Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh CVE-2026-45136, GHSA-g3xq-3gmv-qq8g | High | 0.2% | 13 May, 2026 | npm claude-code-cache-fix |
Nautobot: GitRepository.current_head field should not be writable through REST API CVE-2026-44798, GHSA-p3hx-pwf3-j8wr, PYSEC-2026-2228 | High | 0.3% | 13 May, 2026 | PyPI nautobot |
Nautobot: Webhook definitions could be used for server-side request forgery (SSRF) CVE-2026-44797, GHSA-c35q-vxrp-ph26, PYSEC-2026-2227 | High | 0.2% | 13 May, 2026 | PyPI nautobot |
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134, GHSA-3644-q5cj-c5c7, PYSEC-2026-2555, PYSEC-2026-2560, PYSEC-2026-2582 | High | 0.2% | 13 May, 2026 | PyPI langchain PyPI langchain-classic PyPI langsmith npm langsmith |
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name CVE-2026-44724, GHSA-hvx9-hwr7-wjj9 | High | 0.9% | 13 May, 2026 | npm systeminformation |
UltraJSON has a Memory Leak in ujson.dump() on Write Failure CVE-2026-44660, GHSA-c38f-wx89-p2xg, PYSEC-2026-2293 | High | 0.4% | 12 May, 2026 | PyPI ujson |
SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover CVE-2026-44648, GHSA-wmm3-h9qj-p5v6 | High | 0.4% | 12 May, 2026 | npm sillytavern |
mem0 server lacks authentication and authorization controls for its memory management API endpoints CVE-2026-31240, GHSA-jfv9-68m5-gjjr, PYSEC-2026-2635 | High | 0.4% | 12 May, 2026 | PyPI mem0ai |
Superduper: Remote code execution via unsafe eval in superduper query parsing CVE-2026-31225, GHSA-2799-6g5r-mmc7, PYSEC-2026-3077 | High | 0.4% | 12 May, 2026 | PyPI superduper-framework |
Snorkel MultitaskClassifier.load uses an unsafe torch.load CVE-2026-31224, GHSA-gpx5-7xm4-229w, PYSEC-2026-3070 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel BaseLabeler.load uses an unsafe pickle.load CVE-2026-31223, GHSA-fq92-qc8f-482v, PYSEC-2026-3069 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
Snorkel Trainer.load uses an unsafe torch.load CVE-2026-31222, GHSA-78cp-f66x-qmh5, PYSEC-2026-3068 | High | 0.4% | 12 May, 2026 | PyPI snorkel |
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization CVE-2026-31221, GHSA-75m9-98v2-hjpm, PYSEC-2026-3043, PYSEC-2026-3972 | High | 0.4% | 12 May, 2026 | PyPI lightning PyPI pytorch-lightning |
protobuf.js: Code injection in pbjs static output from crafted schema names CVE-2026-44295, GHSA-6r35-46g8-jcw9 | High | 0.4% | 12 May, 2026 | npm protobufjs-cli |
protobuf.js: Code injection through bytes field defaults in generated toObject code CVE-2026-44293, GHSA-66ff-xgx4-vchm | High | 0.4% | 12 May, 2026 | npm protobufjs |
protobuf.js: Code generation gadget after prototype pollution CVE-2026-44291, GHSA-75px-5xx7-5xc7 | High | 0.5% | 12 May, 2026 | npm protobufjs |
protobuf.js: Process-wide denial of service through unsafe option paths CVE-2026-44290, GHSA-jvwf-75h9-cwgg | High | 0.4% | 12 May, 2026 | npm protobufjs |
protobuf.js: Denial of service through unbounded protobuf recursion CVE-2026-44289, GHSA-685m-2w69-288q | High | 0.6% | 12 May, 2026 | npm protobufjs |
protobuf.js is Vulnerable to OS Command Injection in the CLI CVE-2026-42290, GHSA-f84p-cvgm-xgjj | High | 0.1% | 12 May, 2026 | npm protobufjs-cli |
multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing CVE-2026-8162, GHSA-xh3c-6gcq-g4rv | High | 0.3% | 12 May, 2026 | npm multiparty |
multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception CVE-2026-8161, GHSA-qxch-whhj-8956 | High | 0.5% | 12 May, 2026 | npm multiparty |
multiparty vulnerable to ReDoS via filename parsing CVE-2026-8159, GHSA-65x3-rw7q-gx94 | High | 0.3% | 12 May, 2026 | npm multiparty |
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem BIT-mlflow-2026-2614, CVE-2026-2614, GHSA-42h5-h8qh-vv9v, PYSEC-2026-2654 | High | 3.7% | 11 May, 2026 | PyPI mlflow |
MantisBT Vulnerable to Stored XSS in File Download CVE-2026-44657, GHSA-p6fr-rxq7-xcg8 | High | 0.3% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT has Stored XSS on Move Attachments Admin Page CVE-2026-44655, GHSA-7mqj-8gj2-cg59 | High | 0.3% | 11 May, 2026 | Packagist mantisbt/mantisbt |
Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()` CVE-2026-44635, GHSA-pv5w-4p9q-p3v2 | High | 0.4% | 11 May, 2026 | npm kysely |
MantisBT has a Private Bugnote Attachment Content Leak via REST API CVE-2026-42071, GHSA-pw5x-2mf9-3xc8 | High | 0.3% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column CVE-2026-40607, GHSA-f633-865q-2mhh | High | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT has a Content Security Policy bypass via attachments CVE-2026-40597, GHSA-9c3j-xm6v-j7j3 | High | 0.5% | 11 May, 2026 | Packagist mantisbt/mantisbt |
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference CVE-2026-40596, GHSA-j3v9-553h-x28j | High | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
Yii 2: Local file inclusion via view parameter name collision CVE-2026-39850, GHSA-5vpg-rj7q-qpw2 | High | 0.5% | 11 May, 2026 | Packagist yiisoft/yii2 |
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form CVE-2026-34463, GHSA-fvjf-68wh-rwp2 | High | 0.4% | 11 May, 2026 | Packagist mantisbt/mantisbt |
automagik-genie has a command injection vulnerability CVE-2026-30635, GHSA-64vr-4gr2-m642 | High | 1.0% | 11 May, 2026 | npm automagik-genie |
MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability BIT-mlflow-2026-2393, CVE-2026-2393, GHSA-65h7-c7c4-mghx, PYSEC-2026-2219 | High | 0.3% | 11 May, 2026 | PyPI mlflow |
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray() CVE-2026-44738, GHSA-j274-39qw-32c9 | High | 0.3% | 11 May, 2026 | Packagist getgrav/grav |
flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism CVE-2026-31253, GHSA-7g5w-pq96-8c5w, PYSEC-2026-2477 | High | 0.2% | 11 May, 2026 | PyPI flash-attn PyPI flash_attn |
Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31248, GHSA-9f4q-q82q-4359, PYSEC-2026-2454 | High | 0.3% | 11 May, 2026 | PyPI docling |
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up CVE-2026-45109, GHSA-26hh-7cqf-hhc6 | High | 0.6% | 11 May, 2026 | npm next |
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`) CVE-2026-45061, GHSA-xh5j-727m-w6gg | High | 0.3% | 11 May, 2026 | npm budibase |
pgAdmin 4 File Manager has symbolic-link path traversal CVE-2026-7819, GHSA-hr4r-fwpv-c95j, PYSEC-2026-2868 | High | 0.3% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager CVE-2026-7818, GHSA-4rhg-h8f2-v4jm, PYSEC-2026-2865 | High | 0.1% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities CVE-2026-7817, GHSA-p58c-q354-6c4f, PYSEC-2026-2871 | High | 0.2% | 11 May, 2026 | PyPI pgadmin4 |
pgAdmin 4: OS command injection vulnerability in Import/Export query export CVE-2026-7816, GHSA-j74f-g7vx-fh4x, PYSEC-2026-2870 | High | 1.4% | 11 May, 2026 | PyPI pgadmin4 |
SQL injection vulnerability in pgAdmin 4 Maintenance Tool CVE-2026-7815, GHSA-hp84-p2gq-6fvr, PYSEC-2026-2867 | High | 0.5% | 11 May, 2026 | PyPI pgadmin4 |
Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31247, GHSA-cr42-rg2m-mq4q, PYSEC-2026-2455 | High | 0.4% | 11 May, 2026 | PyPI docling |
GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor CVE-2026-45033, GHSA-9ccr-r5hg-74gf | High | 0.4% | 11 May, 2026 | npm @github/copilot |
elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL) CVE-2026-44521, GHSA-c3gj-q88f-7hqj | High | 0.2% | 11 May, 2026 | Packagist studio-42/elfinder |
@theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function GHSA-mhwj-73qx-jqxm | High | Not scored | 11 May, 2026 | npm @theecryptochad/merge-guard |
@rvf/set-get has a prototype pollution issue that's reachable via @rvf/core preprocessFormData (HTTP form data) CVE-2026-44483, GHSA-c567-44rc-m5hq | High | 0.4% | 11 May, 2026 | npm @rvf/set-get |
Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components CVE-2026-44579, GHSA-mg66-mrh9-m8jx | High | 0.7% | 11 May, 2026 | npm next |