PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-14019Highrtslib-fb: rtslib-fb weak permissions for /etc/target/saveconfig.json file CVE-2020-7932Mediumomero-web: OMERO-web Sensitive Data Exposure CVE-2018-16848Highmistral: OpenStack Mistral DoS CVE-2020-10755Highcinder: Openstack cinder Improper handling of ScaleIO backend credentials CVE-2020-7658Mediummeinheld: meinheld vulnerable to HTTP Request Smuggling CVE-2020-13092Criticalscikit-learn: scikit-learn Deserialization of Untrusted Data CVE-2020-12889CriticalMISP-maltego: Maltego incorrectly shares a MISP connection across users in a remote-transform use case CVE-2020-12691Highkeystone: OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID CVE-2020-12692Mediumkeystone: OpenStack Keystone does not check signature TTL of the EC2 credential auth method CVE-2020-12689Highkeystone: OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context CVE-2020-11651Criticalsalt: SaltStack Salt Unauthenticated Remote Code Execution CVE-2020-11652Highsalt: SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2019-15795Mediumpython-apt: python-apt Flawed Package Integrity Check CVE-2019-15796Mediumpython-apt: python-apt Does Not Check Hash Signature CVE-2020-9543Highmanila: OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks CVE-2015-9543LowNova: OpenStack Nova can leak consoleauth token into log files CVE-2020-7937MediumPlone: Plone cross site scripting (XSS)CVE-2020-7941CriticalPlone: Plone Unauthenticated Write Vulnerability CVE-2020-7939HighPlone: Plone SQL Injection Vulnerability CVE-2020-7938Highplone.restapi: Plone Privilege Escallation CVE-2020-7936MediumPlone: Plone Open Redirect Vulnerability CVE-2020-7940HighPlone: Plone allows weak passwords CVE-2019-17361Criticalsalt: SaltStack Salt is vulnerable to command injection CVE-2015-8549Highpyamf: PyAMF vulnerable to XML external entity (XXE)CVE-2020-5311Criticalpillow: Buffer Copy without Checking Size of Input in Pillow

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.