PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-1445Highpycrypto: PyCrypto does not properly reseed PRNG before allowing access CVE-2013-4155Mediumswift: OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4183Mediumcinder: OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots CVE-2013-4179Mediumnova: OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4294Mediumkeystone: OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token CVE-2013-6617Highsalt: SaltStack Privilege Escalation vulnerability CVE-2013-4439Highsalt: Minion identity not validated in saltstack CVE-2013-4497Mediumnova: OpenStack Compute Nova Improper Access Control CVE-2013-4436Highsalt: SaltStack MITM SSH attack in salt-ssh CVE-2013-4437Highsalt: SaltStack insecurely uses /tmp CVE-2013-4435Highsalt: Salt has insufficient argument validation in several modules CVE-2013-4510Hightrytond: Tryton Directory Traversal vulnerability CVE-2013-1865Mediumkeystone: OpenStack Keystone Improper Authentication vulnerability CVE-2013-4315Highdjango: Django Directory Traversal via ssi template tag CVE-2013-4314HighpyOpenSSL: PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name CVE-2012-6081Mediummoin: MoinMoin Multiple unrestricted file upload vulnerabilities CVE-2013-2096Mediumnova: OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-2104Highpython-keystoneclient: python-keystoneclient missing expiration check in PKI token validation CVE-2013-1443HighDjango: Django Denial of Service Vulnerability in the authentication framework CVE-2013-6396Criticalpython-swiftclient: Python Swift client is vulnerable to Missing SSL Certificate Check CVE-2013-4477Lowkeystone: OpenStack Identity Keystone Privilege Escalation vulnerability CVE-2014-1948Mediumglance: OpenStack Glance sensitive information disclosure via logs CVE-2013-6419Mediumnova: OpenStack Nova Router metadata queries are not restricted by tenant CVE-2014-0006Highswift: OpenStack Swift Discloses Secret URLs to Timing Attack CVE-2013-4188Mediumplone: Plone Authenticated Denial of Service vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.