PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-21645Mediumpyload-ng: pyload Log Injection vulnerability CVE-2024-21642Highdtale: D-Tale server-side request forgery through Web uploads CVE-2023-52323Highpycryptodomex: PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption CVE-2023-52312MediumPaddlePaddle: PaddlePaddle nullptr dereference in paddle.crop CVE-2023-52308MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.amin CVE-2023-52313MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.argmin and paddle.argmax CVE-2023-52311CriticalPaddlePaddle: PaddlePaddle command injection in _wget_download CVE-2023-52305MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.topk CVE-2023-52309HighPaddlePaddle: PaddlePaddle heap buffer overflow in paddle.repeat_interleave CVE-2023-52310CriticalPaddlePaddle: PaddlePaddle command injection in get_online_pass_interval CVE-2023-52306MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.lerp CVE-2023-52307HighPaddlePaddle: PaddlePaddle stack overflow in paddle.linalg.lu_unpack CVE-2023-52304HighPaddlePaddle: PaddlePaddle stack overflow in paddle.searchsorted CVE-2023-52314CriticalPaddlePaddle: PaddlePaddle command injection in convert_shape_compare CVE-2023-52303Mediumpaddlepaddle: PaddlePaddle segfault in paddle.put_along_axis CVE-2023-38678MediumPaddlePaddle: PaddlePaddle segfault in paddle.mode CVE-2023-52302MediumPaddlePaddle: PaddlePaddle null pointer dereference in paddle.nextafter CVE-2023-38677Mediumpaddlepaddle: PaddlePaddle floating point exception in paddle.linalg.eig CVE-2023-38675MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.linalg.matrix_rank CVE-2023-38676MediumPaddlePaddle: PaddlePaddle segfault in paddle.dot CVE-2023-38674MediumPaddlePaddle: PaddlePaddle floating point exception in paddle.nanmedian CVE-2023-51663Mediumhail: Hail relies on OIDC email claims to verify the validity of a user's domain.CVE-2023-5115Mediumansible: Ansible symlink attack vulnerability CVE-2023-6681Mediumjwcrypto: DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value CVE-2023-49438MediumFlask-Security-Too: Open redirect vulnerability in Flask-Security-Too

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo