GHSA-6h6v-6m7w-7vxx, PYSEC-2026-2930 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API CVE-2026-48169, GHSA-gv23-xrm3-8c62, PYSEC-2026-2935 | High | 0.4% | 29 May, 2026 | PyPI praisonai-platform |
PraisonAI has an Arbitrary File Write in Python API CVE-2026-47397, GHSA-hvhp-v2gc-268q, PYSEC-2026-2916 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate CVE-2026-47394, GHSA-9cr9-25q5-8prj, PYSEC-2026-2908 | High | 0.5% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 CVE-2026-47398, CVE-2026-64824, GHSA-78r8-wwqv-r299, PYSEC-2026-2905 | High | 0.7% | 29 May, 2026 | PyPI PraisonAI PyPI praisonai |
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment CVE-2026-76241, GHSA-w7pm-9g55-mxfm | High | 0.1% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's Postgres schema identifier handling required defensive quoting CVE-2026-76240, GHSA-9pc9-4crj-mhpj | High | 0.4% | 29 May, 2026 | PyPI stigmem-node |
stigmem-node's federation peer token timestamp validation may reject valid peer tokens CVE-2026-76245, GHSA-xh5j-xjfq-qvvx | High | 0.2% | 29 May, 2026 | PyPI stigmem-node |
Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders CVE-2026-47231, GHSA-x628-457g-2pw9 | High | 0.4% | 29 May, 2026 | Packagist admidio/admidio |
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env CVE-2026-47211, GHSA-c4m7-2gwp-vw76, PYSEC-2026-2857 | High | 0.2% | 29 May, 2026 | PyPI ouroboros-ai |
Spatie Laravel Media Library contains a file upload restriction bypass CVE-2026-48557, GHSA-3ggm-c5m7-hfv5 | High | 0.4% | 29 May, 2026 | Packagist spatie/laravel-medialibrary |
formie's unauthenticated front-end submission editing can overwrite existing submissions CVE-2026-47266, GHSA-pgxq-p76c-x9cg | High | 0.3% | 29 May, 2026 | Packagist verbb/formie |
Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs CVE-2026-47260, GHSA-7j2f-6h2r-6cqc | High | 0.3% | 29 May, 2026 | Packagist phanan/koel |
uv is vulnerable to arbitrary file write through entry point names CVE-2026-114109, GHSA-4gg8-gxpx-9rph | High | 0.4% | 29 May, 2026 | PyPI uv crates.io uv |
AgenticMail API/storage and outbound relay hardening fixes CVE-2026-47255, GHSA-wjjv-3mj2-39hf | High | 0.3% | 29 May, 2026 | npm @agenticmail/api npm @agenticmail/core |
ezsystems/ezpublish-legacy has a SQL injection in dfscleanup CVE-2026-38739, GHSA-xg9x-h37w-h3r3 | High | Not scored | 29 May, 2026 | Packagist ezsystems/ezpublish-legacy |
xiaomusic contains an unauthenticated path traversal vulnerability CVE-2026-10108, GHSA-5j8p-5rrj-8wjg, PYSEC-2026-3429 | High | 0.7% | 29 May, 2026 | PyPI xiaomusic |
agno contains a SQL injection vulnerability CVE-2026-10105, GHSA-82m5-3pcp-hccq, PYSEC-2026-2333 | High | 0.4% | 29 May, 2026 | PyPI agno |
NodeVM network builtin exclusions bypass via internal _http_client and _http_server CVE-2026-47139, GHSA-r9pm-gxmw-wv6p | High | 0.4% | 29 May, 2026 | npm vm2 |
vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain CVE-2026-47209, GHSA-c4cf-2hgv-2qv6 | High | 0.3% | 29 May, 2026 | npm vm2 |
vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks CVE-2026-47135, GHSA-m5q2-4fm3-vfqp | High | 0.3% | 29 May, 2026 | npm vm2 |
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates CVE-2026-35674, GHSA-hw9r-h9mr-4jff | High | 0.3% | 29 May, 2026 | npm openclaw |
OpenClaw: QQBot native approval buttons did not enforce configured approver identity CVE-2026-35630, GHSA-mgq6-vr84-7m2j | High | 0.2% | 29 May, 2026 | npm openclaw |
OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes CVE-2026-32905, GHSA-xr4f-mjxj-w6w5 | High | 0.2% | 29 May, 2026 | npm openclaw |
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge CVE-2026-44495, GHSA-3g43-6gmg-66jw | High | 0.9% | 29 May, 2026 | npm axios |
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` CVE-2026-44494, GHSA-35jp-ww65-95wh | High | 1.1% | 29 May, 2026 | npm axios |
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718) CVE-2026-44492, GHSA-pjwm-pj3p-43mv | High | 12.3% | 29 May, 2026 | npm axios |
axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions CVE-2026-44490, GHSA-898c-q2cr-xwhg | High | 0.3% | 29 May, 2026 | npm axios |
Froxlor has an incomplete fix for CVE-2026-30932 CVE-2026-41237, GHSA-j6fm-9rfm-j5hx | High | 0.3% | 29 May, 2026 | Packagist froxlor/froxlor |
Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path CVE-2026-41236, GHSA-mq5v-pxpm-8jw2 | High | 0.4% | 29 May, 2026 | Packagist froxlor/froxlor |
Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement CVE-2026-41235, GHSA-gcv3-5v9q-fmhh | High | 0.2% | 29 May, 2026 | Packagist froxlor/froxlor |
WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpoint CVE-2026-47696, GHSA-9392-pj54-qqf8 | High | 0.1% | 29 May, 2026 | Packagist WWBN/AVideo |
HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint CVE-2026-48527, GHSA-g2g8-95qg-v35h | High | 0.2% | 29 May, 2026 | npm @haxtheweb/haxcms-nodejs |
Mautic has Stored Cross-Site Scripting (XSS) in Projects Component CVE-2026-9809, GHSA-7h65-whp7-rgqf | High | 0.2% | 29 May, 2026 | Packagist mautic/core |
Mautic has an Authorization Bypass in API v2 Endpoints CVE-2026-9808, GHSA-2jrw-c95w-h43g | High | 0.2% | 29 May, 2026 | Packagist mautic/core |
Mautic has SQL Injection in API Contact Filtering CVE-2026-4776, GHSA-fcmw-wx57-9p75 | High | 0.2% | 29 May, 2026 | Packagist mautic/core |
Dulwich Vulnerable to Command Injection via Merge Driver Path CVE-2026-42563, GHSA-9277-mp7x-85jf, PYSEC-2026-2464 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows CVE-2026-42305, GHSA-897w-fcg9-f6xj, PYSEC-2026-2463 | High | 0.6% | 28 May, 2026 | PyPI dulwich |
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token CVE-2026-44394, GHSA-whqr-fgm5-x77q, PYSEC-2026-603 | High | 0.2% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone has an Incorrect Authorization issue CVE-2026-43000, GHSA-q623-f4j4-p4xj, PYSEC-2026-601 | High | 0.3% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone has an Authorization Bypass CVE-2026-42999, GHSA-2r23-2g6v-2m5f, PYSEC-2026-600 | High | 0.3% | 28 May, 2026 | PyPI keystone |
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential CVE-2026-42998, GHSA-8f8m-wrvr-wcvf, PYSEC-2026-599 | High | 0.3% | 28 May, 2026 | PyPI keystone |