PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-4469Lownova: OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2014-0134Lownova: OpenStack Nova host data leak to vm instance in rescue mode CVE-2014-0167Mediumnova: OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests CVE-2013-7060Mediumplone: Plone Filesystem path information leak CVE-2013-7061MediumPlone: Plone Privilege escalation through exposed underlying API CVE-2012-5491Mediumplone: Plone Information Disclosure CVE-2012-5492Mediumplone: Plone Metadata Disclosure CVE-2012-5487Mediumplone: Plone Sandbox Bypass CVE-2012-5502Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5490Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5494Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5504Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5493Mediumplone: Plone Sandbox Bypass CVE-2012-5501Highplone: Plone Arbitrary File Read CVE-2012-5505Highplone: Plone Information Disclosure CVE-2012-5496Highplone: Plone DoS via Crafted URL CVE-2012-5506Highplone: Plone denial of service via RSS Feed Request CVE-2012-5495Criticalplone: Plone python code injection CVE-2012-5488HighPlone: Plone Code Injection vulnerability CVE-2012-5485HighPlone: Plone Code Injection vulnerability CVE-2012-5497Mediumplone: Plone User account enumeration via crafted URL CVE-2012-5499HighPlone: Plone is vulnerable to denial of service CVE-2014-5252Highkeystone: OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events CVE-2014-5253Highkeystone: OpenStack Keystone Domain-scoped tokens don't get revoked CVE-2014-5251Highkeystone: OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo