PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-13390Lowcloudtoken: Cloudtoken Insufficiently Protects Credentials CVE-2018-12423Highmatrix-synapse: Matrix Synapse Authorization Error CVE-2018-12291Highmatrix-synapse: Matrix Synapse Security Filtering Flaw CVE-2018-10406Highosxcollector: Yelp OSXCollector Improper Certificate Validation CVE-2018-1000226Criticalcobbler: Cobbler Improper Validation of Security Tokens CVE-2017-7893Criticalsalt: SaltStack Salt allows compromised salt-minions to impersonate the salt-master CVE-2017-5936Highnova-lxd: OpenStack Nova-LXD bypass security restrictions CVE-2017-5200Highsalt: SaltStack Salt arbitrary command execution in Salt-api via ssh_client CVE-2017-3590Lowmysql-connector-python: MySQL Connectors Privilege Escalation CVE-2017-18191Highnova: OpenStack Nova Denial of service attack on the compute host CVE-2017-17051Highnova: OpenStack Nova DoS by rebuilding the same instance with a new image multiple times CVE-2017-16616Criticalpyanyapi: Unsafe pyyaml load usage in PyAnyAPI CVE-2017-16228Criticaldulwich: Dulwich RCE Vulnerability CVE-2017-16239Mediumnova: OpenStack Nova Filter Scheduler Bypass CVE-2017-15914Highborgbackup: Borg Improper Access Control vulnerability CVE-2017-14176Highbzr: Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname CVE-2017-12852Highnumpy: Numpy missing input validation CVE-2017-12440Highaodh: Openstack Aodh can be used to launder Keystone trusts CVE-2017-12155Mediumtripleo-heat-templates: Openstack tripleo-heat-templates unauthenticated file access CVE-2017-11610Highsupervisor: Incorrect Default Permissions in Supervisor CVE-2017-11424Highpyjwt: PyJWT vulnerable to key confusion attacks CVE-2017-1000483HighPlone: Plone Unauthorized Access Vulnerability CVE-2017-1000116Criticalmercurial: Mercurial is vulnerable to shell injection attack CVE-2017-0360Mediumtrytond: Tryton Information Disclosure Vulnerability CVE-2016-9605Mediumcobbler: Cobbler Arbitrary File Read

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo