Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
msgpack5: Deeply nested input can exhaust the decoder stack CVE-2026-107298, GHSA-24ch-f2g6-9hhh | Medium | 0.4% | 21 days ago | npm msgpack5 |
msgpack5: Quadratic parsing in the streaming decoder CVE-2026-107297, GHSA-gcx5-hxj7-gpqq | Medium | 0.4% | 21 days ago | npm msgpack5 |
Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header CVE-2026-107292, GHSA-q2xc-rrxj-58x9, PYSEC-2026-4279, PYSEC-2026-4288 | Medium | 0.1% | 21 days ago | PyPI pydantic-ai PyPI pydantic-ai-slim |
Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl CVE-2026-107294, GHSA-v2xh-2vp8-57h8, PYSEC-2026-4280, PYSEC-2026-4289 | Medium | 0.4% | 21 days ago | PyPI pydantic-ai PyPI pydantic-ai-slim |
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch` CVE-2026-107290, GHSA-fpf4-vwcp-v4hp, PYSEC-2026-4277, PYSEC-2026-4286 | Medium | 0.5% | 21 days ago | PyPI pydantic-ai PyPI pydantic-ai-slim |
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers CVE-2026-107289, GHSA-vmxc-h2x2-jmf3, PYSEC-2026-4282, PYSEC-2026-4291 | Medium | 0.4% | 21 days ago | PyPI pydantic-ai PyPI pydantic-ai-slim |
Pydantic AI: Excessive resource use when local web fetching converts nested HTML CVE-2026-107287, GHSA-v36g-jcw9-x7cw, PYSEC-2026-4281, PYSEC-2026-4290 | Medium | 0.3% | 21 days ago | PyPI pydantic-ai PyPI pydantic-ai-slim |
Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory CVE-2026-106108, GHSA-vhhq-m2gm-rwc9 | Medium | 0.1% | 22 days ago | npm @quasar/app-vite |
Backstage: Improper entity validation in deprecated Kubernetes services endpoint CVE-2026-106563, GHSA-r9ph-3637-55px | Medium | 0.2% | 22 days ago | npm @backstage/plugin-kubernetes-backend |
Backstage has incorrect authorization in search engine permission filtering CVE-2026-106562, GHSA-9325-vq29-gp3v | Medium | 0.2% | 22 days ago | npm @backstage/plugin-search-backend npm @backstage/plugin-search-backend-module-elasticsearch |
Backstage has a sensitive information disclosure in Kubernetes resource queries CVE-2026-106561, GHSA-p795-mqf2-36mf | Medium | 0.2% | 22 days ago | npm @backstage/plugin-kubernetes-backend |
Backstage: Improper input validation in Confluence to Markdown scaffolder module CVE-2026-106559, GHSA-75qf-886x-5xf2 | Medium | 0.3% | 22 days ago | npm @backstage/plugin-scaffolder-backend-module-confluence-to-markdown |
PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues CVE-2026-61441, CVE-2026-62179, GHSA-mxmx-rh57-jx58, PYSEC-2026-4263 | Medium | 0.3% | 22 days ago | PyPI praisonai-platform |
wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry CVE-2026-46438, GHSA-rjpf-7pf5-q54x, PYSEC-2026-4314 | Medium | 0.2% | 22 days ago | PyPI wger |
wger: API credentials remain valid after logout/password change CVE-2026-46437, GHSA-v3x9-6gg8-c2c9, PYSEC-2026-4315 | Medium | 0.2% | 22 days ago | PyPI wger |
wger: trainer_login accepts GET - CSRF bypass enables forced session rebinding CVE-2026-45161, GHSA-xf64-4pmc-h8qf, PYSEC-2026-4317 | Medium | 0.1% | 22 days ago | PyPI wger |
Backstage has potential file exposure through local TechDocs publisher CVE-2026-106508, GHSA-cm77-ch27-6w6v | Medium | 0.4% | 23 days ago | npm @backstage/plugin-techdocs-node |
Backstage has improper input validation in scaffolder task list ordering CVE-2026-106506, GHSA-vwp5-f99x-x3rq | Medium | 0.2% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage has sensitive information exposure in scaffolder task logs CVE-2026-106504, GHSA-4xvq-3m68-h444 | Medium | 0.3% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage may expose sensitive information in Scaffolder task failure events CVE-2026-106502, GHSA-95p4-vv4g-jxxm | Medium | 0.3% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage: Secret-derived values may be exposed in scaffolder task logs CVE-2026-106499, GHSA-mfvq-x7vr-rgqg | Medium | 0.3% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage: Inconsistent enforcement of allowed location types during catalog processing CVE-2026-106496, GHSA-pcmq-25r3-5w9v | Medium | 0.2% | 23 days ago | npm @backstage/plugin-catalog-backend |
Backstage: Improper input validation in cloud storage URL readers CVE-2026-106494, GHSA-7649-wm97-w3j3 | Medium | 0.3% | 23 days ago | npm @backstage/backend-defaults |
Backstage: Cloud storage catalog locations may cross configured storage boundaries CVE-2026-106493, GHSA-xvh9-35w9-42m4 | Medium | 0.3% | 23 days ago | npm @backstage/backend-defaults npm @backstage/plugin-catalog-backend-module-aws npm @backstage/plugin-catalog-backend-module-azure |
