PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-77248Highmcp-atlassian: MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http…CVE-2026-65829MediumMPXJ.Net: MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readersCVE-2026-61570Highnet.sf.mpxj:mpxj: MPXJ: XXE Vulnerability in MerlinReaderCVE-2026-62364Lowwlc: wlc may disclose API tokens to project-configured URLsCVE-2026-62282Mediumopencve: OpenCVE: Server-Side Request Forgery (SSRF) in notificationsCVE-2026-59991Highpsd-tools: psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometryCVE-2026-59163Criticalmnemosyne-memory: Mnemosyne has JWT signature verification bypass sync server that allows authentication bypassCVE-2026-63349Highanyio: AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsCVE-2026-63374Criticalanyio: AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofingCVE-2026-64847Mediumanyio: AnyIO process-pool workers can block indefinitely on undrained stderrGHSA-39WR-7Q6H-CF68Highlmdeploy: LMDeploy has an SSRF bypassCVE-2026-33625Highlmdeploy: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingCVE-2025-66455Criticallmdeploy: LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.pyCVE-2026-86000Mediumsoupsieve: Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsCVE-2026-85999Mediumsoupsieve: Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)GHSA-XJW9-38CR-6372Highdjust: djust: A template binding inherits a context safety grant it never earned (XSS)GHSA-9395-2G46-RJ3FHighdjust: djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)CVE-2026-86049Highjupyter_server: Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesCVE-2026-69147Mediumvllm: vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationCVE-2026-77401MediumAccessControl: Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functionsCVE-2026-76825HighRestrictedPython: RestrictedPython vulnerable to sandbox escape via string.Formatter field resolutionCVE-2026-85078Mediumsanic: sanic chunked trailer request smuggling allows hidden second request executionCVE-2026-62949Mediumasyncssh: AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONCVE-2026-59823Mediumlitellm: LiteLLM Proxy has server-side request forgery via the `user_config` request parameterCVE-2026-57173Mediumvllm: vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo