Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426) CVE-2026-6607, GHSA-5h65-jx66-j7p5, PYSEC-2026-2484 | Medium | 0.6% | 20 Apr, 2026 | PyPI fschat |
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6606, GHSA-crx8-wpv6-jrj2, PYSEC-2026-2332 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6605, GHSA-8ggf-r3vm-p3jc, PYSEC-2026-2330 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope vulnerable to Server-Side Request Forgery CVE-2026-6604, GHSA-659x-hm75-hpv7, PYSEC-2026-2329 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
AgentScope Vulnerable to Remote Code Injection CVE-2026-6603, GHSA-cr24-fv3h-8cjm, PYSEC-2026-2331 | Medium | 0.3% | 20 Apr, 2026 | PyPI agentscope |
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API CVE-2026-6596, GHSA-vvfc-fp59-m92g, PYSEC-2026-2572 | Medium | 0.3% | 20 Apr, 2026 | PyPI langflow-base |
Deep Merge is Vulnerable to Prototype Pollution Through Lack of Sanitization CVE-2026-6594, GHSA-3jc6-6r48-v6qf | Medium | 0.3% | 20 Apr, 2026 | npm @brikcss/merge |
apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation CVE-2026-40948, GHSA-5w6h-pjw6-wvc6, PYSEC-2026-2369 | Medium | 0.4% | 18 Apr, 2026 | PyPI apache-airflow-providers-keycloak |
pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders CVE-2026-41426, GHSA-jm8c-9f3j-4378, PYSEC-2026-109 | Medium | 0.2% | 18 Apr, 2026 | PyPI pretalx |
OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths CVE-2026-44111, GHSA-f934-5rqf-xx47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Webchat media embedding enforces local-root containment for tool-result files CVE-2026-41389, GHSA-mr34-9552-qr95 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
Kimai: Username enumeration via timing on X-AUTH-USER CVE-2026-80199, GHSA-jrc6-fmhw-fpq2 | Medium | 0.3% | 17 Apr, 2026 | Packagist kimai/kimai |
OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets CVE-2026-43576, GHSA-f7fh-qg34-x2xh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure CVE-2026-42438, GHSA-jhpv-5j76-m56h | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage CVE-2026-43580, GHSA-536q-mj95-h29h | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement CVE-2026-43573, GHSA-527m-976r-jf79 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser tabs action select and close routes bypassed SSRF policy CVE-2026-42439, GHSA-rj2p-j66c-mgqh | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Nostr profile mutation routes allowed operator.write config persistence CVE-2026-43579, GHSA-f3h5-h452-vp3j | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF policy default allowed private-network navigation CVE-2026-43527, GHSA-53vx-pmqw-863c | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding CVE-2026-43582, GHSA-xq94-r468-qwgj | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Discord event cover images bypassed sandbox media normalization CVE-2026-43532, GHSA-c9h3-5p7r-mrjh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Empty approver lists could grant explicit approval authorization CVE-2026-43574, GHSA-49cg-279w-m73x | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks CVE-2026-43572, GHSA-gc9r-867r-j85f | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay CVE-2026-43583, GHSA-r77c-2cmr-7p47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation CVE-2026-42436, GHSA-c4qm-58hj-j6pj | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
Auth0 Next.js SDK has Improper Proxy Cache Lookup CVE-2026-40155, GHSA-xq8m-7c5p-c2r6 | Medium | 0.2% | 17 Apr, 2026 | npm @auth0/nextjs-auth0 |
Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows CVE-2026-35603, GHSA-5cwg-9f6j-9jvx | Medium | 0.1% | 17 Apr, 2026 | npm @anthropic-ai/claude-code |
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass) CVE-2026-42259, GHSA-f3g8-9xv5-77gv | Medium | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass CVE-2026-41481, GHSA-fv5p-p927-qmxr, PYSEC-2026-77 | Medium | 0.3% | 16 Apr, 2026 | PyPI langchain-text-splitters |
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization GHSA-fpw4-p57j-hqmq | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/ui |
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server GHSA-p7mm-r948-4q3q | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath GHSA-3pw3-v88x-xj24 | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/shared |
Authlib: Cross-site request forging when using cache CVE-2026-41425, GHSA-jj8c-mmj3-mmgv, PYSEC-2026-25 | Medium | 0.1% | 16 Apr, 2026 | PyPI authlib |
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM CVE-2026-41314, GHSA-x284-j5p8-9c5p, PYSEC-2026-3026 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
pypdf: Possible long runtimes for wrong size values in incremental mode CVE-2026-41313, GHSA-4pxv-j86v-mhcw, PYSEC-2026-3007 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM CVE-2026-41312, GHSA-7gw9-cf7v-778f, PYSEC-2026-3011 | Medium | 0.2% | 16 Apr, 2026 | PyPI pypdf |
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates CVE-2026-40602, GHSA-33qf-q99x-wpm8, PYSEC-2026-2518 | Medium | 0.1% | 16 Apr, 2026 | PyPI homeassistant-cli |
Flowise Execute Flow function has an SSRF vulnerability CVE-2026-56275, GHSA-9hrv-gvrv-6gf2 | Medium | 0.3% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) CVE-2026-43995, GHSA-qqvm-66q4-vf5c | Medium | 0.4% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Path Traversal in Vector Store basePath CVE-2026-56273, GHSA-w6v6-49gh-mc9w | Medium | 0.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Weak Default Token Hash Secret CVE-2026-56269, GHSA-m7mq-85xj-9x33 | Medium | 0.1% | 16 Apr, 2026 | npm flowise |
Mojic: Observable Timing Discrepancy in HMAC Verification CVE-2026-41244, GHSA-wqq3-wfmp-v85g | Medium | 0.1% | 16 Apr, 2026 | npm mojic |
@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes CVE-2026-41213, GHSA-jhm7-29pj-4xvf | Medium | 0.3% | 16 Apr, 2026 | npm @node-oauth/oauth2-server |
Silverstripe Assets Module has a DBFile::getURL() permission bypass CVE-2026-24749, GHSA-jgcf-rf45-2f8v | Medium | 0.4% | 16 Apr, 2026 | Packagist silverstripe/assets |
@fastify/static vulnerable to path traversal in directory listing CVE-2026-6410, GHSA-pr96-94w5-mx2h | Medium | 0.5% | 16 Apr, 2026 | npm @fastify/static |
@fastify/static vulnerable to route guard bypass via encoded path separators CVE-2026-6414, GHSA-x428-ghpx-8j92 | Medium | 0.4% | 16 Apr, 2026 | npm @fastify/static |
wger has Stored XSS via Unescaped License Attribution Fields CVE-2026-40353, GHSA-6f54-qjvm-wwq3, PYSEC-2026-3419 | Medium | 0.2% | 16 Apr, 2026 | PyPI wger |
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance CVE-2026-76226, GHSA-5vjq-5jmg-39xq | Medium | 0.3% | 16 Apr, 2026 | npm renovate |
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition) CVE-2026-40594, GHSA-mp82-fmj6-f22v, PYSEC-2026-125 | Medium | 0.2% | 16 Apr, 2026 | PyPI pyload-ng |
LangSmith SDK: Streaming token events bypass output redaction CVE-2026-41182, GHSA-rr7j-v2q5-chgv, PYSEC-2026-2583 | Medium | 0.2% | 16 Apr, 2026 | PyPI langsmith npm langsmith |