Backstage: Improper input validation in proxy-backend CVE-2026-106491, GHSA-9ghw-48h5-v2w5 | Medium | 0.3% | 23 days ago | npm @backstage/plugin-proxy-backend |
Backstage: Improper input validation in TechDocs static content requests CVE-2026-106490, GHSA-7mfx-xg57-53c9 | Medium | 0.4% | 23 days ago | npm @backstage/plugin-techdocs-backend |
Backstage: Improper authorization enforcement for TechDocs static content CVE-2026-106489, GHSA-rg9r-hr7g-5gc2 | Medium | 0.3% | 23 days ago | npm @backstage/plugin-techdocs-backend |
Backstage: Unsupported catalog cluster authentication mode in kubernetes backend CVE-2026-106487, GHSA-h53x-hjx6-25gr | Medium | 0.3% | 23 days ago | npm @backstage/plugin-kubernetes-backend |
Backstage has improper authorization in GitLab organizational user ingestion CVE-2026-106463, GHSA-gp6m-x9vw-5c5x | Medium | 0.2% | 23 days ago | npm @backstage/plugin-catalog-backend-module-gitlab |
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback CVE-2026-106462, GHSA-29gx-h2m3-xw44 | Medium | 0.2% | 23 days ago | npm @backstage/plugin-scaffolder-backend npm @backstage/plugin-scaffolder-backend-module-azure npm @backstage/plugin-scaffolder-backend-module-bitbucket-cloud npm @backstage/plugin-scaffolder-backend-module-bitbucket-server +2 more |
Backstage: Incorrect authorization in scaffolder task listing CVE-2026-106461, GHSA-7hfw-grcm-cqm6 | Medium | 0.2% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization CVE-2026-106460, GHSA-xm5q-p7w3-x6cp | Medium | 0.3% | 23 days ago | npm @backstage/plugin-auth-node |
Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates CVE-2026-106458, GHSA-c36c-cf6r-ghgj | Medium | 0.3% | 23 days ago | npm @backstage/plugin-catalog-backend-module-bitbucket-server |
Backstage: Inconsistent credential enforcement for overlapping proxy routes CVE-2026-106456, GHSA-472h-9c5j-prrr | Medium | 0.2% | 23 days ago | npm @backstage/plugin-proxy-backend |
Twisted: IMAP wildcardToRegexp() ReDoS CVE-2026-106454, GHSA-8pqf-f4m5-798g, PYSEC-2026-4304 | Medium | 0.4% | 23 days ago | PyPI Twisted PyPI twisted |
Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates CVE-2026-106444, GHSA-xw65-4hp5-5hc7 | Medium | 0.3% | 23 days ago | npm handlebars |
LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration CVE-2026-106120, GHSA-fwxr-j5w2-587m | Medium | 0.4% | 23 days ago | npm liquidjs |
LangChain: MongoDBChatMessageHistory query injection can allow cross-session access CVE-2026-106119, GHSA-m6rx-h84q-8r95 | Medium | 0.5% | 23 days ago | npm @langchain/mongodb |
Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories CVE-2026-106109, GHSA-q9mq-245r-4g93 | Medium | 0.1% | 23 days ago | npm @quasar/app-vite |
Payload: Unauthenticated account-lockout denial of service CVE-2026-105866, GHSA-v5gf-vpjc-pc7w | Medium | 0.4% | 23 days ago | npm payload |
@payloadcms/plugin-multi-tenant has a cross-tenant create issue CVE-2026-105864, GHSA-xhm9-gwgw-3q2q | Medium | 0.2% | 23 days ago | npm @payloadcms/plugin-multi-tenant |
Payload relationship-query authorization bypass CVE-2026-105852, GHSA-7c34-32v3-j575 | Medium | 0.3% | 23 days ago | npm payload |
Payload: Insufficient Access Control in Stripe REST Proxy CVE-2026-105848, GHSA-r9v2-gg2j-22q5 | Medium | 0.2% | 23 days ago | npm @payloadcms/plugin-stripe |
Payload: Untrusted redirect URL parameter exploit CVE-2026-105846, GHSA-w84c-53h3-mc2g | Medium | 0.2% | 23 days ago | npm @payloadcms/next npm payload |
Payload: Password hashes use insufficient PBKDF2 iterations CVE-2026-105804, GHSA-q6mq-ch85-c8mm | Medium | 0.1% | 23 days ago | npm payload |
Payload: Sort queries could expose protected field information CVE-2026-105805, GHSA-9g87-32v6-3c2r | Medium | 0.3% | 23 days ago | npm payload |
Vyper: Return inside for loop more than 1 level deep CVE-2020-37288, GHSA-vg88-3v92-rjx2 | Medium | 0.3% | 23 days ago | PyPI vyper |
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) GHSA-j8f7-x8jm-wmm4 | Medium | Not scored | 23 days ago | PyPI langflow PyPI langflow-base PyPI lfx PyPI lfx-docling |
DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes CVE-2026-109345, GHSA-6688-9rhm-gjv2 | Medium | 0.3% | 24 days ago | npm dompurify |
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line GHSA-r4xh-jqrq-34v2 | Medium | Not scored | 24 days ago | npm smol-toml |