PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-5550Mediumh2o: Arbitrary system path lookup in h20 CVE-2024-5225Mediumlitellm: SQL injection in litellm CVE-2024-5206Mediumscikit-learn: scikit-learn sensitive data leakage vulnerability CVE-2024-5187Highonnx: onnx allows Arbitrary File Overwrite in download_model_with_test_data CVE-2024-4890Mediumlitellm: SQL injection in litellm CVE-2024-4888Highlitellm: Arbitrary file deletion in litellm CVE-2024-4881Highlollms: LoLLMS Path Traversal vulnerability CVE-2024-2928Highmlflow: Local File Inclusion in mlflow CVE-2024-2383Mediumzenml: Clickjacking in zenml CVE-2024-2213Lowzenml: Improper authentication in zenml CVE-2024-2965Mediumlangchain-community: Denial of service in langchain-community CVE-2024-3095Mediumlangchain-community: Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever CVE-2024-3099Mediummlflow: Undefined Behavior in mlflow CVE-2024-2171Lowzenml: Cross site scripting in zenml CVE-2024-2032Lowzenml: Race condition in zenml CVE-2024-2035Mediumzenml: Improper authorization in zenml CVE-2024-0520Criticalmlflow: Remote code execution in mlflow CVE-2024-35178Highjupyter_server: Jupyter server on Windows discloses Windows user password hash CVE-2024-5452Criticallightning: Remote code execution in pytorch lightning CVE-2024-4941Highgradio: Local file inclusion in gradio CVE-2024-4325Highgradio: Server-Side Request Forgery in gradio GHSA-HVH4-5QR6-3V7RHighpypqc: Observable Timing Discrepancy in pypqc CVE-2024-5629Mediumpymongo: PyMongo Out-of-bounds Read in the bson module GHSA-4M3G-6R7G-JV4FLowgradio_pdf: Arbitrary JavaScript execution due to using outdated libraries CVE-2024-37065Highskops: Skops unsafe deserialization

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo