PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-41952Mediummatrix-synapse: Uncontrolled Resource Consumption in Matrix Synapse CVE-2022-24798Highirrd: Improper Removal of Sensitive Information Before Storage or Transfer in irrd CVE-2022-25598Highorg.apache.dolphinscheduler:dolphinscheduler: Uncontrolled Resource Consumption in Apache DolphinScheduler CVE-2022-22941Highsalt: SaltStack Salt Permissions Bypass CVE-2022-22935Lowsalt: SaltStack Salt Improper Authentication via Man in the Middle Attack CVE-2022-22934Highsalt: SaltStack Improper Verification of Cryptographic Signature CVE-2022-22936Highsalt: SaltStack Salt Authentication Bypass by Capture-replay CVE-2022-0315Highhorovod: Use of insecure temporary file in Horovod CVE-2022-24776MediumFlask-AppBuilder: Open Redirect in Flask-AppBuilder CVE-2022-24757Highjupyter-server: Insertion of Sensitive Information into Log File in Jupyter notebook CVE-2022-25568Highmotioneye: MotionEye allows attackers to access sensitive information CVE-2021-4180Mediumtripleo-heat-templates: Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates CVE-2022-26184Criticalpoetry: Poetry before v1.1.9 contains Untrusted Search Path CVE-2022-24766Criticalmitmproxy: Insufficient Protection against HTTP Request Smuggling in mitmproxy CVE-2022-24302Highparamiko: Race Condition in Paramiko CVE-2022-21822Highnvflare: Allocation of Resources Without Limits or Throttling in nvflare CVE-2022-24770Highgradio: Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging CVE-2022-24761Highwaitress: HTTP Request Smuggling in waitress CVE-2021-29607Mediumtensorflow: Incomplete validation in `SparseSparseMinimum`CVE-2021-23556Mediumguake: Command injection in guake CVE-2021-20180Mediumansible: Insertion of Sensitive Information into Log File in ansible CVE-2022-0959Mediumpgadmin4: pgAdmin 4 Path Traversal vulnerability CVE-2022-27193Mediumcvrf2csaf: XML External Entities Vulnerability in CVRF-CSAF-Converter CVE-2022-0430Mediumhttpie: Exposure of Sensitive information in httpie CVE-2021-45848Highnicotine-plus: Nicotine+ DoS on Null Character in Download Request

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.