PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-0221Highdjango: Django DoS in django.views.static.serve CVE-2015-0222HighDjango: Django database denial-of-service with ModelMultipleChoiceField CVE-2015-0220Mediumdjango: Django Cross-site Scripting Vulnerability CVE-2015-1852Highkeystonemiddleware: OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks CVE-2015-3219Mediumhorizon: OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2015-5964MediumDjango: Denial-of-service possibility in logout() view by filling session store CVE-2015-1851Mediumcinder: OpenStack Cinder file disclosure in image convert CVE-2014-9684Highglance: OpenStack Glance Denial of service by creating a large number of images CVE-2015-1881Highglance: OpenStack Glance Denial of service by creating a large number of images CVE-2014-0472CriticalDjango: Code Injection in Django CVE-2014-0473Highdjango: Django Reuses Cached CSRF Token CVE-2014-0474Highdjango: Django Vulnerable to MySQL Injection CVE-2014-1418CriticalDjango: Django Vulnerable to Cache Poisoning CVE-2014-5356Mediumglance: OpenStack Glance improper validation of the image_size_cap configuration option CVE-2016-9964Highbottle: bottle.py vulnerable to CRLF Injection CVE-2016-4807Mediumweb2py: Web2py Reflected XSS vulnerability CVE-2016-1242Mediumtrytond: Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter CVE-2016-9015Mediumurllib3: Urllib3 Incorrect Certificate Validation CVE-2016-4808Mediumweb2py: Web2py Cross-Site Request Forgery vulnerability CVE-2016-6580Mediumpriority: priority vulnerable to denial of service CVE-2016-7148Mediummoin: MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-7036Criticalpython-jose: python-jose failure to use a constant time comparison for HMAC keys CVE-2016-7146Mediummoin: MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-9119Mediummoin: MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-3176Mediumsalt: Salt Insecure configuration of PAM external authentication service

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.