PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-107395Mediumindico: Indico: Missing access check in legacy session export APICVE-2026-107397Mediumindico: Indico: Cross-Site-Scripting in minutes editorCVE-2026-107396Mediumindico: Indico: Cross-Site-Scripting in link fieldsCVE-2026-61442Highpraisonai-platform: PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypassCVE-2026-61434Highpraisonai: PraisonAI: Shell command allowlist bypass via find -exec built-in actionCVE-2026-61445Criticalpraisonai: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsCVE-2026-61427Highpraisonai: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surfaceCVE-2026-61440Mediumpraisonai-platform: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorizationCVE-2026-60085Highpraisonai: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backendCVE-2026-60091Highpraisonai: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRFCVE-2026-107286Highpydantic-ai: Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyCVE-2026-107378Highcairosvg: CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>CVE-2026-60086Mediumpraisonai: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass…CVE-2026-61433Highpraisonai: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python sourceCVE-2026-61435Highpraisonai: PraisonAI: Call API localhost-only authentication bypass via spoofed Host headerCVE-2026-61431Mediumpraisonai: PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspaceCVE-2026-107377Highdatamodel-code-generator: datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directoryCVE-2026-60088Mediumpraisonai: PraisonAI: Project custom command templates can read outside-workspace files into model promptsCVE-2026-107287Mediumpydantic-ai: Pydantic AI: Excessive resource use when local web fetching converts nested HTMLCVE-2026-60090Mediumpraisonai: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDLCVE-2026-107292Mediumpydantic-ai: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` headerCVE-2026-107295Highpydantic-ai: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool…CVE-2026-107293Lowpydantic-ai: Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`CVE-2026-107294Mediumpydantic-ai: Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlCVE-2026-61443Highpraisonaiagents: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo