PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2021-32807MediumAccessControl: Remote Code Execution via unsafe classes in otherwise permitted modulesCVE-2021-32811HighZope: Remote Code Execution via Script (Python) objects under Python 3GHSA-7F92-RR6W-CQ64Highvyper: Storage corruption due to variables overwritten by re-entrancy locksCVE-2020-7964Mediumsaleor: Missing Authentication for Critical Function in SaleorCVE-2021-25951HighXML2Dict: XML2Dict XML Entity Expansion VulnerabilityCVE-2020-26137Mediumurllib3: CRLF injection in urllib3CVE-2021-33507MediumProducts.CMFCore: Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, PloneCVE-2021-32633HighZope: Remote Code Execution via traversal in TAL expressionsCVE-2021-28359Mediumapache-airflow: Cross-site Scripting in Apache AirflowCVE-2021-31800Criticalimpacket: Path traversal in impacketCVE-2021-32091Mediumlocalstack: Cross-site scripting in LocalStackCVE-2021-32090Criticallocalstack: Command injection in LocalStackCVE-2021-33026MediumFlask-Caching: Deserialization of Untrusted Data in Flask-CachingCVE-2020-13258Mediumcontentful: Cross-site scripting in ContentfulCVE-2020-7655Mediumnetius: HTTP Request Smuggling in netiusCVE-2020-14942Criticaltendenci: Deserialization of Untrusted Data in TendenciCVE-2021-26697Mediumapache-airflow: Improper Authentication in Apache AirflowCVE-2020-13944Mediumapache-airflow: Apache Airflow Cross-site Scripting CVE-2021-32681Mediumwagtail: Cross-site Scripting in wagtailCVE-2021-33511HighPlone: Server-Side Request Forgery in PloneCVE-2021-33510MediumPlone: Server-Side Request Forgery in PloneCVE-2021-33509CriticalPlone: Incorrect Permission Assignment for Critical Resource in PloneCVE-2020-10729Mediumansible: Insufficiently random values in AnsibleCVE-2021-23393MediumFlask-Unchained: Open redirect in Flask-UnchainedCVE-2021-34363Highthefuck: The Fuck Arbitrary File Deletion via Path Traversal

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo