PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-17516Highrtv: Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks CVE-2015-1856Mediumswift: OpenStack Swift Unauthorized delete of versioned Swift object CVE-2015-5162Highcinder: OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption CVE-2015-5223Mediumswift: OpenStack Object Storage (Swift) Sensitive Data Exposure CVE-2016-7401Highdjango: Django CSRF Protection Bypass CVE-2016-8638Criticalipsilon: Session Fixation in ipsilon CVE-2017-7400Mediumhorizon: OpenStack Horizon Cross-site Scripting (XSS)CVE-2017-7214Criticalnova: OpenStack Nova logs sensitive context from notification exceptions CVE-2017-1000469Criticalcobbler: Cobbler vulnerable to arbitrary code execution CVE-2017-1000482MediumProducts.CMFPlone: Products.CMFPlone XSS in profile home_page property CVE-2011-4139Highdjango: Django Vulnerable to Cache Poisoning CVE-2011-4138HighDjango: Django Might Allow CSRF Requests via URL Verification CVE-2012-0805CriticalSQLAlchemy: SQLAlchemy vulnerable to SQL injection CVE-2017-1000481MediumProducts.CMFPlone: Products.CMFPlone Open Redirect Vulnerability CVE-2014-1858Highnumpy: Arbitrary file write in NumPy CVE-2016-10516MediumWerkzeug: Pallets Werkzeug cross-site scripting vulnerability CVE-2018-7490HighuWSGI: uWSGI Directory Traversal vulnerability CVE-2018-1000089Criticaldjango-anymail: django-anymail Includes Sensitive Information in Log Files CVE-2018-1000167Highsuricata-update: OISF suricata-update unsafely deserializes YAML data CVE-2014-6633Hightryton: Tryton vulnerable to arbitrary command execution CVE-2018-10657Highmatrix-synapse: Matrix Synapse DoS CVE-2018-12104Mediumknowledge-repo: Airbnb Knowledge Repo XSS In Comments CVE-2011-4104Criticaldjango-tastypie: Django Tastypie Improper Deserialization of YAML Data CVE-2015-4017Highsalt: Salt vulnerable to Improper Certificate Validation CVE-2015-3220Hightlslite: tlslite remote denial of service vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo