Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts CVE-2026-45675, GHSA-h3ww-q6xx-w7x3, PYSEC-2026-2730 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed CVE-2026-45672, GHSA-482j-2pq6-q5w4, PYSEC-2026-2698 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion CVE-2026-45671, GHSA-26g9-27vm-x3q8, PYSEC-2026-2692 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order CVE-2026-45665, GHSA-cqp4-qqvg-3787 | High | 0.3% | 14 May, 2026 | npm open-webui |
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints CVE-2026-45402, GHSA-r472-mw7m-967f, PYSEC-2026-2752 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url CVE-2026-56398, GHSA-3wgj-c2hg-vm6q | High | 0.6% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958) CVE-2026-45401, GHSA-rh5x-h6pp-cjj6, PYSEC-2026-2755 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url` CVE-2026-45400, GHSA-8w7q-q5jp-jvgx, PYSEC-2026-2715 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption CVE-2026-45399, GHSA-8jjp-r2w2-4v22, PYSEC-2026-2714 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls CVE-2026-45398, GHSA-4g37-7p2c-38r9, PYSEC-2026-2699 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution CVE-2026-45395, GHSA-p4fx-23fq-jfg6 | High | 0.4% | 14 May, 2026 | npm open-webui |
Open WebUI's chat completion API allows tool restrictions to be bypassed CVE-2026-45350, GHSA-4pcg-253r-rf9w, PYSEC-2026-2700 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has Broken Access Control for Completions API CVE-2026-45349, GHSA-gfm2-xm6c-37qc, PYSEC-2026-2726 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal CVE-2026-45348, GHSA-fcjq-435v-jx94, PYSEC-2026-2994 | High | 0.2% | 14 May, 2026 | PyPI pyload-ng |
Svelte devalue: DoS via sparse array deserialization CVE-2026-42570, GHSA-77vg-94rm-hx3p | High | 0.4% | 14 May, 2026 | npm devalue |
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) CVE-2026-45338, GHSA-24c9-2m8q-qhmh, PYSEC-2026-2691 | High | 0.4% | 14 May, 2026 | PyPI open-webui |
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature CVE-2026-45331, GHSA-4v7r-f4w8-8972, PYSEC-2026-2702 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image CVE-2026-45314, GHSA-3856-3vxq-m6fc, PYSEC-2026-2694 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions CVE-2026-45315, GHSA-m8f9-9whg-f4xr, PYSEC-2026-2748 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path CVE-2026-8596, GHSA-7hh5-prp2-mfh5, PYSEC-2026-3059 | High | 0.6% | 14 May, 2026 | PyPI sagemaker |
Open WebUI has stored XSS via the HTML renedering view CVE-2026-45303, GHSA-4vrc-m9ch-6m3r, PYSEC-2026-2704 | High | 0.2% | 14 May, 2026 | PyPI open-webui |
Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file CVE-2026-45301, GHSA-r8wh-8m7r-fh33, PYSEC-2026-2753 | High | 0.3% | 14 May, 2026 | PyPI open-webui |
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override CVE-2026-44541, GHSA-5qrq-9645-g5g2, PYSEC-2026-2470 | High | 0.3% | 14 May, 2026 | PyPI ethyca-fides |
Apostrophe has stored XSS via javascript: URL in Image Widget Link CVE-2026-45011, GHSA-5f64-7vfc-rcx6 | High | 0.3% | 14 May, 2026 | npm apostrophe |
Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation CVE-2026-45013, GHSA-gf43-24g3-5hw2 | High | 0.3% | 14 May, 2026 | npm apostrophe |
Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget CVE-2026-45012, GHSA-pr28-mf3q-qpg6 | High | 0.2% | 14 May, 2026 | npm apostrophe |
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections GHSA-7rx4-c5vx-g8w3 | High | Not scored | 14 May, 2026 | npm @karakeep/sdk |
FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover CVE-2026-46480, GHSA-wxrr-jp8m-qq7f | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover CVE-2026-46479, GHSA-mq53-pc65-wjc4 | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover CVE-2026-46478, GHSA-7j65-65cr-6644 | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover CVE-2026-46477, GHSA-5h9v-837x-m97r | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover CVE-2026-46476, GHSA-728h-4mwj-f2p4 | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover CVE-2026-46475, GHSA-78pr-c5x5-jggc | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI: Vector Store No Permission Checks CVE-2026-46444, GHSA-hmg2-jjjx-jcp2 | High | 0.3% | 14 May, 2026 | npm flowise |
Synapse CPU starvation (Denial of Service) CVE-2026-45078, GHSA-8q93-326v-3m7g, PYSEC-2026-191 | High | 0.1% | 14 May, 2026 | PyPI matrix-synapse |
n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints CVE-2026-45732, GHSA-6h4j-wcr9-2vg7 | High | 0.4% | 14 May, 2026 | npm n8n |
n8n Has a Source Control Pull SQL Injection CVE-2026-44792, GHSA-mhrx-qhrj-673w | High | 0.4% | 14 May, 2026 | npm n8n |
wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager CVE-2026-43978, GHSA-9qpr-vc49-hqg2, PYSEC-2026-3420 | High | 0.3% | 14 May, 2026 | PyPI wger |
wger Vulnerable to IDOR: Authenticated Users Can Read Any User's Private Workout Session Data via Template Routine API CVE-2026-43977, GHSA-cj9g-27ph-4cgv, PYSEC-2026-3421 | High | 0.3% | 14 May, 2026 | PyPI wger |
dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport CVE-2026-42559, GHSA-89vp-x53w-74fx, GHSA-fvh2-gm75-j4j7, RUSTSEC-2026-0140, RUSTSEC-2026-0189 | High | 0.3% | 14 May, 2026 | crates.io dynoxide-rs npm dynoxide |
FlowiseAI Vulnerable to Credential Data Leak CVE-2026-46443, GHSA-7g73-99r4-m4mj | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment CVE-2026-46441, GHSA-hp26-q66v-q2w7 | High | 0.3% | 14 May, 2026 | npm flowise |
Flowise has an MCP Security Bypass that Enables RCE CVE-2026-56274, GHSA-m99r-2hxc-cp3q | High | 7.5% | 14 May, 2026 | npm flowise npm flowise-components |
FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment CVE-2026-42863, GHSA-5wxp-qjgq-fx6m | High | 0.3% | 14 May, 2026 | npm flowise |
FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment CVE-2026-42862, GHSA-x5v6-pj28-cwwm | High | 0.2% | 14 May, 2026 | npm flowise |
FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment CVE-2026-42861, GHSA-6fw7-3q8r-m5vj | High | 0.3% | 14 May, 2026 | npm flowise |
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration CVE-2026-41249, GHSA-q58j-g3f4-h26h | High | 0.5% | 14 May, 2026 | Packagist coreshop/core-shop |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2026-0257 | HighExploited | 95.0% | 13 May, 2026 | |
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion CVE-2026-45740, GHSA-jggg-4jg4-v7c6 | High | 0.3% | 13 May, 2026 | npm protobufjs |
wger has an Uncontrolled Resource Consumption issue CVE-2026-86255, GHSA-v25j-wqcw-fvhj | High | 0.4% | 13 May, 2026 | PyPI wger |