Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header CVE-2026-41683, GHSA-c3h8-g69v-pjrg | High | 0.3% | 22 Apr, 2026 | npm i18next-http-middleware |
xmldom: Uncontrolled recursion in XML serialization leads to DoS CVE-2026-41673, GHSA-2v35-w6hq-6mfw | High | 0.6% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML injection through unvalidated DocumentType serialization CVE-2026-41674, GHSA-f6ww-3ggp-fr8h | High | 0.6% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML node injection through unvalidated processing instruction serialization CVE-2026-41675, GHSA-x6wf-f3px-wcqx | High | 0.5% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML node injection through unvalidated comment serialization CVE-2026-41672, GHSA-j759-j44w-7fr8 | High | 0.5% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
@nocobase/database has SQL Injection via String Concatenation through Recursive Eager Loading CVE-2026-41640, GHSA-4948-f92q-f432 | High | 1.9% | 22 Apr, 2026 | npm @nocobase/database |
@nocobase/plugin-collection-sql: SQL Validation Bypass Through Missing `checkSQL` Call CVE-2026-41641, GHSA-wrwh-c28m-9jjh | High | 1.8% | 22 Apr, 2026 | npm @nocobase/plugin-collection-sql |
i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite CVE-2026-41693, GHSA-8847-338w-5hcj | High | 0.3% | 22 Apr, 2026 | npm i18next-fs-backend |
i18next-http-middleware: Prototype pollution and path traversal via user-controlled language and namespace parameters CVE-2026-41690, GHSA-5fgg-jcpf-8jjw | High | 0.3% | 22 Apr, 2026 | npm i18next-http-middleware |
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes GHSA-mh6w-vxff-9wqp | High | Not scored | 22 Apr, 2026 | Packagist phpunit/phpunit |
engram: HTTP server CORS wildcard + auth-off-by-default enables CSRF graph exfiltration and persistent indirect prompt injection GHSA-2r2p-4cgf-hv7h | High | Not scored | 22 Apr, 2026 | npm engramx |
@saltcorn/data: Tenant user role is used for tenant creation role check GHSA-9237-rg5p-rhfw | High | Not scored | 22 Apr, 2026 | npm @saltcorn/data |
InstructLab Includes Functionality from Untrusted Control Sphere CVE-2026-6859, GHSA-rxpq-xgqx-fr7p, PYSEC-2026-2522 | High | 0.4% | 22 Apr, 2026 | PyPI instructlab |
InstructLab vulnerable to Path Traversal CVE-2026-6855, GHSA-pqmg-c2j8-fq92, PYSEC-2026-2521 | High | 0.2% | 22 Apr, 2026 | PyPI instructlab |
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability CVE-2026-31431 | HighExploited | 98.1% | 22 Apr, 2026 | |
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files CVE-2026-41066, GHSA-vfmq-68hx-4jfw, PYSEC-2026-87 | High | 0.3% | 21 Apr, 2026 | PyPI lxml |
Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions CVE-2026-31019, GHSA-j2g9-rprv-hrhc | High | 0.6% | 21 Apr, 2026 | Packagist dolibarr/dolibarr |
Dolibarr Allows Code Injection through its Website Module CVE-2026-31018, GHSA-676v-wh57-p375 | High | 0.3% | 21 Apr, 2026 | Packagist dolibarr/dolibarr |
TYPO3 CMS Stores Cleartext Password in User Settings Module CVE-2026-6553, GHSA-xvv6-p4wf-mvx7 | High | 0.2% | 21 Apr, 2026 | Packagist typo3/cms-backend |
Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace CVE-2026-39861, GHSA-vp62-r36r-9xqp | High | 0.7% | 21 Apr, 2026 | npm @anthropic-ai/claude-code |
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths CVE-2026-39320, GHSA-7gcj-phff-2884 | High | 0.4% | 21 Apr, 2026 | npm signalk-server |
Glances has SSRF in IP Plugin via public_api leading to credential leakage CVE-2026-35587, GHSA-g5pq-48mj-jvw8, PYSEC-2026-2176 | High | 0.4% | 21 Apr, 2026 | PyPI glances |
OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal CVE-2026-35570, GHSA-m6rx-7pvw-2f73 | High | 0.2% | 21 Apr, 2026 | npm @gitlawb/openclaude |
Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS CVE-2026-34839, GHSA-gfc2-9qmw-w7vh, PYSEC-2026-2175 | High | 0.4% | 21 Apr, 2026 | PyPI Glances PyPI glances |
LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading CVE-2026-33626, GHSA-6w67-hwm5-92mq, PYSEC-2026-2607 | High | 45.3% | 20 Apr, 2026 | PyPI lmdeploy |
