PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-34359Criticalllama-cpp-python: llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata CVE-2024-32874Criticalfrigate: Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service CVE-2024-28148Mediumapache-superset: Apache Superset Incorrect Authorization vulnerability CVE-2024-34252Criticalpywasm3: pywasm3 contains a global buffer overflow which leads to segmentation fault CVE-2024-34249Criticalpywasm3: pywasm3 contains a heap buffer overflow which leads to segmentation fault CVE-2024-34078Highhtml-sanitizer: Arbitrary HTML present after sanitization because of unicode normalization CVE-2024-34069HighWerkzeug: Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain CVE-2024-34064MediumJinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-32982Highlitestar: Litestar and Starlite vulnerable to Path Traversal CVE-2024-34528Mediumwordops: WordOps has TOCTOU race condition CVE-2024-34529Mediumnebari: Nebari prints temporary Keycloak root password CVE-2024-34510Highgradio: Gradio allows credential leakage on Windows CVE-2024-34511Mediumgradio: Gradio's Component Server does not properly consider` _is_server_fn` for functions CVE-2024-34489Highryu: Ryu Infinite Loop vulnerability CVE-2024-34486Highryu: Ryu Infinite Loop vulnerability CVE-2024-34488Highryu: Ryu Infinite Loop vulnerability CVE-2024-34484Mediumryu: Ryu Infinite Loop vulnerability CVE-2024-34487Mediumryu: Ryu Infinite Loop vulnerability CVE-2024-34483Highryu: Ryu Infinite Loop vulnerability CVE-2024-34073Highsagemaker: sagemaker-python-sdk Command Injection vulnerability CVE-2024-34072Highsagemaker: sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data CVE-2024-34062Lowtqdm: tqdm CLI arguments injection attack CVE-2024-31636Lowlief: LIEF obtain sensitive information via the name parameter CVE-2024-34061Mediumchangedetection.io: changedetection.io Cross-site Scripting vulnerability CVE-2024-30251Highaiohttp: aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.