PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-10874Highansible: Ansible Improper Input Validation vulnerability CVE-2018-16856Highoctavia: Openstack Octavia allows Insertion of Sensitive Information into Log File CVE-2019-10876Highneutron: OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-9735Highneutron: OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2018-14635Highneutron: OpensStack Neutron Denial of Service Vulnerability CVE-2017-7466Highansible: Ansible Arbitrary Code Execution CVE-2017-7549Mediuminstack-undercloud: instack-undercloud vulnerable to symlink attack on tmp files CVE-2017-7543Mediumneutron: OpenStack Neutron Race Condition vulnerability CVE-2017-2673Highkeystone: OpenStack Identity service (keystone) Incorrect Authorization CVE-2016-6519Mediummanila-ui: Openstack Manila Persistent XSS in Metadata field CVE-2015-5237HighGoogle.Protobuf: protobuf susceptible to buffer overflow CVE-2016-5851Highpython-docx: Improper Restriction of XML External Entity Reference in python-docx CVE-2017-7550Criticalansible: Ansible Insertion of Sensitive Information into Log File vulnerability CVE-2018-25033Highadmesh: Out-of-bounds read in admesh CVE-2022-28470Criticalmarcador: Code-execution backdoor in marcador CVE-2022-30284Criticalpython-libnmap: Argument injection in python-libnmap CVE-2022-1592Highscout-browser: Server-Side Request Forgery in scout-browser CVE-2022-1053Criticalkeylime: Tenant and Verifier might not use the same registrar data CVE-2013-0335HighNova: OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM CVE-2013-0305MediumDjango: Django Data leakage via admin history log CVE-2013-0306MediumDjango: Django is vulnerable to Denial of Service attack in formset CVE-2013-0282MediumKeystone: OpenStack Keystone allows context-dependent attackers to bypass access restrictions CVE-2013-0270Mediumkeystone: OpenStack Keystone Denial of Service vulnerability via a large HTTP request CVE-2013-0212Mediumglance: OpenStack Glance logs user name and password in cleartext CVE-2013-7489MediumBeaker: Deserialization of Untrusted Data in Beaker

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.