OpenMage LTS: Customer File Upload Extension Blocklist Bypass → Remote Code Execution CVE-2026-40488, GHSA-3j5q-7q7h-2hhv | High | 0.7% | 20 Apr, 2026 | Packagist openmage/magento-lts |
OpenMage LTS: Phar Deserialization leads to Remote Code Execution CVE-2026-25524, GHSA-fg79-cr9c-7369 | High | 0.6% | 20 Apr, 2026 | Packagist openmage/magento-lts |
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions BIT-airflow-2026-32228, CVE-2026-32228, GHSA-h97w-pm3w-mwmc, PYSEC-2026-2360 | High | 0.4% | 18 Apr, 2026 | PyPI apache-airflow-core |
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false BIT-airflow-2026-30912, CVE-2026-30912, GHSA-w7cf-2pmc-5m4c, PYSEC-2026-18, PYSEC-2026-2361 | High | 0.4% | 18 Apr, 2026 | PyPI apache-airflow PyPI apache-airflow-core |
Apache Airflow allows code execution through crafted XCom payloads BIT-airflow-2026-25917, CVE-2026-25917, GHSA-6ffj-2wg2-w45j, PYSEC-2026-13, PYSEC-2026-2359 | High | 0.8% | 18 Apr, 2026 | PyPI apache-airflow PyPI apache-airflow-core |
pretalx vulnerable to stored cross-site scripting in organizer search typeahead CVE-2026-41241, GHSA-cjcx-jfp2-f7m2, PYSEC-2026-108 | High | 0.2% | 18 Apr, 2026 | PyPI pretalx |
Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations CVE-2026-41490, GHSA-mjw2-v2hm-wj34, PYSEC-2026-2432, PYSEC-2026-2433, PYSEC-2026-2434, PYSEC-2026-2435, PYSEC-2026-2436, PYSEC-2026-2437 | High | 0.3% | 18 Apr, 2026 | PyPI dagster PyPI dagster-deltalake PyPI dagster-duckdb PyPI dagster-gcp +2 more |
YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave() CVE-2026-41143, GHSA-f58v-p6j9-24c2 | High | 0.3% | 18 Apr, 2026 | Packagist yeswiki/yeswiki |
PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes CVE-2026-41570, GHSA-qrr6-mg7r-m243 | High | 0.2% | 18 Apr, 2026 | Packagist phpunit/phpunit |
elFinder: Command injection in resize background color parameter when using ImageMagick CLI CVE-2026-41247, GHSA-8q4h-8crm-5cvc | High | 1.6% | 17 Apr, 2026 | Packagist studio-42/elfinder |
OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries CVE-2026-44110, GHSA-2gvc-4f3c-2855 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) CVE-2026-41496, GHSA-rg3h-x3jw-7jm5, PYSEC-2026-2923, PYSEC-2026-2952 | High | 0.3% | 17 Apr, 2026 | PyPI praisonai PyPI praisonaiagents |
OpenClaw: QQBot media tags could read arbitrary local files through reply text CVE-2026-43533, GHSA-66r7-m7xm-v49h | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: busybox and toybox applet execution weakened exec approval binding CVE-2026-43530, GHSA-2cq5-mf3v-mx44 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Matrix profile config persistence was reachable from operator.write message tools CVE-2026-42433, GHSA-7jp6-r74r-995q | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sandboxed agents could escape exec routing via host=node override CVE-2026-42434, GHSA-736r-jwj6-4w23 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads CVE-2026-43577, GHSA-qmwg-qprg-3j38 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins CVE-2026-43569, GHSA-939r-rj45-g2rj | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows CVE-2026-43571, GHSA-82qx-6vj7-p8m2 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: screen_record outPath bypassed workspace-only filesystem guard CVE-2026-43567, GHSA-jf25-7968-h2h5 | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes CVE-2026-43526, GHSA-2767-2q9v-9326 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace .env could inject OpenClaw runtime-control variables CVE-2026-43531, GHSA-7wv4-cc7p-jhxc | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Exec environment denylist missed high-risk interpreter startup variables CVE-2026-43584, GHSA-vfp4-8x56-j7c5 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms CVE-2026-42435, GHSA-j6c7-3h5x-99g9 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Memory dreaming config persistence was reachable from operator.write commands CVE-2026-43568, GHSA-5gjc-grvm-m88j | High | 0.2% | 17 Apr, 2026 | npm openclaw |