Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision CVE-2026-11330, GHSA-5gvr-v6qv-h5mm | Low | 0.1% | 05 Jun, 2026 | npm claude-mem |
bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map CVE-2026-11312, GHSA-2vrg-7rqv-prf9, PYSEC-2026-3469 | Low | 0.1% | 05 Jun, 2026 | PyPI infinistore |
Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames CVE-2026-48011, GHSA-7w52-7jvm-m9vw | Low | 0.2% | 04 Jun, 2026 | Packagist shopware/core Packagist shopware/platform |
kas's late signature validation may allow unnoticed repository manipulations CVE-2026-47192, GHSA-4vqc-wpwg-vh7j, PYSEC-2026-2543 | Low | 0.3% | 04 Jun, 2026 | PyPI kas |
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks CVE-2026-50266, GHSA-qmc5-gv6v-8p22, PYSEC-2026-3491 | Low | 0.3% | 04 Jun, 2026 | PyPI neutron |
LMCache: 16-bit multimodal hash collision can poison KV cache entries CVE-2026-10813, GHSA-3hh9-752g-5g22, PYSEC-2026-3480 | Low | 0.1% | 04 Jun, 2026 | PyPI lmcache |
GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix CVE-2026-10812, GHSA-xfqj-4cr9-9gr5, PYSEC-2026-3468 | Low | 0.1% | 04 Jun, 2026 | PyPI gptcache |
Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission CVE-2026-10804, GHSA-vqwp-45wm-r9r5, PYSEC-2026-212 | Low | 0.1% | 04 Jun, 2026 | PyPI streamlit |
MLflow: Deterministic sampling in dataset digest enables predictable collisions BIT-mlflow-2026-10803, CVE-2026-10803, GHSA-5qmp-p3c4-72qj, PYSEC-2026-195 | Low | 0.1% | 04 Jun, 2026 | PyPI mlflow |
Keystone: GraphQL API Endpoint Lacks Query Depth Limits CVE-2026-10802, GHSA-45jq-c8xm-jfw9 | Low | 0.3% | 04 Jun, 2026 | npm @keystone-6/core |
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata CVE-2026-10801, GHSA-prfw-69r3-wqxf, PYSEC-2026-3488 | Low | 0.1% | 04 Jun, 2026 | PyPI ms-swift |
Gradio: Audio cache key ignores metadata when saving numpy audio outputs CVE-2026-10783, GHSA-6655-8ph2-63j3, PYSEC-2026-211 | Low | 0.1% | 04 Jun, 2026 | PyPI gradio |
SGLang is Vulnerable to DoS via the data_hash Function CVE-2026-10775, GHSA-jrcc-j37m-v8fg, PYSEC-2026-3695 | Low | 0.1% | 03 Jun, 2026 | PyPI sglang |
mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption CVE-2026-10766, GHSA-phx2-3w66-h4pw, PYSEC-2026-3487 | Low | 0.1% | 03 Jun, 2026 | PyPI mlrun |
Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling BIT-django-2026-8404, CVE-2026-8404, GHSA-8cjm-8mp7-r2xf, PYSEC-2026-201 | Low | 0.3% | 03 Jun, 2026 | PyPI django |
Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake BIT-django-2026-7666, CVE-2026-7666, GHSA-mm6v-q8q9-pgcf, PYSEC-2026-200 | Low | 0.1% | 03 Jun, 2026 | PyPI django |
Django: signed cookies are vulnerable to salt namespace collisions BIT-django-2026-6873, CVE-2026-6873, GHSA-h7pc-vwp9-298g, PYSEC-2026-199 | Low | 0.2% | 03 Jun, 2026 | PyPI django |
Django: has_vary_header may expose cached responses when Vary values contain whitespace BIT-django-2026-48587, CVE-2026-48587, GHSA-923m-gv2p-w5qp, PYSEC-2026-198 | Low | 0.4% | 03 Jun, 2026 | PyPI django |
Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary BIT-django-2026-35193, CVE-2026-35193, GHSA-qpc8-7fxc-cm4p, PYSEC-2026-197 | Low | 0.4% | 03 Jun, 2026 | PyPI django |
Code Index MCP is vulnerable to Uncontrolled Resource Consumption CVE-2026-10692, GHSA-647r-72hf-4vmh, PYSEC-2026-2421 | Low | 0.3% | 03 Jun, 2026 | PyPI code-index-mcp |
DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption CVE-2026-10691, GHSA-r87g-78mx-3wg4 | Low | 0.4% | 03 Jun, 2026 | npm @wonderwhy-er/desktop-commander |
DesktopCommanderMCP is vulnerable to SSRF CVE-2026-10690, GHSA-5xx3-j724-wmx5 | Low | 0.2% | 03 Jun, 2026 | npm @wonderwhy-er/desktop-commander |
FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content() CVE-2026-10566, GHSA-3c3g-7hwg-9qmr, PYSEC-2026-2637 | Low | 0.1% | 02 Jun, 2026 | PyPI metagpt |
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice CVE-2026-10300, GHSA-m2jr-x4gq-5rmj, PYSEC-2026-3064 | Low | 0.4% | 01 Jun, 2026 | PyPI sglang |
