PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-6569Criticalh2o: External Control of File Name or Path in h2oai/h2o-3 CVE-2023-50248Mediumckan: Out of memory error when submitting the dataset form with a specially-crafted field CVE-2023-50263Lownautobot: Unauthenticated db-file-storage views GHSA-6X4H-9622-FQR6Highmeraki: Improper validation in meraki CVE-2023-50423Criticalsap-xssec: Improper Privilege Management in sap-xssec CVE-2023-46247Highvyper: incorrect storage layout for contracts containing large arrays CVE-2023-5764Mediumansible-core: Ansible template injection vulnerability CVE-2023-6753Highmlflow: Path traversal in MLflow CVE-2023-35625Mediummltable: Exposure of Sensitive Information in mltable CVE-2023-6709Highmlflow: Jinja2 template injection in mlflow CVE-2023-49796Mediummindsdb: Improper Input Validation in mindsdb CVE-2023-49795Mediummindsdb: Server-Side Request Forgery in mindsdb CVE-2023-49797Highpyinstaller: Local Privilege Escalation in Windows GHSA-J4G3-3Q8X-JXQPLowdbt-core: dbt-core's secret env vars written to package-lock.json in plaintext CVE-2023-48311Mediumdockerspawner: DockerSpawner allows any image by default CVE-2023-6568Mediummlflow: Cross-site Scripting (XSS) in MLflow CVE-2023-26154Mediumpubnub: pubnub Insufficient Entropy vulnerability CVE-2023-49297LowPyDrive2: PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution CVE-2023-49080Mediumjupyter-server: jupyter-server errors include tracebacks with path information CVE-2023-43472Highmlflow: Information exposure in MLflow GHSA-7VWR-G6PM-9HC8Highfastapi-proxy-lib: Cookie leakage between different users in fastapi-proxy-lib CVE-2023-49277MediumDpaste: Reflected XSS Vulnerability in dpaste CVE-2023-49083Mediumcryptography: cryptography vulnerable to NULL-dereference when loading PKCS7 certificates CVE-2023-40610Highapache-superset: Apache Superset - Elevation of Privilege CVE-2023-42504Mediumapache-superset: Apache Superset Allocation of Resources Without Limits or Throttling vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.