PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-29033Highoauthenticator: GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace CVE-2024-29032Mediumqiskit-ibm-runtime: `qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code GHSA-CQ96-9974-V8HMLowqiskit-ibm-runtime: Dynamic Variable Evaluation in qiskit-ibm-runtime CVE-2024-28179Criticaljupyter-server-proxy: Jupyter Server Proxy's Websocket Proxying does not require authentication CVE-2024-21503Mediumblack: Black vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2024-28865Highwiki: Denial of service via regular expression CVE-2024-28237MediumOctoPrint: XSS via the "Snapshot Test" feature in Classic Webcam plugin settings CVE-2023-41334Highastropy: RCE in TranformGraph().to_dot_graph function CVE-2024-29156Mediumyaql: Information leakage in YAQL CVE-2024-22513Lowdjangorestframework-simplejwt: Improper Privilege Management in djangorestframework-simplejwt CVE-2024-27351Mediumdjango: Regular expression denial-of-service in Django GHSA-879P-8GW4-MCPWLowfgr: fgr Vulnerable to Insecure Default Variable Initialization CVE-2024-24770Mediumvantage6: vantage6 vulnerable to a username timing attack on recover password/MFA token CVE-2024-23823Mediumvantage6: vantage6's CORS settings overly permissive CVE-2024-22203Criticalwhoogle-search: Whoogle Search Path Traversal vulnerability CVE-2024-22204Mediumwhoogle-search: Whoogle Search Path Traversal vulnerability CVE-2024-22205Criticalwhoogle-search: Whoogle Search Server-Side Request Forgery vulnerability CVE-2024-22417Mediumwhoogle-search: Whoogle Search Cross-site Scripting vulnerability CVE-2024-28746Mediumapache-airflow: Apache Airflow: Ignored Airflow Permission CVE-2024-27305Mediumaiosmtpd: aiosmtpd vulnerable to SMTP smuggling CVE-2024-27097Mediumckan: Potential log injection in reset user endpoint in CKAN CVE-2024-26164Highmssql-django: Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server CVE-2024-28184Highweasyprint: WeasyPrint allows the attachment of arbitrary files and URLs to a PDF CVE-2024-52288Mediumlibosdp: LibOSDP RMAC revert to the beginning of the session CVE-2024-52296Mediumlibosdp: LibOSDP vulnerable to a null pointer deref in osdp_reply_name

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.