kas checks out SHA-like git branches as valid commits CVE-2026-47191, GHSA-qjwp-hrq6-r26r, PYSEC-2026-2544 | Low | 0.2% | 01 Jun, 2026 | PyPI kas |
Apache Airflow has an Incorrect Authorization issue BIT-airflow-2026-45426, CVE-2026-45426, GHSA-x5wm-j6wh-2834, PYSEC-2026-174 | Low | 0.4% | 01 Jun, 2026 | PyPI apache-airflow |
Apache Airflow has an Improper Authorization issue BIT-airflow-2026-40963, CVE-2026-40963, GHSA-gprj-xvq8-w53q, PYSEC-2026-2349 | Low | 0.5% | 01 Jun, 2026 | PyPI apache-airflow |
hermes-agent has an Injection issue CVE-2026-10223, GHSA-33qv-c5qm-799v, PYSEC-2026-3575 | Low | 0.2% | 01 Jun, 2026 | PyPI hermes-agent |
hermes-agent has an Injection issue CVE-2026-10222, GHSA-mv8x-fg99-32mf, PYSEC-2026-2513 | Low | 0.3% | 01 Jun, 2026 | PyPI hermes-agent |
Dolibarr ERP CRM is vulnerable to Improper Authorization through its Leave Request REST API CVE-2026-10215, GHSA-7fg5-vc77-69fp | Low | 0.3% | 01 Jun, 2026 | Packagist dolibarr/dolibarr |
AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass CVE-2026-10212, GHSA-r6vm-4xwg-w69h, PYSEC-2026-2383 | Low | 0.2% | 01 Jun, 2026 | PyPI AstrBot PyPI astrbot |
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint CVE-2026-10177, GHSA-hchg-qm84-cj9p, PYSEC-2026-2336 | Low | 0.2% | 31 May, 2026 | PyPI aider-chat |
Aider is vulnerable to Code Injection via editor_coder.run function CVE-2026-10175, GHSA-7w7m-v5vp-w699, PYSEC-2026-2335 | Low | 0.2% | 31 May, 2026 | PyPI aider-chat |
vm2 setup-sandbox.js violates Defense Invariant #11 in stack-trace formatter CVE-2026-92962, GHSA-q3fm-4wcw-g57x | Low | 0.2% | 29 May, 2026 | npm vm2 |
Symfony's HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite — `javascript`: URI Survives Sanitization (XSS) CVE-2026-45753, GHSA-hhg7-c65m-h7ff | Low | 0.3% | 28 May, 2026 | Packagist symfony/html-sanitizer Packagist symfony/symfony |
PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) CVE-2026-48524, GHSA-fhv5-28vv-h8m8, PYSEC-2026-177 | Low | 0.4% | 28 May, 2026 | PyPI pyjwt |
Symfony Vulnerable to stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering CVE-2026-45072, GHSA-hmr5-2xcr-v8pp | Low | 0.3% | 27 May, 2026 | Packagist symfony/symfony Packagist symfony/twig-bridge Packagist symfony/web-profiler-bundle |
pretix vulnerable to Authorization Bypass Through User-Controlled Key CVE-2026-9712, GHSA-72p9-6vv6-gvqh, PYSEC-2026-2960 | Low | 0.2% | 27 May, 2026 | PyPI pretix |
Pterodactyl has a database resource limit bypass via race condition in Client API CVE-2026-35202, GHSA-fgmm-w5cx-vrfw | Low | 0.2% | 26 May, 2026 | Packagist pterodactyl/panel |
Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known CVE-2026-47716, GHSA-g5vc-q7qc-v939, PYSEC-2026-2406 | Low | 0.1% | 26 May, 2026 | PyPI bugsink |
Bugsink: Issue event views can show an event from another project if its UUID is known CVE-2026-47715, GHSA-vx2f-6m6h-9frf, PYSEC-2026-2407 | Low | 0.2% | 26 May, 2026 | PyPI bugsink |
Blitz has a Cross-site Scripting issue CVE-2026-9520, GHSA-h2p9-cr4h-px24 | Low | 0.3% | 26 May, 2026 | npm blitz |
hermes-agent has an Incorrect Comparison CVE-2026-9369, GHSA-cv5c-mh6j-wvp9, PYSEC-2026-2512 | Low | 0.2% | 24 May, 2026 | PyPI hermes-agent |
postcss-selector-parser allows denial of service through uncontrolled AST recursion CVE-2026-9358, GHSA-w9m9-85wc-3x92 | Low | 0.3% | 24 May, 2026 | npm postcss-selector-parser |
Concrete CMS is vulnerable to Stored XSS via page name in the Atomik theme CVE-2026-8353, GHSA-q9fm-mpg8-8jqm | Low | 0.1% | 22 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog CVE-2026-8347, GHSA-jqvq-gv67-3567 | Low | 0.2% | 22 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to CSRF via Backend\File::approveVersion CVE-2026-8340, GHSA-xjg6-5v39-v7fc | Low | 0.1% | 22 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion() CVE-2026-8435, GHSA-44q4-354f-c826 | Low | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple() CVE-2026-8434, GHSA-6qjh-p324-694f | Low | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan() CVE-2026-8433, GHSA-6fxm-r8p3-mx5c | Low | 0.1% | 21 May, 2026 | Packagist concrete5/concrete5 |