Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in randompkge (npm) GHSA-rc4q-v4pf-8j7x, MAL-2026-16259 | Malicious | Not scored | 17 Sep, 2026 | npm randompkge |
Malicious release: Malicious code in randompkgb (npm) GHSA-vxvv-gh3g-35pj, MAL-2026-16256 | Malicious | Not scored | 17 Sep, 2026 | npm randompkgb |
sanic chunked trailer request smuggling allows hidden second request execution CVE-2026-85078, GHSA-wmj6-g64g-j7q5, PYSEC-2026-4162 | Medium | 0.5% | 17 Sep, 2026 | PyPI sanic |
@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows CVE-2026-71538, GHSA-q69g-4hcv-6jg4 | High | 0.2% | 17 Sep, 2026 | npm @cyclonedx/cyclonedx-npm |
Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification CVE-2026-63472, GHSA-6j36-r6pr-59x4 | Critical | 0.6% | 17 Sep, 2026 | npm @vendure/core |
Vendure: Shop API list queries can return non-public entities when filterOperator is OR CVE-2026-63461, GHSA-xf65-r35x-wmmv | Medium | 0.4% | 17 Sep, 2026 | npm @vendure/core |
Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends CVE-2026-63460, GHSA-jgm3-qmp2-c4p7 | High | 0.6% | 17 Sep, 2026 | npm @vendure/core |
Vendure has stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions CVE-2026-63459, GHSA-xhq9-whgq-49j5 | High | 0.4% | 17 Sep, 2026 | npm @vendure/dashboard |
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter CVE-2026-61793, GHSA-q8hw-4fvp-9rwv | Medium | 0.5% | 17 Sep, 2026 | npm nuxt-og-image |
Malicious release: Malicious code in pulse-pwn-9f3a2 (npm) GHSA-fwr5-cj49-cq4h, MAL-2026-16254 | Malicious | Not scored | 17 Sep, 2026 | npm pulse-pwn-9f3a2 |
Malicious release: Malicious code in ragacateslikodi (npm) GHSA-mjhw-5x2v-v3wg, MAL-2026-16252 | Malicious | Not scored | 17 Sep, 2026 | npm ragacateslikodi |
vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM CVE-2026-92959, GHSA-f8gf-w286-fmq2 | High | 0.4% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes CVE-2026-92958, GHSA-6rh5-qq4q-97xh | High | 0.4% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process CVE-2026-92957, GHSA-8686-vhfx-7r3j | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass CVE-2026-92956, GHSA-wjwh-qqvp-g4p4 | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: Sandbox Escape (NodeVM) CVE-2026-92955, GHSA-88hf-g992-jg85 | Critical | 0.7% | 17 Sep, 2026 | npm vm2 |
vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process CVE-2026-92954, GHSA-gjq8-xm47-88rc | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix CVE-2026-92953, GHSA-3vgf-8m4q-q4qr | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks CVE-2026-92952, GHSA-jf8q-945g-9q4c | High | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package CVE-2026-92951, GHSA-c48m-32m9-vx93 | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts CVE-2026-92950, GHSA-jxxv-8r27-vm4p | Critical | 0.2% | 17 Sep, 2026 | npm vm2 |
vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor CVE-2026-92949, GHSA-633r-hq9m-c4ff | Medium | 0.3% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape CVE-2026-92948, GHSA-qhwx-74w5-xhxq | Critical | 0.7% | 17 Sep, 2026 | npm vm2 |
vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool CVE-2026-92947, GHSA-fcqc-726x-5wfc | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE CVE-2026-92946, GHSA-j3hm-6rg5-mchv | Critical | 0.8% | 17 Sep, 2026 | npm vm2 |
vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted CVE-2026-92945, GHSA-7q3f-wx44-378m | Medium | 0.3% | 17 Sep, 2026 | npm vm2 |
vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector CVE-2026-92944, GHSA-27g9-p43v-cw3v | Critical | 0.8% | 17 Sep, 2026 | npm vm2 |
vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block) CVE-2026-92942, GHSA-r4fx-v8hh-22mv | High | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 NodeVM can replace the host process TLS trust store CVE-2026-92941, GHSA-98xx-8mx4-x7cm | Critical | 0.3% | 17 Sep, 2026 | npm vm2 |
vm2 exposes host HTTPS credentials and TLS traffic through globalAgent CVE-2026-92940, GHSA-h85j-hv3c-qfgq | Critical | 0.4% | 17 Sep, 2026 | npm vm2 |
vm2 crypto builtin loads attacker native code through setEngine CVE-2026-92939, GHSA-46pr-c5wc-xffx | Critical | 0.6% | 17 Sep, 2026 | npm vm2 |
vm2 allows a sandboxed plugin to execute native code through `node:sqlite` CVE-2026-92938, GHSA-6w8r-xxw2-g3hx | Critical | 0.6% | 17 Sep, 2026 | npm vm2 |
vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection CVE-2026-92937, GHSA-647f-g98j-qq25 | Critical | 1.0% | 17 Sep, 2026 | npm vm2 |
vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting CVE-2026-92936, GHSA-x6m4-chr9-cg97 | Medium | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE CVE-2026-92935, GHSA-8hr7-r645-pc6w | Critical | 0.6% | 17 Sep, 2026 | npm vm2 |
vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit CVE-2026-92934, GHSA-x965-fc75-jpqh | Critical | 0.8% | 17 Sep, 2026 | npm vm2 |
vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack CVE-2026-92933, GHSA-r273-hxvj-fxhp | Medium | 0.4% | 17 Sep, 2026 | npm vm2 |
Malicious release: Malicious code in tailwindcss-contact-form (npm) MAL-2026-16251 | Malicious | Not scored | 17 Sep, 2026 | npm tailwindcss-contact-form |
Malicious release: Malicious code in marketing-mcp (PyPI) MAL-2026-16250 | Malicious | Not scored | 17 Sep, 2026 | PyPI marketing-mcp |
Malicious release: Malicious code in kartykgithub-takedown-b (npm) GHSA-f8wr-9w83-7gmw, MAL-2026-16249 | Malicious | Not scored | 17 Sep, 2026 | npm kartykgithub-takedown-b |
Malicious release: Malicious code in kartykgithub-takedown-a (npm) GHSA-5r64-rpvg-q9rr, MAL-2026-16248 | Malicious | Not scored | 17 Sep, 2026 | npm kartykgithub-takedown-a |
Malicious release: Malicious code in laycot (npm) MAL-2026-16253 | Malicious | Not scored | 16 Sep, 2026 | npm laycot |
Malicious release: Malicious code in kartyk-github-token-pkg (npm) GHSA-4rmp-vchm-9gvg, MAL-2026-16246 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-token-pkg |
Malicious release: Malicious code in kartyk-github-single-ver-pkg (npm) GHSA-4vpr-3r9p-p9fh, MAL-2026-16245 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-single-ver-pkg |
Malicious release: Malicious code in pkg-rollback-dreed-viced-sonic-ponds (npm) GHSA-63f3-rmrf-6m9q, MAL-2026-16247 | Malicious | Not scored | 16 Sep, 2026 | npm pkg-rollback-dreed-viced-sonic-ponds |
Malicious release: Malicious code in kartyk-github-oidc-test-pkg (npm) GHSA-4vxh-7998-9h4g, MAL-2026-16244 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-oidc-test-pkg |
joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()` CVE-2026-92599, GHSA-6h2x-m376-mqjq | High | 0.6% | 16 Sep, 2026 | npm joi |
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path CVE-2026-61599, GHSA-7prp-2623-8g45, PYSEC-2026-4038 | High | 0.6% | 16 Sep, 2026 | PyPI djust |
djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path CVE-2026-61589, GHSA-v9rj-xjfv-xj9r, PYSEC-2026-4046 | Medium | 0.2% | 16 Sep, 2026 | PyPI djust |
djust has broken object-level access control (IDOR) CVE-2026-61596, GHSA-c7c5-5j6r-q957, PYSEC-2026-4041 | High | 0.3% | 16 Sep, 2026 | PyPI djust |