Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange CVE-2026-88006, GHSA-wvm9-9g5j-623f, PYSEC-2026-4129 | Medium | 0.4% | 10 Sep, 2026 | PyPI open-webui |
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange CVE-2026-88005, GHSA-4qg5-cxx4-g927, PYSEC-2026-4119 | Medium | 0.4% | 10 Sep, 2026 | PyPI open-webui |
@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name GHSA-x7m8-jrm8-hpvx | High | Not scored | 10 Sep, 2026 | npm @eigenpal/docx-editor-core npm @eigenpal/docx-editor-react |
Malicious release: Malicious code in pylever (PyPI) MAL-2026-16122 | Malicious | Not scored | 10 Sep, 2026 | PyPI pylever |
Malicious release: Malicious code in etoro-cashout (npm) MAL-2026-16117 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-cashout |
Malicious release: Malicious code in etoro-builders (npm) MAL-2026-16116 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-builders |
Malicious release: Malicious code in etoro-aggregator (npm) MAL-2026-16111 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-aggregator |
Malicious release: Malicious code in etoro-analytics (npm) MAL-2026-16112 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-analytics |
Malicious release: Malicious code in etoro-api (npm) MAL-2026-16113 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-api |
Malicious release: Malicious code in etoro-client (npm) MAL-2026-16119 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-client |
Malicious release: Malicious code in etoro-core (npm) MAL-2026-16120 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-core |
Malicious release: Malicious code in etoro-charts (npm) MAL-2026-16118 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-charts |
Malicious release: Malicious code in etoro-auth (npm) MAL-2026-16114 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-auth |
Malicious release: Malicious code in etoro-billing (npm) MAL-2026-16115 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-billing |
@openhop/server: Path Traversal in Flow ID File Operations CVE-2026-59179, GHSA-g72f-jw3w-mgh7 | High | 0.4% | 09 Sep, 2026 | npm @openhop/server |
ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces CVE-2026-59177, GHSA-vv4j-m4vr-f3g6, PYSEC-2026-3834 | High | 1.2% | 09 Sep, 2026 | PyPI esphome-device-builder |
functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import CVE-2026-59176, GHSA-wcjj-9m6g-2fr2 | High | 0.2% | 09 Sep, 2026 | npm functype-mcp-server |
@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run CVE-2026-59160, GHSA-2r5q-h53f-9rp3 | High | 0.5% | 09 Sep, 2026 | npm @yeger/turbo-graph |
Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients CVE-2026-59158, GHSA-fxg7-897c-57mp | High | 0.5% | 09 Sep, 2026 | npm nuxt-ollama |
Malicious release: Malicious code in @nexustechpro/baileys (npm) GHSA-8w6v-4xp9-rvrr, MAL-2026-16104 | Malicious | Not scored | 09 Sep, 2026 | npm @nexustechpro/baileys |
Malicious release: Malicious code in @neroxkira/vangal-baileys (npm) MAL-2026-16103 | Malicious | Not scored | 09 Sep, 2026 | npm @neroxkira/vangal-baileys |
Malicious release: Malicious code in @sahril2nd/baileys (npm) MAL-2026-16105 | Malicious | Not scored | 09 Sep, 2026 | npm @sahril2nd/baileys |
Malicious release: Malicious code in @auction-fe/ui-kit (npm) GHSA-2r37-886p-hj65, MAL-2026-16109 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/ui-kit |
Malicious release: Malicious code in @auction-fe/reporting-system (npm) GHSA-4x79-pcqv-r9rf, MAL-2026-16108 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/reporting-system |
Malicious release: Malicious code in @auction-fe/portal (npm) GHSA-qmw2-mp2f-cgg3, MAL-2026-16107 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/portal |
Malicious release: Malicious code in @auction-fe/base (npm) GHSA-w6hj-c25h-wgh7, MAL-2026-16106 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/base |
Malicious release: Malicious code in @convertics/script (npm) GHSA-c74p-4c5p-6v9r, MAL-2026-16110 | Malicious | Not scored | 09 Sep, 2026 | npm @convertics/script |
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history CVE-2026-88002, GHSA-jqhh-cjmq-vmv6, PYSEC-2026-3879 | Medium | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets CVE-2026-88001, GHSA-5x7x-4c3c-qf5w, PYSEC-2026-3878 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree CVE-2026-88000, GHSA-3cgp-3cqx-j8w2, PYSEC-2026-3877 | Medium | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch CVE-2026-87999, GHSA-34r3-9m95-vq73, PYSEC-2026-4116 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion CVE-2026-87998, GHSA-2724-6cpj-gf3v, PYSEC-2026-4115 | High | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions CVE-2026-87997, GHSA-3pf7-q2g3-wj28, PYSEC-2026-4118 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader CVE-2026-87996, GHSA-4v28-j6q3-5m4r, PYSEC-2026-4120 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin CVE-2026-87995, GHSA-jmc6-2wr8-h3wj, PYSEC-2026-4123 | High | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint CVE-2026-87994, GHSA-fmqh-xp37-5hr8, PYSEC-2026-4122 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends CVE-2026-87017, GHSA-pcvc-8vrv-8q6w, PYSEC-2026-4125 | Medium | 0.4% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite CVE-2026-87016, GHSA-wpmr-8h3q-fwj7, PYSEC-2026-4128 | High | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication CVE-2026-87015, GHSA-p78m-89r6-pgf7, PYSEC-2026-4124 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes CVE-2026-87014, GHSA-wjwr-xfp9-r66p, PYSEC-2026-4127 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle CVE-2026-87013, GHSA-8r35-5x5r-hv74, PYSEC-2026-4121 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value CVE-2026-87012, GHSA-v39v-59xw-j98g, PYSEC-2026-4126 | Medium | 0.5% | 09 Sep, 2026 | PyPI open-webui |
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout CVE-2026-87011, GHSA-3g9q-v48f-hh9w, PYSEC-2026-4117 | High | 0.6% | 09 Sep, 2026 | PyPI open-webui |
Malicious release: Malicious code in mfatest2 (npm) MAL-2026-16102 | Malicious | Not scored | 09 Sep, 2026 | npm mfatest2 |
Malicious release: Malicious code in mfaby (npm) MAL-2026-16101 | Malicious | Not scored | 09 Sep, 2026 | npm mfaby |
Malicious release: Malicious code in discord-mfa-solver (npm) GHSA-vf4w-775x-ccfh, MAL-2026-16100 | Malicious | Not scored | 09 Sep, 2026 | npm discord-mfa-solver |
Malicious release: Malicious code in bq-sdist-probe-vrp (PyPI) MAL-2026-16099 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-sdist-probe-vrp |
Malicious release: Malicious code in bq-build-probe-vrp-2026 (PyPI) MAL-2026-16098 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-build-probe-vrp-2026 |
weasyprint Has Server-Side Request Forgery (SSRF) CVE-2026-55073, GHSA-jf6q-chmf-3h3v, PYSEC-2026-3940 | Medium | 0.2% | 09 Sep, 2026 | PyPI weasyprint |
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list` CVE-2026-54529, GHSA-ccg5-9c8w-xh6v, PYSEC-2026-3922 | Medium | 0.4% | 09 Sep, 2026 | PyPI sqladmin |