PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-22432Mediumweb2py: Open redirect in web2py CVE-2023-26051MediumSaleor: Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions CVE-2023-26052Lowsaleor: Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions CVE-2023-30797Highlemur: Lemur subject to insecure random generation CVE-2023-23929Highvantage6: vantage6 refresh tokens do not expire CVE-2023-22738Highvantage6: vantage6 vulnerable to Improper Preservation of Permissions CVE-2022-39228Mediumvantage6: vantage6 vulnerable to Observable Response Discrepancy CVE-2023-25691Criticalapache-airflow-providers-google: Apache Airflow Google Provider Improper Input Validation vulnerability CVE-2023-25696Criticalapache-airflow-providers-apache-hive: Apache Airflow Hive Provider Improper Input Validation vulnerability CVE-2023-25693Criticalapache-airflow-providers-apache-sqoop: Apache Airflow Sqoop Provider Improper Input Validation vulnerability CVE-2023-25692Highapache-airflow-providers-google: Apache Airflow Google Provider Improper Input Validation vulnerability CVE-2023-25956Highapache-airflow-providers-amazon: Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information CVE-2023-25823Mediumgradio: Update share links to use FRP instead of SSH tunneling CVE-2023-26302Highmarkdown-it-py: markdown-it-py Denial of Service vulnerability in the command line interface CVE-2023-26303Highmarkdown-it-py: markdown-it-py Denial of Service vulnerability CVE-2023-0949Mediummodoboa: modoboa Cross-site Scripting vulnerability CVE-2023-25657Highnautobot: Nautobot vulnerable to remote code execution via Jinja2 template rendering CVE-2023-24769Mediumchangedetection.io: Stored cross site scripting in changedetection.io CVE-2021-33926HighPlone: Server-Side Request Forgery in Plone CMS CVE-2023-0860Highmodoboa: Improper Restriction of Excessive Authentication Attempts in modoboa CVE-2023-25156Highkiwitcms: No protection against brute-force attacks on login page CVE-2023-25171Highkiwitcms: Denial of service vulnerability on Password reset page CVE-2023-25578Highstarlite: Denial of service vulnerability when parsing multipart request body CVE-2023-23934LowWerkzeug: Incorrect parsing of nameless cookies leads to __Host- cookies bypass CVE-2023-25577HighWerkzeug: High resource usage when parsing multipart form data with many fields

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.