PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-4215Mediumpgadmin4: pgAdmin is affected by a multi-factor authentication bypass vulnerability CVE-2024-4216HighpgAdmin4: pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload CVE-2024-3955Criticalcbpi4: CraftBeerPi 4 allows arbitrary code execution CVE-2024-32882Lowwagtail: Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`CVE-2024-32979Highnautobot: nautobot has reflected Cross-site Scripting potential in all object list views CVE-2023-46960HighPyPXE: PyPXE Buffer Overflow vulnerability CVE-2023-1000Mediumdcnnt: dcnnt-py is vulnerable to command injection via Notification Handler CVE-2024-33664Mediumpython-jose: python-jose denial of service via compressed JWE content CVE-2024-33663Criticalpython-jose: python-jose algorithm confusion with OpenSSH ECDSA keys CVE-2024-32481Mediumvyper: vyper's range(start, start + N) reverts for negative numbers CVE-2024-32645Mediumvyper: vyper performs incorrect topic logging in raw_log CVE-2024-32646Mediumvyper: vyper performs double eval of the slice start/length args in certain cases CVE-2024-32647Mediumvyper: vyper performs double eval of raw_args in create_from_blueprint CVE-2024-32648Mediumvyper: vyper default functions don't respect nonreentrancy keys CVE-2024-32649Mediumvyper: vyper performs multiple eval of `sqrt()` argument built in CVE-2024-32880Criticalpyload-ng: pyLoad allows upload to arbitrary folder lead to RCE CVE-2024-32879Mediumsocial-auth-app-django: social-auth-app-django affected by Improper Handling of Case Sensitivity CVE-2024-31208Mediummatrix-synapse: Synapse V2 state resolution weakness allows Denial of Service (DoS)GHSA-W228-RFPX-FHM4Mediumcg: cg vulnerable to an Open Redirect Vulnerability on Referer Header GHSA-P72Q-H37J-3HQ7Highdbt-core: dbt uses a SQLparse version with a high vulnerability CVE-2024-28717Highstorlets: OpenStack Storlets arbitrary code execution vulnerability CVE-2024-29733Lowapache-airflow-providers-ftp: Improper Certificate Validation vulnerability in Apache Airflow FTP Provider CVE-2024-1681Mediumflask-cors: flask-cors vulnerable to log injection when the log level is set to debug CVE-2024-32474Highsentry: Sentry vulnerable to leaking superuser cleartext password in logs CVE-2024-27306Mediumaiohttp: aiohttp Cross-site Scripting vulnerability on index pages for static file handling

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.