PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2011-4953Mediumcobbler: Cobbler vulnerable to code injection via unsafe YAML loading CVE-2012-5500Mediumplone: Plone contains Cross-site Request Forgery CVE-2012-5508MediumPlone: Exposure of Sensitive Information in Plone CVE-2014-3641Mediumcinder: OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3137Highbottle: Bottle does not properly limit content-types CVE-2015-0838Criticaldulwich: Dulwich Buffer Overflow when handling pack files CVE-2014-9706Criticaldulwich: Dulwich Arbitrary code execution via commit with directory path starting with .git CVE-2014-2237Highkeystone: OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend CVE-2015-0846Highdjango-markupfield: django-markupfield Arbitrary File Read CVE-2015-4053Lowceph-deploy: ceph-deploy uses world-readable permissions on client.admin key CVE-2014-3497Mediumswift: OpenStack Swift Cross-site Scriping vulnerability CVE-2015-5251Mediumglance: OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions CVE-2014-2828Highkeystone: OpenStack Identity (Keystone) DoS through V3 API authentication chaining CVE-2012-5498Highplone: Plone denial of service via Caching Bypass CVE-2015-5217Mediumipsilon: Ipsilon denial of service via a duplicate SP name CVE-2014-0012MediumJinja2: Insecure Temporary File in Jinja2 CVE-2015-5303Hightripleo-heat-templates: OpenStack TripleO Heat templates spoof metadata requests CVE-2014-6276Mediumroundup: Roundup sensitive data disclosure vulnerability CVE-2015-5271Hightripleo-heat-templates: TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers CVE-2015-5240Lowneutron: OpenStack Neutron Race condition vulnerability CVE-2014-3994MediumDjblets: Djiblets Cross-site scripting Vulnerability via JSON Objects CVE-2014-1829Mediumrequests: Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-4301Mediumajenti: Eugene Pankov Ajenti Cross-site scripting Vulnerabilities CVE-2016-1241Mediumtrytond: Tryton allows users to read the hashed password CVE-2016-4972Criticalmurano: OpenStack Murano Code Execution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.