Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS CVE-2026-41150, GHSA-6m6c-36f7-fhxh | Medium | 0.4% | 11 May, 2026 | npm mermaid |
Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection CVE-2026-41149, GHSA-ghcm-xqfw-q4vr | Medium | 0.4% | 11 May, 2026 | npm mermaid |
Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection CVE-2026-41148, GHSA-xcj9-5m2h-648r | Medium | 0.3% | 11 May, 2026 | npm mermaid |
MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page CVE-2026-40598, GHSA-6jh4-47v2-4g37 | Medium | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values CVE-2026-39960, GHSA-qj6w-v29q-4rgx | Medium | 0.2% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked CVE-2026-34970, GHSA-crmx-4p49-46m2 | Medium | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API CVE-2026-34754, GHSA-h4x5-gvx6-3rwc | Medium | 0.2% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue CVE-2026-34744, GHSA-rmp5-5jj7-gmvf | Medium | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT has an authorization bypass in private issue monitoring CVE-2026-34579, GHSA-ggw7-9675-6v4v | Medium | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT Vulnerable to Privilege Escalation from Manager to Administrator CVE-2026-34390, GHSA-frf7-jhp9-jxm6 | Medium | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
@steipete/summarize allows local attackers to read bearer tokens and API credentials stored in ~/.summarize/daemon.json CVE-2026-45222, GHSA-qp7v-gjgg-4mj6 | Medium | 0.1% | 11 May, 2026 | npm @steipete/summarize |
MantisBT Has Authorization Bypass in Global Profile Creation CVE-2026-33052, GHSA-68w5-w573-q2r8 | Medium | 0.3% | 11 May, 2026 | Packagist mantisbt/mantisbt |
pgAdmin 4: Improper restriction of excessive authentication attempts CVE-2026-7820, GHSA-hv9p-2pqf-r5w3, PYSEC-2026-2869 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules CVE-2026-7814, GHSA-6p2c-69cv-3fxq, PYSEC-2026-2866 | Medium | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
GPT-Pilot contains a command injection vulnerability in the Executor.run() method CVE-2026-31246, GHSA-m85w-whwh-qvfx, PYSEC-2026-2501 | Medium | 0.7% | 11 May, 2026 | PyPI gpt-pilot |
Next.js's Middleware / Proxy redirects can be cache-poisoned CVE-2026-44572, GHSA-3g8h-86w9-wvmq | Medium | 0.3% | 11 May, 2026 | npm next |
Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces CVE-2026-44581, GHSA-ffhc-5mcf-pf4q | Medium | 0.2% | 11 May, 2026 | npm next |
Next.js has cross-site scripting in beforeInteractive scripts with untrusted input CVE-2026-44580, GHSA-gx5p-jg67-6x7h | Medium | 0.2% | 11 May, 2026 | npm next |
Next.js has a Denial of Service in the Image Optimization API CVE-2026-44577, GHSA-h64f-5h5j-jqjh | Medium | 0.7% | 11 May, 2026 | npm next |
Next.js vulnerable to cache poisoning in React Server Component responses CVE-2026-44576, GHSA-wfc6-r584-vfw7 | Medium | 0.3% | 11 May, 2026 | npm next |
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS) GHSA-88q9-cmp2-c2vq | Medium | Not scored | 11 May, 2026 | NuGet OxidizePdf.NET PyPI oxidize-pdf crates.io oxidize-pdf |
GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content CVE-2026-44972, GHSA-m5p4-gvpx-4mvr, PYSEC-2026-2506 | Medium | 0.1% | 11 May, 2026 | PyPI guarddog |
Streamlink has an arbitrary local file read via file:// URI in HLS and DASH CVE-2026-44353, GHSA-hgqw-6m45-hw5f, PYSEC-2026-180 | Medium | 0.4% | 11 May, 2026 | PyPI streamlink |
Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission CVE-2026-44571, GHSA-jgj3-r8hr-9pjw, PYSEC-2026-2739 | Medium | 0.3% | 11 May, 2026 | PyPI open-webui |
Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL CVE-2026-43826, GHSA-xccp-97wp-3gjg, PYSEC-2026-23 | Medium | 0.4% | 11 May, 2026 | PyPI apache-airflow-providers-opensearch |
Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL CVE-2026-41018, GHSA-g3jr-4jrm-jvqv, PYSEC-2026-22 | Medium | 0.4% | 11 May, 2026 | PyPI apache-airflow-providers-elasticsearch |
Hono has CSS Declaration Injection via Style Object Values in JSX SSR CVE-2026-44458, GHSA-qp7p-654g-cw7p | Medium | 0.2% | 09 May, 2026 | npm hono |
Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage CVE-2026-44457, GHSA-p77w-8qqv-26rm | Medium | 0.2% | 09 May, 2026 | npm hono |
Mistune Heading ID Attribute has Injection XSS CVE-2026-44897, GHSA-v87v-83h2-53w7, PYSEC-2026-2207 | Medium | 0.2% | 09 May, 2026 | PyPI mistune |
Mistune has XSS via unescaped figclass/figwidth in Figure directive CVE-2026-44896, GHSA-58cw-g322-p94v, PYSEC-2026-168 | Medium | 0.2% | 08 May, 2026 | PyPI mistune |
Mistune Math Plugin has an XSS Escape Bypass CVE-2026-44708, GHSA-8g87-j6q8-g93x, PYSEC-2026-2206 | Medium | 0.2% | 08 May, 2026 | PyPI mistune |
eml_parser has recursion DoS via nested message/rfc822 attachments CVE-2026-44844, GHSA-g47v-rwmh-r9f8, PYSEC-2026-2468 | Medium | 0.4% | 08 May, 2026 | PyPI eml-parser PyPI eml_parser |
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0) CVE-2026-44831, GHSA-r42m-953q-6vjx | Medium | 0.2% | 08 May, 2026 | Packagist snipe/snipe-it |
Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order CVE-2026-44568, GHSA-fq3v-xjjx-95rc, PYSEC-2026-2724 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields CVE-2026-44214, GHSA-m9g3-3g99-mhpx | Medium | 0.3% | 08 May, 2026 | npm eventsource-encoder |
Wagtail has improper permission handling when copying pages CVE-2026-44200, GHSA-67rv-mg8q-5pf3, PYSEC-2026-149 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper restriction handling on Documents and Images API CVE-2026-44201, GHSA-p5gm-92h4-6pv6, PYSEC-2026-150 | Medium | 0.3% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when deleting form submissions CVE-2026-44199, GHSA-pwm3-7fv4-g6xx, PYSEC-2026-148 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when viewing page history CVE-2026-44198, GHSA-c4mr-889m-vgf6, PYSEC-2026-147 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
Wagtail has improper permission handling when comparing revisions CVE-2026-44197, GHSA-c6wj-9vcj-75pj, PYSEC-2026-146 | Medium | 0.2% | 08 May, 2026 | PyPI wagtail |
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry GHSA-qhh4-458h-xwh2 | Medium | Not scored | 08 May, 2026 | npm @cyclonedx/cdxgen |
Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search CVE-2026-44560, GHSA-h36f-rqpx-j5wx, PYSEC-2026-2729 | Medium | 0.4% | 08 May, 2026 | PyPI open-webui |
Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels CVE-2026-44561, GHSA-hmgr-67hw-j2cq, PYSEC-2026-2732 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO CVE-2026-44564, GHSA-vrfh-rj4q-rmhr, PYSEC-2026-2762 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show CVE-2026-44563, GHSA-rcvp-6fgw-c7fh, PYSEC-2026-2754 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Model Import Overwrites Any Model Without Ownership Check CVE-2026-44562, GHSA-mqq6-cqcx-38vg, PYSEC-2026-2749 | Medium | 0.3% | 08 May, 2026 | PyPI open-webui |
Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels CVE-2026-44559, GHSA-c7wp-3qh5-55pv, PYSEC-2026-2720 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection CVE-2026-44557, GHSA-6c2x-gcp3-gp73, PYSEC-2026-2707 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants CVE-2026-44558, GHSA-7rjh-px4v-5w55, PYSEC-2026-2711 | Medium | 0.2% | 08 May, 2026 | PyPI open-webui |
Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts CVE-2026-44550, GHSA-hr43-rjmr-7wmm, PYSEC-2026-2735 | Medium | 0.3% | 08 May, 2026 | PyPI open-webui |