Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
pacote is vulnerable to Denial of Service (DoS) via the addGitSha function CVE-2026-9496, GHSA-w4pp-8pjf-rmxw | High | 0.3% | 26 May, 2026 | npm pacote |
Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default CVE-2026-45361, GHSA-g9v5-gjwf-9rwx, PYSEC-2026-166 | High | 0.6% | 25 May, 2026 | PyPI apache-airflow-providers-google |
HuggingFace transformers vulnerable to remote code execution CVE-2026-4372, GHSA-29pf-2h5f-8g72, PYSEC-2026-2289 | High | 0.7% | 24 May, 2026 | PyPI transformers |
Prefect has an Argument Injection issue CVE-2026-3515, GHSA-cw25-2p92-7f75, PYSEC-2026-2957 | High | 0.3% | 24 May, 2026 | PyPI prefect |
Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 | HighExploited | 16.1% | 23 May, 2026 | |
Parse Server: Pre-authentication denial of service via client version header regex backtracking BIT-parse-2026-47138, CVE-2026-47138, GHSA-38m6-82c8-4xfm | High | 0.6% | 23 May, 2026 | npm parse-server |
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability CVE-2026-45659 | HighExploited | 80.2% | 22 May, 2026 | |
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads() CVE-2026-9291, GHSA-g697-2xrc-gc46, PYSEC-2026-2342 | High | 0.4% | 22 May, 2026 | PyPI amazon-braket-sdk |
aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler CVE-2026-70646, GHSA-7m8f-hgjq-8gc9, PYSEC-2026-3626 | High | 0.6% | 22 May, 2026 | PyPI aiosend |
Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview CVE-2026-28445, GHSA-6m7c-xfhp-p9fh | High | 0.3% | 22 May, 2026 | npm @typebot.io/js |
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret CVE-2026-46701, GHSA-j3vx-cx2r-pvg8 | High | 0.2% | 21 May, 2026 | npm network-ai |
@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty CVE-2026-46681, GHSA-x7j8-49r8-mr43 | High | 0.4% | 21 May, 2026 | npm @nevware21/ts-utils |
js-libp2p: Memory DoS via subscription flood of unique topics CVE-2026-46679, GHSA-4f8r-922h-2vgv | High | 0.3% | 21 May, 2026 | npm @libp2p/gossipsub |
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation CVE-2026-46640, GHSA-45vw-wh46-2vx8 | High | 0.6% | 21 May, 2026 | Packagist twig/twig |
Twig: Sandbox property and method bypass via object-destructuring assignment CVE-2026-46639, GHSA-mm6w-gr99-p3jj | High | 0.4% | 21 May, 2026 | Packagist twig/twig |
Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name CVE-2026-46634, GHSA-24x9-r6q4-q93w | High | 0.6% | 21 May, 2026 | Packagist twig/twig |
JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625, GHSA-qjx8-664m-686j | High | 0.9% | 21 May, 2026 | npm js-cookie |
Concrete CMS is Vulnerable to Cross-Site Request Forgery CVE-2026-8428, GHSA-prxr-vjgc-2cq9 | High | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS does not validate a CSRF token before processing requests to `/dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>` CVE-2026-8426, GHSA-5rj5-gfmr-hrc3 | High | 0.2% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS contains a CSRF vulnerability CVE-2026-8421, GHSA-4c8m-6fwx-m7xq | High | 0.2% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete does not validate a CSRF token before processing requests to `/dashboard/extend/update/do_update/<pkgHandle>` CVE-2026-8417, GHSA-jr5g-qv3g-rxxx | High | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to missing authorization in the bulk_user_assignment.php CVE-2026-8350, GHSA-g7xp-jf3x-wcx4 | High | 0.3% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS has Stored XSS through its height parameter CVE-2026-8203, GHSA-9v2g-37mp-qpxf | High | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to Stored XSS via OAuth integration name CVE-2026-8197, GHSA-h72c-xx3w-w8h7 | High | 0.2% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is Vulnerable to Cross-Site Request Forgery CVE-2026-8140, GHSA-r42c-3rr2-jrfp | High | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS Vulnerable to Deserialization of Untrusted Data CVE-2026-8135, GHSA-pv2v-6w2v-97x6 | High | 0.5% | 21 May, 2026 | Packagist concrete5/concrete5 |
LiteLLM allows a user to modify their own user_role via the /user/update endpoint CVE-2026-47102, GHSA-wpfp-gwwc-vwq6, PYSEC-2026-2600 | High | 0.7% | 21 May, 2026 | PyPI litellm |
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit CVE-2026-47101, GHSA-qrc4-49gv-mv9m, PYSEC-2026-2598 | High | 1.2% | 21 May, 2026 | PyPI litellm |
@hulumi/policies: HULUMI-H1 SecureBucket parent spoof bypass CVE-2026-82861, GHSA-g43v-9x7q-83pq | High | 0.4% | 21 May, 2026 | npm @hulumi/policies |
@hulumi/baseline: CloudTrail selector tampering events were not fully detected CVE-2026-82863, GHSA-gfp8-mp24-5vxg | High | 0.2% | 21 May, 2026 | npm @hulumi/baseline |
MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement CVE-2026-46519, GHSA-cr22-wjx7-2w6m | High | 0.5% | 21 May, 2026 | npm mcp-server-kubernetes |
Snappy: Binary path is never shell-escaped due to an inverted is_executable check CVE-2026-46643, GHSA-vpr4-p6fq-85jc | High | 0.2% | 21 May, 2026 | Packagist KnpLabs/knp-snappy |
lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out CVE-2026-46517, GHSA-9xq9-36w5-q796, PYSEC-2026-2608 | High | 0.2% | 21 May, 2026 | PyPI lmdeploy |
md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed) CVE-2026-46492, GHSA-32q2-hhr5-6qvv | High | 0.2% | 21 May, 2026 | npm md-fileserver |
LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization CVE-2026-46432, GHSA-m549-qq94-fvhg, PYSEC-2026-2609 | High | 0.1% | 21 May, 2026 | PyPI lmdeploy |
samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions CVE-2026-46490, GHSA-34r5-q4jw-r36m | High | 0.5% | 21 May, 2026 | npm samlify |
Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS CVE-2026-48989, GHSA-vrxg-gm77-7q5g, PYSEC-2026-3425 | High | 0.4% | 21 May, 2026 | PyPI windows-mcp |
phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration CVE-2026-35675, GHSA-w9xh-5f39-vq89 | High | 0.4% | 20 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
phpMyFAQ: Default Empty API Token Authentication Bypass CVE-2026-35672, GHSA-gp95-j463-vv28 | High | 0.5% | 20 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
phpMyFAQ: IDOR Account Takeover CVE-2026-35671, GHSA-xvp4-phqj-cjr3 | High | 0.4% | 20 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation CVE-2026-35676, GHSA-9qv9-8xv6-5p35 | High | 0.3% | 20 May, 2026 | Packagist phpmyfaq/phpmyfaq Packagist thorsten/phpmyfaq |
wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None GHSA-mw8f-w6p8-xrf4 | High | Not scored | 20 May, 2026 | PyPI wger |
Diffusers: TOCTOU Trust Remote Code Bypass CVE-2026-45804, GHSA-7wx4-6vff-v64p, PYSEC-2026-2446 | High | 0.4% | 20 May, 2026 | PyPI diffusers |
Twig: Possible sandbox bypass when using a source policy CVE-2026-24425, GHSA-2q52-x2ff-qgfr | High | 0.8% | 20 May, 2026 | Packagist twig/twig |
Microsoft Defender Denial of Service Vulnerability CVE-2026-45498 | HighExploited | 63.1% | 20 May, 2026 | |
Microsoft Defender Link Following Vulnerability CVE-2026-41091 | HighExploited | 8.2% | 20 May, 2026 | |
@angular/platform-server: SSRF via Hostname Hijacking CVE-2026-46417, GHSA-rfh7-fxqc-q52v | High | 0.4% | 19 May, 2026 | npm @angular/platform-server |
Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments CVE-2026-27173, GHSA-524w-vq63-2xhf, PYSEC-2026-2365 | High | 0.2% | 19 May, 2026 | PyPI apache-airflow-providers-cncf-kubernetes |
CamoFox MCP: Unauthenticated HTTP MCP browser-control surface GHSA-7hgr-7h44-33w2 | High | Not scored | 19 May, 2026 | npm camofox-mcp |
SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser CVE-2026-46374, GHSA-73jc-5mrq-prw7, PYSEC-2026-210 | High | 0.3% | 19 May, 2026 | PyPI sqlfluff |