PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-1002153Highkoji: Koji blacklisted paths workaround CVE-2017-1002152Mediumbodhi: Bodhi Cross-site Scripting Vulnerability CVE-2018-14636Mediumneutron: Openstack Neutron vulnerable to eavesdropping on private traffic CVE-2018-16849Highmistral: openstack-mistral Discloses the presence of arbitrary files within the filesystem CVE-2015-4707Mediumipython: Improper Neutralization of Input During Web Page Generation in IPython CVE-2015-3171Mediumsosreport: sosreport sensitive information disclosure via weak permissions of the generated archives CVE-2015-7764Highlemur: Lemur uses static IV per key CVE-2017-5591Mediumslixmpp: SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons CVE-2017-8342HighRadicale: Radicale is vulnerable to timing oracles and simple bruteforce attacks CVE-2015-1864MediumKallithea: Kallithea cross-site scripting (XSS) vulnerability CVE-2015-0260HighRhodeCode: RhodeCode and Kallithea are vulnerable to sensitive information disclosure CVE-2015-0276HighKallithea: Kallithea cross-site request forgery (CSRF) vulnerability CVE-2015-5285Highkallithea: Kallithea CRLF injection vulnerability CVE-2016-3691Highkallithea: Kallithea Routes CSRF Bypass CVE-2015-7546Highkeystone: OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials CVE-2015-3646Mediumkeystone: OpenStack Keystone Logs Passwords CVE-2014-3621Mediumkeystone: OpenStack Identity Keystone Exposure of Sensitive Information CVE-2014-0204Mediumkeystone: OpenStack Identity Keystone Improper Privilege Management CVE-2014-3476Mediumkeystone: OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege CVE-2013-2014Mediumkeystone: OpenStack Identity (Keystone) Denial of Service CVE-2017-17458Criticalmercurial: Mercurial vulnerable to arbitrary code injection CVE-2018-1000132Criticalmercurial: Mercurial Incorrect Access Control vulnerability CVE-2018-13348Highmercurial: Mercurial Improper Input Validation vulnerability CVE-2018-13346Highmercurial: Mercurial Improper Input Validation vulnerability CVE-2018-13347Criticalmercurial: Mercurial mishandles integer addition and subtraction

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.