Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket CVE-2026-86201, GHSA-h6rj-3m53-887h | High | 0.6% | 06 Apr, 2026 | Packagist pocketmine/pocketmine-mp |
Vite: `server.fs.deny` bypassed with queries CVE-2026-39364, GHSA-v2wj-q39q-566r | High | 2.3% | 06 Apr, 2026 | npm vite |
Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket CVE-2026-39363, GHSA-p9ff-h696-f583 | High | 3.4% | 06 Apr, 2026 | npm vite |
strawberry-graphql: Denial of Service via unbounded WebSocket subscriptions CVE-2026-35526, GHSA-hv3w-m4g2-5x77, PYSEC-2026-134 | High | 0.3% | 06 Apr, 2026 | PyPI strawberry-graphql |
strawberry-graphql: Authentication bypass via legacy graphql-ws WebSocket subprotocol CVE-2026-35523, GHSA-vpwc-v33q-mq89, PYSEC-2026-133 | High | 0.4% | 06 Apr, 2026 | PyPI strawberry-graphql |
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write CVE-2026-34589, GHSA-p8xc-w3q4-h64x, PYSEC-2026-2848 | High | 0.4% | 06 Apr, 2026 | PyPI OpenEXR PyPI openexr |
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write CVE-2026-34588, GHSA-588r-cr5c-w6hf, PYSEC-2026-2845 | High | 0.5% | 06 Apr, 2026 | PyPI OpenEXR PyPI openexr |
Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr CVE-2026-34444, GHSA-69v7-xpr6-6gjm, PYSEC-2026-2613 | High | 0.6% | 06 Apr, 2026 | PyPI lupa |
Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution CVE-2026-34148, GHSA-gm9m-gwc4-hwgp | High | 0.6% | 06 Apr, 2026 | npm @fedify/fedify npm @fedify/vocab-runtime |
pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509) CVE-2026-35464, GHSA-4744-96p5-mp2j, PYSEC-2026-2989 | High | 0.5% | 04 Apr, 2026 | PyPI pyload-ng |
pyLoad: Improper Neutralization of Special Elements used in an OS Command CVE-2026-35463, GHSA-w48f-wwwf-f5fr, PYSEC-2026-2267 | High | 0.8% | 04 Apr, 2026 | PyPI pyload-ng |
defu: Prototype pollution via `__proto__` key in defaults argument CVE-2026-35209, GHSA-737v-mqg7-c878 | High | 0.4% | 04 Apr, 2026 | npm defu |
LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass CVE-2026-30762, GHSA-mcww-4hxq-hfr3, PYSEC-2026-2593 | High | Not scored | 04 Apr, 2026 | PyPI lightrag-hku |
Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries CVE-2026-35442, GHSA-38hg-ww64-rrwc | High | 0.3% | 04 Apr, 2026 | npm directus |
Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver GHSA-6q22-g298-grjh | High | Not scored | 04 Apr, 2026 | npm directus |
Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite CVE-2026-35412, GHSA-qqmv-5p3g-px89 | High | 0.3% | 04 Apr, 2026 | npm directus |
Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import CVE-2026-35409, GHSA-wv3h-5fx7-966h | High | 0.3% | 04 Apr, 2026 | npm directus |
Directus: Path Traversal and Broken Access Control in File Management API CVE-2026-39942, GHSA-393c-p46r-7c95 | High | 0.2% | 04 Apr, 2026 | npm directus |
@mobilenext/mobile-mcp: Arbitrary Android Intent Execution via mobile_open_url CVE-2026-35394, GHSA-5qhv-x9j4-c3vm | High | 0.4% | 04 Apr, 2026 | npm @mobilenext/mobile-mcp |
@stablelib/cbor: Stack exhaustion Denial of Service via deeply nested CBOR arrays, maps, or tags CVE-2026-106447, GHSA-5jg4-p4qw-cgfr | High | 0.5% | 04 Apr, 2026 | npm @stablelib/cbor |
@stablelib/cbor: Prototype poisoning via `__proto__` map keys in CBOR decoding CVE-2026-106448, GHSA-w48f-fwg7-ww6p | High | 0.4% | 04 Apr, 2026 | npm @stablelib/cbor |
@hapi/content: Regular Expression Denial of Service (ReDoS) in HTTP header parsing CVE-2026-115728, CVE-2026-35213, GHSA-jg4p-7fhp-p32p | High | 0.5% | 04 Apr, 2026 | npm @hapi/content |
pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter CVE-2026-35187, GHSA-2wvg-62qm-gj33, PYSEC-2026-2988 | High | 0.3% | 04 Apr, 2026 | PyPI pyload-ng |
BentoML: Command Injection in cloud deployment setup script CVE-2026-35043, GHSA-fgv4-6jr3-jgfw, PYSEC-2026-158 | High | 0.3% | 03 Apr, 2026 | PyPI bentoml |
fast-jwt accepts unknown `crit` header extensions (RFC 7515 violation) CVE-2026-35042, GHSA-hm7r-c7qw-ghp6 | High | 0.2% | 03 Apr, 2026 | npm fast-jwt |
LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint CVE-2026-35029, GHSA-53mr-6c8q-9789, PYSEC-2026-2597 | High | 38.6% | 03 Apr, 2026 | PyPI litellm |
OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals CVE-2026-35470, GHSA-mmm5-3g4x-qw39 | High | 0.4% | 03 Apr, 2026 | Packagist devcode-it/openstamanager |
Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service CVE-2026-34824, GHSA-3jr7-6hqp-x679, PYSEC-2026-2204 | High | 0.7% | 03 Apr, 2026 | PyPI mesop |
curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass) CVE-2026-33752, GHSA-qw2m-4pqf-rmpp, PYSEC-2026-2431 | High | 0.5% | 03 Apr, 2026 | PyPI curl-cffi PyPI curl_cffi |
Auth0OAuthenticator has an Authentication Bypass via Unverified Email Claims CVE-2026-33175, GHSA-rrvg-cxh4-qhrv, PYSEC-2026-2238 | High | 0.4% | 03 Apr, 2026 | PyPI oauthenticator |
OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter CVE-2026-34511, GHSA-9jpj-g8vv-j5mf | High | 0.2% | 03 Apr, 2026 | npm openclaw |
Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write CVE-2026-35214, GHSA-2wfh-rcwf-wh23 | High | 0.6% | 03 Apr, 2026 | npm @budibase/server |
Budibase: Command Injection in Bash Automation Step CVE-2026-25044, GHSA-gjw9-34gf-rp6m | High | 0.5% | 03 Apr, 2026 | npm @budibase/server |
Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message CVE-2026-35545, GHSA-w846-74jr-76cv | High | 0.4% | 03 Apr, 2026 | Packagist roundcube/roundcubemail |
Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler CVE-2026-35537, GHSA-rxj3-rrwm-pj4r | High | 0.5% | 03 Apr, 2026 | Packagist roundcube/roundcubemail |
Ajenti has an authorization bypass during custom package installation CVE-2026-35175, GHSA-73jv-44c3-j5p2, PYSEC-2026-2339 | High | 0.3% | 03 Apr, 2026 | PyPI ajenti-panel |
Kedro: Path Traversal in versioned dataset loading via unsanitized version string CVE-2026-35167, GHSA-6326-w46w-ppjw, PYSEC-2026-71 | High | 0.3% | 03 Apr, 2026 | PyPI kedro |
Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption GHSA-ghc5-95c2-vwcv | High | Not scored | 03 Apr, 2026 | Packagist auth0/symfony |
Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption GHSA-vfpx-q664-h93m | High | Not scored | 03 Apr, 2026 | Packagist auth0/wordpress |
Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption GHSA-fmg6-246m-9g2v | High | Not scored | 03 Apr, 2026 | Packagist auth0/login |
OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration CVE-2026-41393, GHSA-q9w8-cf67-r238 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection CVE-2026-41353, GHSA-h5hg-h7rr-gpf3 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch CVE-2026-41378, GHSA-gjm7-hw8f-73rq | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables CVE-2026-41369, GHSA-cg7q-fg22-4g98 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read CVE-2026-41370, GHSA-58q2-7r52-jq62 | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode CVE-2026-41404, GHSA-g374-mggx-p6xc | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch` CVE-2026-41349, GHSA-v3qc-wrwx-j3pw | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS CVE-2026-41334, GHSA-w85g-3h6x-4xh2 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides CVE-2026-41373, GHSA-g8xp-qx39-9jq9 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md CVE-2026-41352, GHSA-xj9w-5r6q-x6v4 | High | 0.5% | 03 Apr, 2026 | npm openclaw |