PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-38540Criticalapache-airflow: Missing Authentication for Critical Function in Apache Airflow CVE-2021-22004Highsalt: Improper Authentication in SaltStack Salt CVE-2021-40797Highneutron: OpenStack Neutron Denial of Service vulnerability CVE-2021-40494Criticallxdui: AdaptiveScale LXDUI Hardcoded JWT Secret Key CVE-2021-40085Highneutron: OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2020-19002MediumMezzanine: Mezzanine Cross Site Scripting (XSS) vulnerability CVE-2021-38598Highneutron: OpenStack Neutron vulnerable to hardware address impersonation CVE-2020-18699Mediumlin-cms: Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability CVE-2020-18698CriticalLin-CMS: Lin-CMS-Flask vulnerable to Improper Authentication CVE-2021-38155Highkeystone: OpenStack Keystone allows information disclosure during account locking CVE-2021-35959Mediumplone: Plone has stored XSS in folder contents CVE-2021-20267Highneutron: Openstack Neutron has Insufficient Verification of IPv6 addresses CVE-2021-3313Mediumplone: Plone XSS in User Fullname Property and File Upload CVE-2021-32561MediumOctoPrint: OctoPrint API Error Messages vulnerable to XSS CVE-2021-32560Highoctoprint: OctoPrint Incorrect Access Control CVE-2021-31607Highsalt: Command Injection in SaltStack Salt CVE-2021-25315Highsalt: Saltstack Salt Unauthenticated Arbitrary Code Execution CVE-2021-3144Criticalsalt: SaltStack Salt eauth tokens can be used once after expiration CVE-2021-3197Criticalsalt: SaltStack Salt is vulnerable to shell injection via ProxyCommand argument CVE-2021-3148Criticalsalt: SaltStack Salt command injection in the Salt-API when using the Salt-SSH client CVE-2021-25284Mediumsalt: SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod CVE-2021-25282Highsalt: SaltStack Salt Directory Traversal vulnerability CVE-2021-25283Criticalsalt: SaltStack Salt Server Side Template Injection CVE-2021-25281Criticalsalt: SaltStack Salt Improper Authentication vulnerability CVE-2020-28243Highsalt: SaltStack Salt command injection via a crafted process name

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.