PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-61437Highpraisonaiagents: PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow CVE-2026-61432Mediumpraisonaiagents: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace CVE-2026-107290Mediumpydantic-ai: Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`CVE-2026-107291Lowpydantic-ai: Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`CVE-2026-107289Mediumpydantic-ai: Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers CVE-2026-61446Highpraisonaiagents: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification CVE-2026-61447Criticalpraisonaiagents: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets CVE-2026-60087Mediumpraisonaiagents: PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments CVE-2026-61430Highpraisonaiagents: PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure CVE-2026-60089Mediumpraisonaiagents: PraisonAI: Project config can auto-save agent output outside the project root CVE-2026-61439HighPraisonAI: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats CVE-2026-105742Lowdocling: Docling: Configured HTTP headers sent to every remote image host named by a document CVE-2026-105743Mediumdocling: Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)CVE-2026-105744Highdocling: Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in…CVE-2026-105748Mediumdocling: Docling: Crafted DoclingDocument JSON embeds local image files into converted output CVE-2026-105749Mediumdocling: Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion CVE-2026-105745Mediumdocling: Docling imports plugin entry points before the allow_external_plugins check CVE-2026-105697Criticallangflow: Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration CVE-2026-105698Mediumlangflow: Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints CVE-2026-105699Highlangflow: Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers CVE-2026-106440Highhydra-optuna-sweeper: Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method CVE-2026-106439Highhydra-core: Hydra: Mutable instantiate policy sets allow target blocklist bypass CVE-2026-61429Highpraisonaiagents: PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass CVE-2026-106443HighWeasyPrint: WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE CVE-2026-106441Highhydra-core: Hydra logging configuration permits unsafe callable resolution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo