PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-5144Highdjango: Django Vulnerable to HTTP Response Splitting Attack CVE-2015-5145HighDjango: Django ReDoS in validators.URLValidator CVE-2015-4706Mediumipython: Improper Neutralization of Input During Web Page Generation in IPython CVE-2015-5963MediumDjango: Django denial of service via empty session record creation CVE-2015-7316Mediumplone: Plone Cross-site Scripting Vulnerability CVE-2015-7315HighProducts.CMFPlone: Plone unauthorized member addition vulnerability CVE-2015-7318HighPlone: Plone Header Injection CVE-2015-5607Highipython: IPython vulnerable to cross site request forgery (CSRF)CVE-2015-7293HighPlone: Plone vulnerable to cross-site request forgery CVE-2017-5192Highsalt: SaltStack Salt Authentication Bypass when using the local_batch client from salt-api CVE-2016-9014CriticalDjango: Django DNS Rebinding Vulnerability CVE-2016-9013CriticalDjango: Django user with hardcoded password created when running tests on Oracle CVE-2015-6918Mediumsalt: salt leaks git usernames and passwords to the log CVE-2017-15612Mediummistune: Cross-site Scripting in Mistune CVE-2017-14695Criticalsalt: SaltStack Salt Directory traversal vulnerability in minion id validation CVE-2017-14696Highsalt: SaltStack Salt Denial of Service via a crafted authentication request CVE-2013-6044MediumDjango: Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2017-16762Highsanic: Sanic arbitrary file read and directory traversal CVE-2017-16613Criticalswauth: OpenStack Swauth object/proxy server writing Auth Token to log file CVE-2017-17054Highaubio: Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function CVE-2014-0105Lowpython-keystoneclient: python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware CVE-2022-30765Criticalcalibreweb: SQL injection in calibreweb CVE-2014-1402HighJinja2: Incorrect Privilege Assignment in Jinja2 CVE-2014-3146Mediumlxml: lxml Cross-site Scripting Via Control Characters CVE-2014-3801Lowopenstack-heat: OpenStack Heat template URL information leakage

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.