PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2010-1666Mediumpython-cjson: Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjsonCVE-2010-2487Mediummoin: MoinMoin Cross-site Scripting (XSS) vulnerabilityCVE-2010-2970MediumMoin: MoinMoin cross-site scripting (XSS) vulnerability CVE-2010-2969Mediummoin: MoinMoin cross-site scripting (XSS) vulnerabilityCVE-2010-2480Mediummako: Mako contains Cross-site Scripting vulnerabilityCVE-2010-3198HighZope: Zope Denial of Service (DoS) vulnerability in ZServerCVE-2010-3494Highpyftpdlib: Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlibCVE-2008-7264Mediumpyftpdlib: Improper input validation in pyftpdlibCVE-2008-7262Mediumpyftpdlib: Directory traversal in pyftpdlibCVE-2008-7263Mediumpyftpdlib: Improper Authentication in pyftpdlibCVE-2010-2235Highcobbler: Cobbler is vulnerable to code injection CVE-2010-2477Mediumpaste: Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status codeCVE-2010-3495Mediumzodb3: Zope Object Database Denial of Service vulnerabilityCVE-2011-0432Criticalpywebdav: PyWebDAV SQL Injection vulnerabilityCVE-2011-2185Mediumfabric: Fabric vulnerable to symlink attack on tmp filesCVE-2011-1340Mediumplone: Plone XSS VulnerabilityCVE-2010-4340Highapache-libcloud: Apache Libcloud does not verify SSL certificates for HTTPS connectionsCVE-2011-3587Highzope2: Zope Command Execution VulnerabilityCVE-2011-4030HighPlone: Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishableCVE-2011-4356Mediumcelery: Celery local privilege escalation vulnerabilityCVE-2011-4617Mediumvirtualenv: Virtualenv Allows Symlink Attack on /tmp/CVE-2010-2491Mediumroundup: Roundup Cross-site Scripting (XSS) vulnerabilityCVE-2012-2395Highcobbler: Cobbler subject to Command InjectionCVE-2012-3361Mediumnova: OpenStack Nova Arbitrary file injection/corruption through directory traversal issuesCVE-2012-3360Mediumnova: OpenStack Nova Directory traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo