PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-12887CriticalLinOTP: LinOTP replay vulnerability with auto resynchronization enabled for TOTP tokenCVE-2016-7404Criticalopenstack-magnum: Openstack Magnum Unsafe Credential HandlingCVE-2019-3895Mediumoctavia: Openstack Octavia Access Control VulnerabilityCVE-2019-10047MediumPydio: PyDio Stored XSS VulnerabilityCVE-2016-7151Mediumcapstone: Capstone SEGV caused by a read memory accessCVE-2019-11842Highmatrix-sydent: matrix-sydent and matrix-synapse Use Cryptographically Weak PRNGCVE-2019-11340Mediummatrix-sydent: Matrix Sydent mishandles emailsCVE-2022-29193Mediumtensorflow: Missing validation causes `TensorSummaryV2` to crashCVE-2022-28990Highpywasm3: Buffer overflow in wasm3CVE-2022-21195Mediumurl_regex: Regular expression denial of service in url_regexCVE-2022-1430HighOctoPrint: Cross-site Scripting in OctoPrintCVE-2022-1432HighOctoPrint: Cross-site Scripting in OctoPrintCVE-2014-4660Mediumansible: Ansible discloses credential informationCVE-2014-4659Mediumansible: Ansible sets unsafe permissions for sources.listCVE-2014-4658Mediumansible: Ansible Sensitive Files Are Locally ReadableCVE-2014-4657Criticalansible: Ansible Remote Code ExecutionCVE-2014-4967Criticalansible: Ansible Arbitrary Code ExecutionCVE-2014-4966Criticalansible: Ansible Arbitrary Code ExecutionCVE-2014-9390Criticalorg.eclipse.jgit:org.eclipse.jgit: JGit Improper Input Validation vulnerabilityCVE-2014-9720Hightornado: Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)CVE-2014-2686Highansible: Ansible unsafe evaluation of some stringsCVE-2014-0161Highovirt-engine-sdk-python: ovirt-engine-sdk-python improper validation of hostname in x.509 certificateCVE-2008-6549Highmoin: MoinMoin Denial of Service vulnerability via password_checker functionCVE-2008-6548Mediummoin: MoinMoin improper access control on the included page for the rst parserCVE-2010-2422MediumPlone: Plone Cross-site Scripting vulnerability in PortalTransforms

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo