Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules CVE-2026-116692, GHSA-26p8-2jq9-3vq9 | Critical | 0.7% | 2 days ago | PyPI mlflow |
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it CVE-2026-117601, GHSA-6jp4-8v48-cc5v | Critical | 0.2% | 2 days ago | PyPI electrum |
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) CVE-2026-48705, GHSA-6hp3-vr39-rqw8 | Critical | Not scored | 2 days ago | PyPI monai |
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE CVE-2026-115915, GHSA-h3rc-j82p-2c3h, PYSEC-2026-4346 | Critical | 0.6% | 3 days ago | PyPI vllm |
Arista VeloCloud Orchestrator SQL Injection Vulnerability CVE-2026-114625 | CriticalExploited | 1.0% | 7 days ago | |
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key CVE-2026-114612, GHSA-7hp6-4w63-5g45 | Critical | 0.3% | 7 days ago | PyPI litellm |
better-auth: OAuth state can be used as a Magic Link to sign in as another user CVE-2026-110862, CVE-2026-114607, GHSA-965c-763c-88jm | Critical | 0.4% | 7 days ago | npm better-auth |
Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays GHSA-673q-mjm6-r5xr | Critical | Not scored | 7 days ago | npm next |
DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes CVE-2026-116804, GHSA-cg2g-xh64-v4q7 | Critical | 0.2% | 7 days ago | npm dompurify |
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used GHSA-2464-fhr4-w9xw | Critical | Not scored | 7 days ago | npm next |
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package BIT-brotli-2026-111497, BIT-dotnet-2026-111497, BIT-dotnet-sdk-2026-111497, BIT-node-2026-111497, BIT-node-min-2026-111497, BIT-powershell-2026-111497, CVE-2026-111497, GHSA-9v8h-qqgm-4m35, PYSEC-2026-4322, PYSEC-2026-4323 | CriticalExploited | 88.0% | 7 days ago | PyPI brotli PyPI brotlicffi |
mem0ai Databricks vector store vulnerable to SQL injection CVE-2026-115324, GHSA-7587-9684-52r6 | Critical | 0.3% | 7 days ago | PyPI mem0ai |
Laravel TokenGuard authentication bypass through non-string API credentials CVE-2026-114509, GHSA-f9x3-7vq9-cph6 | Critical | 0.8% | 8 days ago | Packagist laravel/framework |
Pillow multi-frame loaders can reuse stale native image storage after mode transitions BIT-pillow-2026-96639, CVE-2026-96639, GHSA-v9pv-5gc8-w2m6, PYSEC-2026-4339 | Critical | 0.7% | 8 days ago | PyPI Pillow PyPI pillow |
Sentry-Javascript: Middleware Bypass when using Tunnel route CVE-2026-114139, GHSA-mchm-gjx6-7h55 | Critical | 0.5% | 8 days ago | npm @sentry/nextjs |
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites CVE-2026-114125, GHSA-f2ph-cmg5-wxc8 | Critical | 0.4% | 8 days ago | npm @storybook/addon-mcp npm @storybook/addon-vitest npm @storybook/core npm @storybook/core-server +2 more |
PHP Stale Internal Request-State Vulnerability CVE-2026-109619 | CriticalExploited | 100.0% | 8 days ago | |
PHP Memory Corruption Vulnerability CVE-2026-109618 | CriticalExploited | 100.0% | 8 days ago | |
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution CVE-2026-114053, GHSA-h3rc-6mm3-gc2m | Critical | 0.5% | 9 days ago | PyPI vllm |
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised GHSA-hq85-5cpj-mr62, PYSEC-2026-4321 | Critical | Not scored | 9 days ago | PyPI uv |
certifi bundles emSign root CAs with compromised intermediate CA keys GHSA-6q48-6c7w-9gw2, PYSEC-2026-4320 | Critical | Not scored | 9 days ago | PyPI certifi |
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE BIT-pillow-2026-112900, CVE-2026-112900, GHSA-w889-685w-c8fh | Critical | 1.3% | 10 days ago | PyPI Pillow PyPI pillow |
Pillow: Heap buffer overflow in ImagingJpegDecode BIT-pillow-2026-112403, CVE-2026-112403, GHSA-8g5g-8vmr-9782, PYSEC-2026-4332 | Critical | 0.9% | 10 days ago | PyPI Pillow PyPI pillow |
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution BIT-pillow-2026-112398, CVE-2026-112398, GHSA-5x8w-8jj5-q52h, PYSEC-2026-4330 | Critical | 0.7% | 10 days ago | PyPI pillow |
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO BIT-pillow-2026-112393, CVE-2026-112393, GHSA-332p-7hrc-92wf | Critical | 1.0% | 10 days ago | PyPI Pillow PyPI pillow |
Mercury: Unauthenticated Remote Code Execution via /api/kernels CVE-2026-111058, GHSA-rv4m-xm3f-3ccq | Critical | 0.5% | 10 days ago | PyPI mercury |
Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass CVE-2026-111057, GHSA-f8c7-rwf9-fmgm | Critical | 0.4% | 10 days ago | PyPI mercury |
Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution CVE-2026-96620, GHSA-h4mw-j7qp-8mwm | Critical | 0.7% | 13 days ago | PyPI claude-agent-sdk |
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability CVE-2026-102764 | CriticalExploited | 18.9% | 14 days ago | |
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects CVE-2026-109829, GHSA-4w7w-5xrc-9h26 | Critical | 0.1% | 14 days ago | npm undici |
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent CVE-2026-109383, GHSA-2m5v-pch6-74hx | Critical | 0.2% | 14 days ago | npm undici |
better-auth: OAuth Proxy lets an attacker sign in as another user CVE-2026-110864, GHSA-r4xp-prcw-77qf | Critical | 0.3% | 15 days ago | npm better-auth |
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution CVE-2026-110858, GHSA-f9j4-qggq-h239 | Critical | 0.5% | 15 days ago | PyPI GitPython PyPI gitpython |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-76519 | CriticalExploited | 2.2% | 15 days ago | |
nodejs-whisper allows OS command injection through crafted audio file paths CVE-2026-110644, GHSA-2f48-3555-fpx6 | Critical | 2.7% | 15 days ago | npm nodejs-whisper |
git-diff: OS command injection vulnerability via crafted strings to the gitDiff API CVE-2026-110634, GHSA-6wfj-92cw-88vg | Critical | 2.3% | 15 days ago | npm git-diff |
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability CVE-2026-110447 | CriticalExploited | 11.6% | 15 days ago | |
TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses CVE-2026-102989, GHSA-qx66-fv34-fjm8 | Critical | 0.5% | 16 days ago | npm @tanstack/react-start npm @tanstack/solid-start npm @tanstack/start-server-core npm @tanstack/vue-start |
obsidian-tc tokens can access arbitrary configured vaults CVE-2026-77366, GHSA-84c9-qqpq-2pq5 | Critical | 0.3% | 17 days ago | npm obsidian-tc |
obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback CVE-2026-77363, GHSA-pqh8-4pj7-32xx | Critical | 0.2% | 17 days ago | npm obsidian-tc |
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment CVE-2026-108261, GHSA-x34j-47hf-4xg7 | Critical | 0.2% | 20 days ago | npm @tinacms/app npm tinacms |
Contao: Cross-site scripting in the comments bundle CVE-2026-107845, GHSA-628f-v4f6-p37r | Critical | 0.3% | 20 days ago | Packagist contao/comments-bundle |
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion CVE-2026-107722, GHSA-ww5h-9m49-7xx4 | Critical | 0.4% | 21 days ago | npm fast-jwt |
PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation CVE-2026-61444, CVE-2026-62176, GHSA-g6j7-pffp-8whg, PYSEC-2026-4256 | Critical | 0.5% | 22 days ago | PyPI PraisonAI PyPI praisonai |
LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport CVE-2026-105192, GHSA-w5f2-9q9c-ff4h | Critical | 0.8% | 22 days ago | PyPI lmcache |
Backstage: Sensitive information exposure in Scaffolder CVE-2026-106501, GHSA-g2v8-7jhw-pp8p | Critical | 0.5% | 23 days ago | npm @backstage/plugin-scaffolder-backend |
Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions CVE-2026-106486, GHSA-g8rx-f7m5-7794 | Critical | 0.4% | 23 days ago | npm @backstage/plugin-scaffolder-backend-module-bitbucket-cloud npm @backstage/plugin-scaffolder-backend-module-bitbucket-server |
Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937) CVE-2026-106446, GHSA-8r5x-fm3f-whwj | Critical | 0.8% | 23 days ago | npm handlebars |
Handlebars: JavaScript Injection via Own Property Check Bypass CVE-2026-106445, GHSA-p8wg-vrv2-v86f | Critical | 0.6% | 23 days ago | npm handlebars |
Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() CVE-2026-106102, GHSA-pq96-jpmf-w254 | Critical | 0.3% | 23 days ago | npm quasar |