PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-3105Highmercurial: Mercurial vulnerable to arbitrary code execution when converting Git repos CVE-2017-1000007Hightxaws: txAWS AWSServiceEndpoint defaults to not verifying server certificates CVE-2008-5646HighTrac: Trac vulnerable to denial of service CVE-2008-5647MediumTrac: Trac has vulnerability in HTML sanitizer filter CVE-2008-6547HighFormEncode: FormEncode Access Restrictions Bypass CVE-2008-6603Highmoin: MoinMoin Access Restrictions Bypassed due to improper ACL enforcement CVE-2008-6954Highcobbler: Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability CVE-2010-4338Mediumocrodjvu: ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack CVE-2011-0728Lowloggerhead: Loggerhead XSS via filename CVE-2011-0720CriticalPlone: Plone Privilege Escalation Vulnerability CVE-2011-1058Mediummoin: MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2015-6941Criticalsalt: salt password information leaked in debug logs CVE-2015-2674Mediumrestkit: Restkit Does Not Validate TLS certificates CVE-2015-5081Highdjango-cms: django-cms CSRF Vulnerability CVE-2015-2687Mediumnova: OpenStack Compute (Nova) Improper Access Control CVE-2015-4082Highattic: attic has improper verification of unencrypted backups CVE-2015-3156Mediumtrove: Openstack DBaaS (Trove) Improper Link Resolution Before File Access CVE-2012-1176Highpyfribidi: PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function CVE-2012-2094Mediumhorizon: OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2012-2101Lownova: Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules CVE-2012-2144Mediumhorizon: OpenStack Horizon Session Fixation CVE-2012-2417MediumPyCrypto: PyCrypto makes Use of Insufficiently Random Values CVE-2012-2654Mediumnova: OpenStack Compute (Nova) Improper Input Validation CVE-2012-3447Highnova: Arbitrary file overwrite in OpenStack Nova CVE-2012-4406Criticalswift: OpenStack Object Storage (swift) Code Injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.