PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-25669Hightensorflow: TensorFlow has Floating Point Exception in AvgPoolGrad with XLA CVE-2023-25670Hightensorflow: TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize CVE-2023-25671Hightensorflow: TensorFlow has segmentation fault in tfg-translate CVE-2023-25672Hightensorflow: TensorFlow has Null Pointer Error in LookupTableImportV2 CVE-2023-25673Hightensorflow: TensorFlow has Floating Point Exception in TensorListSplit with XLA CVE-2023-25674Hightensorflow: TensorFlow has Null Pointer Error in RandomShuffle with XLA enable CVE-2023-25675Hightensorflow: TensorFlow has Segfault in Bincount with XLA CVE-2023-25676Hightensorflow: TensorFlow has null dereference on ParallelConcat with XLA CVE-2023-25801Hightensorflow: TensorFlow has double free in Fractional(Max/Avg)Pool CVE-2023-27579Hightensorflow: TensorFlow has Floating Point Exception in TFLite in conv kernel CVE-2023-25658Hightensorflow: TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad CVE-2022-3101Mediumtripleo-ansible: tripleo-ansible may disclose important configuration details from an OpenStack deployment CVE-2022-3146Mediumtripleo-ansible: tripleo-ansible may disclose important configuration details from an OpenStack deployment CVE-2023-28117Highsentry-sdk: Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`CVE-2018-25082Criticalweixin-python: weixin-python XML External Entity vulnerability CVE-2023-27586HighCairoSVG: CairoSVG improperly processes SVG files loaded from external resources CVE-2023-27494Mediumstreamlit: Streamlit publishes previously-patched Cross-site Scripting vulnerability CVE-2023-25695Mediumapache-airflow: Sensitive Information in Error Messages in Apache Airflow CVE-2023-25617Highsap-ai-sdk-base: SAP Cloud SDK for AI Python has OS Command Injection when Program Objects Execution is Enabled CVE-2017-20182Mediumdjango-ajax-utilities: Cross-site Scripting in django-ajax-utilities CVE-2023-27476HighOWSLib: OWSLib vulnerable to XML External Entity (XXE) Injection CVE-2023-27522HighuWSGI: Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling CVE-2022-3277Mediumneutron: openstack-neutron uncontrolled resource consumption flaw CVE-2022-4134Lowglance: OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability CVE-2023-27891Highpretix: Insufficient Session Expiration in pretix

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo