Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
praisonai: recipe serve auth middleware silently disables itself when no secret is set CVE-2026-57127, GHSA-j4hj-7hfh-g2f4, PYSEC-2026-3513 | Critical | 0.9% | 18 Jun, 2026 | PyPI praisonai |
PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass CVE-2026-57125, GHSA-4869-x4pr-q22x, PYSEC-2026-3501, PYSEC-2026-3529 | Critical | 0.6% | 18 Jun, 2026 | PyPI praisonai PyPI praisonaiagents |
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in CVE-2026-57123, GHSA-x227-pf99-vffg, PYSEC-2026-3536 | Critical | 0.9% | 18 Jun, 2026 | PyPI praisonaiagents |
Cotonti: Cross-Site Request Forgery in the administration rights handler CVE-2026-55742, GHSA-7g3p-35vc-mgjr | Critical | 0.2% | 18 Jun, 2026 | Packagist cotonti/cotonti |
PTC Windchill and FlexPLM Improper Input Validation Vulnerability CVE-2026-12569 | CriticalExploited | 46.0% | 18 Jun, 2026 | |
Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests CVE-2026-48814, GHSA-r78r-rwrf-rjwp | Critical | 0.4% | 17 Jun, 2026 | npm network-ai |
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak CVE-2026-55450, GHSA-x223-p2gf-v735, PYSEC-2026-224 | Critical | 1.2% | 17 Jun, 2026 | PyPI langflow |
The Formatter Field module provides a mechanism for specifying a formatter and formatter settings to be used for displaying a field, on a per-entity basis.
`formatter_field` stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can CVE-2026-12535, DRUPAL-CONTRIB-2026-048 | Critical | 0.6% | 17 Jun, 2026 | Packagist:https://packages.drupal.org/8 drupal/formatter_field |
python-statemachine SCXML <data expr> Eval Injection CVE-2026-47103, GHSA-v4jc-pm6r-3vj8, PYSEC-2026-506 | Critical | 1.4% | 17 Jun, 2026 | PyPI python-statemachine |
Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory CVE-2026-50203, GHSA-qf38-jq28-3ccq, PYSEC-2026-218 | Critical | 0.6% | 17 Jun, 2026 | PyPI apache-airflow-providers-sftp |
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication CVE-2026-48797, GHSA-f65r-h4g3-3h9h, PYSEC-2026-291 | Critical | 0.3% | 17 Jun, 2026 | PyPI backpropagate npm @mcptoolshop/backpropagate |
LangGraph SDK has unsafe URL path construction CVE-2026-48776, GHSA-w39p-vh2g-g8g5, PYSEC-2026-2194, PYSEC-2026-2575 | Critical | 0.2% | 17 Jun, 2026 | PyPI langgraph PyPI langgraph-sdk |
LiteLLM: Authentication Bypass via Host Header Injection CVE-2026-49468, GHSA-4xpc-pv4p-pm3w, PYSEC-2026-388 | Critical | 3.0% | 16 Jun, 2026 | PyPI litellm |
yt-dlp: Arbitrary code execution via manifest downloads with aria2c CVE-2026-50574, GHSA-vx4q-3cr2-7cg2, PYSEC-2026-3433 | Critical | 0.5% | 16 Jun, 2026 | PyPI yt-dlp |
Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server CVE-2026-56258, GHSA-7cx2-g3h9-382p, PYSEC-2026-228 | Critical | 0.9% | 16 Jun, 2026 | PyPI crawl4ai |
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) CVE-2026-50023, GHSA-c6mh-fpjc-4pr3, PYSEC-2026-3430 | Critical | 0.7% | 16 Jun, 2026 | PyPI yt-dlp |
LobeHub: Unauthenticated SSRF in `/webapi/proxy` CVE-2026-54157, GHSA-xmwj-c75x-6346 | Critical | 1.8% | 16 Jun, 2026 | npm @lobehub/lobehub |
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution CVE-2026-56260, CVE-2026-56261, CVE-2026-56262, CVE-2026-56263, CVE-2026-56264, CVE-2026-56265, CVE-2026-56266, GHSA-365w-hqf6-vxfg, GHSA-53rg-46cm-4g2v, GHSA-8qrg-7j2f-rf2h, GHSA-f23g-2f38-gg94, GHSA-g2pv-76hm-j4x9, GHSA-r9hw-78q5-478g, GHSA-xrfj-6m49-wfmm, PYSEC-2026-229, PYSEC-2026-230, PYSEC-2026-239, PYSEC-2026-3443, PYSEC-2026-3449, PYSEC-2026-596, PYSEC-2026-798 | Critical | 2.6% | 16 Jun, 2026 | PyPI crawl4ai |
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVE-2026-53753, GHSA-qxjp-w3pj-48m7, PYSEC-2026-319 | Critical | 2.9% | 16 Jun, 2026 | PyPI crawl4ai |
vLLM: OpenAI auth bypass CVE-2026-48746, GHSA-94f4-hr76-p5j6, PYSEC-2026-226 | Critical | 1.2% | 16 Jun, 2026 | PyPI vllm |
Langflow: Unauthenticated RCE in Shareable Playgrounds CVE-2026-48519, GHSA-v5ff-9q35-q26f, PYSEC-2026-243 | Critical | 0.8% | 16 Jun, 2026 | PyPI langflow |
i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names CVE-2026-48714, GHSA-f49m-vf83-692w | Critical | 0.5% | 15 Jun, 2026 | npm i18next-http-middleware |
i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string CVE-2026-48713, GHSA-2933-q333-qg83 | Critical | 0.5% | 15 Jun, 2026 | npm i18next-fs-backend |
Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow CVE-2026-54257, GHSA-q6m5-f73j-m9mc | Critical | 0.4% | 15 Jun, 2026 | npm electron |
shlink has a Server-Side Request Forgery issue CVE-2026-50887, GHSA-p85r-x2wj-mxqj | Critical | 0.3% | 15 Jun, 2026 | Packagist shlinkio/shlink |
Project Firefly III has incorrect access control in the webhook management component CVE-2026-50886, GHSA-9mmg-q95p-gp67 | Critical | 0.3% | 15 Jun, 2026 | Packagist grumpydictator/firefly-iii |
YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution CVE-2026-50880, GHSA-68mc-h6h8-79wj | Critical | 0.5% | 15 Jun, 2026 | npm youtransfer |
Remotion: arbitrary file write vulnerability CVE-2026-30121, GHSA-g6pc-6676-c23j | Critical | 0.3% | 15 Jun, 2026 | npm remotion |
Remotion: remote code execution (RCE) vulnerability CVE-2026-30120, GHSA-2jqp-f4gr-44fr | Critical | 0.8% | 15 Jun, 2026 | npm remotion |
Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE CVE-2026-53633, GHSA-g8mr-85jm-7xhm | Critical | 0.9% | 15 Jun, 2026 | npm @vitest/browser npm vite-plus |
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass CVE-2026-53609, GHSA-6h5j-32cf-4253 | Critical | 0.3% | 12 Jun, 2026 | npm apostrophe |
SimpleHelp Authentication Bypass Vulnerability CVE-2026-48558 | CriticalExploited | 77.7% | 12 Jun, 2026 | |
ChromaDB has a code injection vulnerability CVE-2026-45833, GHSA-36p7-vc44-83pf, PYSEC-2026-3814 | Critical | 0.3% | 12 Jun, 2026 | PyPI chromadb |
jmespath.php has CompilerRuntime code injection via unescaped function names CVE-2026-54133, GHSA-pcw8-m77r-2528 | Critical | 0.4% | 12 Jun, 2026 | Packagist mtdowling/jmespath.php |
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule CVE-2026-48062, GHSA-2gr4-ppc7-7mhx | Critical | 0.8% | 11 Jun, 2026 | Packagist codeigniter4/framework |
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token CVE-2026-48039, GHSA-9gw6-46qc-99vr, PYSEC-2026-413 | Critical | 0.6% | 11 Jun, 2026 | PyPI meta-ads-mcp |
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 | CriticalExploited | 96.7% | 11 Jun, 2026 | |
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload CVE-2026-48063, GHSA-qvv5-jq5g-4cgg | Critical | 0.2% | 10 Jun, 2026 | npm @whiskeysockets/baileys npm baileys |
Splunk Enterprise Missing Authentication for Critical Function Vulnerability CVE-2026-20253 | CriticalExploited | 96.9% | 10 Jun, 2026 | |
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal CVE-2026-11913, DRUPAL-CONTRIB-2026-045 | Critical | 0.6% | 10 Jun, 2026 | Packagist:https://packages.drupal.org/8 drupal/mothermayi |
Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter CVE-2026-48030, GHSA-jvc5-6g7q-c843 | Critical | 7.5% | 09 Jun, 2026 | Packagist pheditor/pheditor |
Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-25089 | CriticalExploited | 76.1% | 09 Jun, 2026 | |
Ivanti Sentry OS Command Injection Vulnerability CVE-2026-10520 | CriticalExploited | 99.9% | 09 Jun, 2026 | |
PHPSpreadsheet has a patch bypass for CVE-2026-34084 CVE-2026-45034, GHSA-87m4-826x-3crx | Critical | 0.5% | 08 Jun, 2026 | Packagist phpoffice/phpspreadsheet |
YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service CVE-2026-52778, GHSA-px5m-h76g-p7p8 | Critical | 0.8% | 08 Jun, 2026 | Packagist yeswiki/yeswiki |
Check Point Security Gateway Improper Authentication Vulnerability CVE-2026-50751 | CriticalExploited | 85.3% | 08 Jun, 2026 | |
Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews. CVE-2026-47430, GHSA-q42j-x8rq-pjg6 | Critical | 0.7% | 08 Jun, 2026 | npm cordova-plugin-inappbrowser |
NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker) CVE-2026-47731, GHSA-p462-prxw-mjx4, PYSEC-2026-265 | Critical | 0.9% | 05 Jun, 2026 | PyPI ait-core |
Authenticated Remote Code Execution via loadReader functionName code injection in DbGate CVE-2026-47670, GHSA-wm5r-5qp3-5vxf | Critical | 1.8% | 05 Jun, 2026 | npm dbgate-api |
DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE CVE-2026-47669, GHSA-h535-j5hr-mv56 | Critical | 0.5% | 05 Jun, 2026 | npm dbgate |