PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2006-5878Hightrac: Edgewall Trac Cross-site request forgery (CSRF) vulnerability CVE-2006-4684Mediumzope2: Zope allows remote attackers to read arbitrary files CVE-2006-4249MediumPlone: Plone allows a user to masquerade as a group CVE-2006-4247HighPlone: Plone allows anonymous users to reset any users password through the web via Password Reset Tool CVE-2006-3695Hightrac: Trac reStructuredText breach of privacy and denial of service vulnerability CVE-2006-3458LowZope2: Zope allows local users to read arbitrary files CVE-2006-2458Mediumextractor: Libextractor multiple heap-based buffer overflows CVE-2006-1711Mediumplone: Plone allows remote users to modify arbitrary portraits CVE-2006-0847Highcherrypy: CherryPy Directory traversal vulnerability CVE-2005-4644Mediumtrac: Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability CVE-2005-2875HighPy2Play: Py2Play Unpickles Untrusted Objects CVE-2005-1632Highcheetah: Cheetah Path Search Order Hijacking CVE-2002-0687Mediumzope: Zope Server vulnerable to DoS via header injection CVE-2002-0688Highzope: ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions CVE-2002-0170Highzope: Zope does not properly verify the access for objects with proxy roles CVE-2000-1211Highzope: Zope does not properly perform security registration for legacy names CVE-2000-1212Mediumzope: Zope allows attackers to modify raw image and file data CVE-2000-0725Highzope: Zope does not properly restrict access to the getRoles method CVE-2000-0062Highzope: Zope DTML implementation Improper Authentication CVE-2004-1462HighMoin: MoinMoin Improper Access Control CVE-2004-1463HighMoin: MoinMoin Improper Privilege Management CVE-2004-1444MediumRoundup: Roundup Directory traversal vulnerability CVE-2004-1177Mediummailman: mailman Cross-site scripting (XSS) vulnerability CVE-2004-0708HighMoin: MoinMoin allows administrative access CVE-2004-0412Mediummailman: Mailman Sensitive Information Disclosure

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo