PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-41951MediumPheonixAppAPI: PheonixAppAPI has visible Encoding Maps CVE-2024-41955Mediummobsf: MobSF vulnerable to Open Redirect in Login Redirect CVE-2024-41950Highhaystack-ai: Insecure Jinja2 templates rendered in Haystack Components can lead to RCE CVE-2024-7340Highweave: Weave server API vulnerable to arbitrary file leak CVE-2023-33976Hightensorflow: TensorFlow has segfault in array_ops.upper_bound CVE-2024-6578Mediumaim: Aim Stored Cross-site Scripting Vulnerability CVE-2024-41810Mediumtwisted: Twisted vulnerable to HTML injection in HTTP redirect body CVE-2024-41671Mediumtwisted: twisted.web has disordered HTTP pipeline response CVE-2024-40767MediumNova: OpenStack Nova vulnerable to unauthorized access to potentially sensitive data CVE-2024-41656Highsentry: Sentry vulnerable to stored Cross-Site Scripting (XSS)CVE-2024-41129Mediumops: ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command CVE-2024-26020Highanki: Ankitects Anki arbitrary script execution vulnerability CVE-2024-32152Lowanki: Ankitects Anki LaTeX Blocklist Bypass vulnerability CVE-2024-29073Mediumanki: Anki Latex Incomplete Blocklist Vulnerability CVE-2024-6961Highguardrails-ai: Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference CVE-2024-6281Highlollms: LoLLMS vulnerable to Expected Behavior Violation CVE-2024-39123Mediumcalibreweb: Calibre-Web Cross Site Scripting (XSS)CVE-2024-41124Lowpuncia: [PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`CVE-2024-35199Hightorchserve: TorchServe gRPC Port Exposure CVE-2024-35198Criticaltorchserve: TorchServe vulnerable to bypass of allowed_urls configuration CVE-2024-40647Lowsentry-sdk: Sentry's Python SDK unintentionally exposes environment variables to subprocesses CVE-2024-39126Mediumroundup: Roundup Cross-site Scripting Vulnerability CVE-2024-39125Mediumroundup: Roundup Cross-site Scripting Vulnerability CVE-2024-39124Mediumroundup: Roundup Cross-site Scripting Vulnerability GHSA-VHMJ-5Q9R-MM9GMediumedumfa: BlastRADIUS also affects eduMFA

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.