PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-40637Lowdbt-core: dbt has an implicit override for built-in materializations from installed packages CVE-2024-31411Highorg.apache.streampipes:streampipes-parent: Apache StreamPipes has potential remote code execution (RCE) via file upload CVE-2024-31979Mediumorg.apache.streampipes:streampipes-parent: Apache StreamPipes has possibility of SSRF in pipeline element installation process CVE-2024-30471Mediumorg.apache.streampipes:streampipes-parent: Apache StreamPipes potentially allows creation of multiple identical accounts CVE-2024-39877Highapache-airflow: Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler CVE-2024-39863Mediumapache-airflow: Apache Airflow Potential Cross-site Scripting Vulnerability GHSA-Q5FM-55C2-V6J9Criticalfiona: Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib GHSA-G4M4-9Q4C-MFW6Highfiona: Fiona affected by CVE-2020-14152 related to madler-zlib CVE-2024-39887Mediumapache-superset: Apache Superset vulnerable to improper SQL authorization CVE-2024-40627Mediumfastapi-opa: OpaMiddleware does not filter HTTP OPTIONS requests CVE-2024-21513Criticallangchain-experimental: langchain-experimental vulnerable to Arbitrary Code Execution CVE-2024-6345Highsetuptools: setuptools vulnerable to Command Injection via package URL GHSA-5GRR-72F9-678VHighcipherbcrypt: Malware package cipherbcrypt CVE-2024-39903Highsolara: Local File Inclusion in Solara CVE-2024-39905MediumRed-DiscordBot: Red-DiscordBot vulnerable to Incorrect Authorization in commands API CVE-2024-39317Highwagtail: Wagtail regular expression denial-of-service via search query parsing CVE-2024-39614HighDjango: Django vulnerable to Denial of Service CVE-2024-39330HighDjango: Django Path Traversal vulnerability CVE-2024-39329MediumDjango: Django vulnerable to user enumeration attack CVE-2024-38875HighDjango: Django vulnerable to Denial of Service CVE-2024-5569Mediumzipp: zipp Denial of Service vulnerability CVE-2024-6227Highaim: Aim denial of service vulnerability GHSA-564J-V29W-RQR6Mediumkhoj-assistant: Khoj Open Redirect Vulnerability in Login Page GHSA-3V33-3WMW-3785Lowyt-dlp: yt-dlp has dependency on potentially malicious third-party code in Douyu extractors CVE-2024-5753Highvanna: Vanna vulnerable to SQL Injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.