PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2008-1099Mediummoin: MoinMoin Improper Access Control CVE-2008-1098Mediummoin: MoinMoin Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2008-0782Mediummoin: MoinMoin Directory traversal vulnerabilityCVE-2008-0781Mediummoin: MoinMoin Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2008-0780Mediummoin: MoinMoin Cross-site scripting (XSS) vulnerabilityCVE-2008-0299Highparamiko: Paramiko Unsafe randomness usage may allow access to sensitive informationCVE-2008-0252Highcherrypy: CherryPy Malicious cookies allow access to files outside the session directoryCVE-2008-0164HighPlone: Plone Cross-site request forgery (CSRF)CVE-2007-6740Highpyftpdlib: pyftpdlib vulnerable to allocation of resources without limitsCVE-2007-6741Mediumpyftpdlib: Improper privilege management in pyftpdlibCVE-2007-6736Mediumpyftpdlib: Directory Traversal in pyftpdlibCVE-2007-6739Highpyftpdlib: Improper Input Validation in pyftpdlibCVE-2007-6738Highpyftpdlib: pyftpdlib Use of Insufficiently Random Values of port selection on PASV commandCVE-2007-6737Mediumpyftpdlib: Improper Authentication in pyftpdlibCVE-2007-5741Criticalplone: Plone Arbitrary Code Execution via Unsafe Handling of PicklesCVE-2007-5712HighDjango: Django vulnerable to Denial of Service via i18n middleware componentCVE-2007-5201Mediumduplicity: FTP backend for Duplicity Discloses Passwords to Process ListingCVE-2007-2637Mediummoin: MoinMoin Improper ACL handling for calendars and includesCVE-2007-1405Mediumtrac: Trac Cross-site Scripting (XSS) vulnerabilityCVE-2007-1406Mediumtrac: Trac missing Content-Disposition HTTP headerCVE-2007-0901MediumMoin: MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parametersCVE-2007-0902Mediummoin: MoinMoin Insertion of Sensitive Information into Log FileCVE-2007-0857Mediummoin: MoinMoin Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2007-0405MediumDjango: Django Improper Access ControlCVE-2007-0404HighDjango: Django Arbitrary Code Execution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo