PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-21727Hightensorflow: Integer overflow in Tensorflow CVE-2022-21726Hightensorflow: Out of bounds read in Tensorflow CVE-2020-1734Highansible: OS Command Injection in ansible CVE-2021-41495Highnumpy: NumPy NULL Pointer Dereference CVE-2021-41496Mediumnumpy: Buffer Copy without Checking Size of Input in NumPy CVE-2022-21712HighTwisted: Cookie and header exposure in twisted CVE-2022-23580Mediumtensorflow: Abort caused by allocating a vector that is too large in Tensorflow CVE-2022-23581Mediumtensorflow: `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow CVE-2022-22818Mediumdjango: Cross-site Scripting in Django CVE-2022-23833HighDjango: Infinite Loop in Django CVE-2021-44451Highapache-superset: Insufficiently Protected Credentials in Apache Superset CVE-2022-0339Mediumcalibreweb: Server-Side Request Forgery in calibreweb GHSA-F7QW-5FGJ-247XMediumplone.app.contenttypes: Cross-site Scripting and Open Redirect in plone.app.contenttypes CVE-2022-21659MediumFlask-AppBuilder: Observable Response Discrepancy in Flask-AppBuilder CVE-2022-23607Hightreq: Unsafe handling of user-specified cookies in treq CVE-2021-44255Highmotioneye: Unrestricted Upload of File with Dangerous Type in motionEye CVE-2022-0273Highcalibreweb: Incorrect Authorization in calibreweb CVE-2022-0352Mediumcalibreweb: Cross-site Scripting in calibreweb GHSA-8W54-22W9-3G8FMediumProducts.CMFPlone: Cross-site Scripting and Open Redirect in Products.CMFPlone CVE-2022-23599MediumProducts.ATContentTypes: Cross-site Scripting and Open Redirect in Products.ATContentTypes CVE-2021-45230Mediumapache-airflow: Improper Privilege Management in apache-airflow CVE-2022-21697Mediumjupyter-server-proxy: SSRF vulnerability in jupyter-server-proxy CVE-2022-0338Mediumloguru: loguru logs sensitive information CVE-2021-4170Mediumcalibreweb: calibre-web is vulnerable to Cross-site Scripting CVE-2021-4164Highcalibreweb: calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo