PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-9639Criticalsalt: Salt allows deleted minions to read or write to minions with the same id CVE-2016-7147Mediumplone: Plone XSS in Zope ZMI CVE-2017-5992Mediumopenpyxl: Improper Restriction of XML External Entity Reference in Openpyxl CVE-2016-1000001Highflask-oidc: flask-oidc Open Redirect vulnerability CVE-2016-9909Mediumhtml5lib: Improper Neutralization of Input During Web Page Generation in html5lib CVE-2016-9910Mediumhtml5lib: Cross-site Scripting in html5lib CVE-2016-4041MediumPlone: Plone vulnerable to privilege escalation in WebDAV CVE-2016-4042MediumPlone: Plone vulnerable to unauthorized disclosure of site content CVE-2016-4043MediumPlone: Chameleon in Plone allows Authentication Bypass CVE-2015-8034Lowsalt: Salt uses weak permissions on the cache data CVE-2016-10127Criticalpysaml2: PySAML2 XML external entity attack CVE-2017-5537Mediumweblate: Weblate user account enumeration via reset password form CVE-2017-7266Mediumsecurity_monkey: Netflix Security Monkey Open Redirect vulnerability CVE-2015-8310MediumCherryMusic: Cherry Music Cross-site Scripting (XSS) vulnerability CVE-2015-8309MediumCherryMusic: Cherry Music directory traversal vulnerability CVE-2017-7200Mediumglance: OpenStack Glance Server-Side Request Forgery (SSRF)CVE-2015-8234Mediumglance: OpenStack Glance Signature Verification Bypass CVE-2016-9243Highcryptography: Improper input validation in cryptography CVE-2017-6952Highcapstone: Capstone Integer overflow CVE-2015-1839Mediumsalt: SaltStack has insecure /tmp file handling in salt/modules/chef.py CVE-2015-1838Mediumsalt: Salt improper handling of tmp files CVE-2016-3076Highpillow: Pillow Buffer overflow in Jpeg2KEncode.c CVE-2017-8109Highsalt: SaltStack Salt Information Exposure CVE-2014-1932Highpillow: PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles CVE-2015-8557CriticalPygments: Command Injection in Pygments

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo