PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-15751Criticalsalt: SaltStack Salt Remote command execution and incorrect access control when using salt-api CVE-2018-15750Mediumsalt: SaltStack Salt Directory Traversal vulnerability in salt-api CVE-2019-2435Highmysql-connector-python: Improper Access Control in MySQL Connector Python CVE-2019-1000021Highslixmpp: slixmpp Incorrect Access Control CVE-2017-9111HighOpenEXR: OpenEXR invalid write CVE-2017-9112MediumOpenEXR: OpenEXR invalid read CVE-2019-3830Mediumceilometer: Ceilometer Prints Sensitive Configuration Data to Log CVE-2018-19787Mediumlxml: Improper Neutralization of Input During Web Page Generation in LXML CVE-2018-7206Highoauthenticator: JupyterHub OAuthenticator elevation of privilege CVE-2014-3473Mediumhorizon: Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name CVE-2014-3474Lowhorizon: OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2014-3594Lowhorizon: OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface CVE-2018-16552HighDjango-CRM: MicroPyramid Django-CRM CSRF CVE-2013-1888Mediumpip: Improper Link Resolution Before File Access in pip CVE-2014-8991Mediumpip: pip lack of randomness in build directory CVE-2013-1629Highpip: Improper Input Validation in pip CVE-2015-2296Mediumrequests: Python Requests Session Fixation CVE-2019-11236Mediumurllib3: Improper Neutralization of CRLF Sequences in urllib3 library for Python CVE-2013-1909Highqpid-python: Apache Qpid Python client Improper certificate validation CVE-2019-5885Highmatrix-synapse: Matrix Synapse Predictable Secret Key CVE-2019-10844Criticalnnabla: Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10 CVE-2018-10875Highansible: Ansible Arbitrary Code Execution CVE-2018-16876Highansible: Ansible sensitive information disclosure CVE-2016-4428Mediumhorizon: OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2016-4985Highironic: OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.