PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-4171Criticalcalibreweb: calibre-web is vulnerable to Business Logic Errors CVE-2022-21683Mediumwagtail: Comment reply notifications sent to incorrect users CVE-2021-43831Criticalgradio: Files on the host computer can be accessed from the Gradio interface CVE-2021-44217Mediumcodechecker: Cross-site Scripting in Ericsson CodeChecker CVE-2021-45958Mediumujson: UltraJSON vulnerable to Out-of-bounds Write CVE-2022-21688Highonionshare-cli: Out-of-bounds Read in Onionshare CVE-2022-21689Highonionshare-cli: Denial of Service in Onionshare CVE-2022-21690Mediumonionshare-cli: OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend CVE-2022-21691Mediumonionshare-cli: Improper Access Control in Onionshare CVE-2022-21692Mediumonionshare-cli: Improper Access Control in Onionshare CVE-2022-21693Mediumonionshare-cli: Path traversal in Onionshare CVE-2022-21694Mediumonionshare-cli: Incorrect Permission Assignment for Critical Resource in OnionShare CVE-2022-21695Mediumonionshare-cli: Improper Access Control in Onionshare CVE-2022-21696Mediumonionshare-cli: Username spoofing in OnionShare CVE-2021-21386CriticalAPKLeaks: Improper Neutralization of Argument Delimiters in a Decompiling Package Process in APKLeaks CVE-2022-21699Highipython: Execution with Unnecessary Privileges in ipython GHSA-RCRV-228C-GPRJMediumbitlyshortener: Invalid URL generation in bitlyshortener CVE-2021-44649Mediumdjango-cms: Cross-site Scripting in django-cms CVE-2022-21668Highpipenv: Pipenv's requirements.txt parsing allows malicious index url in comments CVE-2022-22815MediumPillow: Improper Initialization in Pillow CVE-2022-22816MediumPillow: Out-of-bounds Read in Pillow CVE-2022-22817CriticalPillow: Arbitrary expression injection in Pillow CVE-2022-22846Highdnslib: dnslib has DNS reply verification issue CVE-2021-45116HighDjango: Information disclosure in Django CVE-2021-45452MediumDjango: Directory-traversal in Django

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo