PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-33880Highwebsockets: Observable Timing Discrepancy in aaugustin websockets library CVE-2021-33571HighDjango: Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33203Mediumdjango: Path Traversal in Django CVE-2021-32677Highfastapi: Cross-Site Request Forgery (CSRF) in FastAPI CVE-2019-20916Highpip: Path Traversal in pip CVE-2020-12690Highkeystone: Insufficient Session Expiration in OpenStack Keystone CVE-2021-32052MediumDjango: Header injection possible in Django CVE-2021-33508MediumPlone: Cross-site scripting in Plone CVE-2021-33512MediumPlone: Cross-site scripting in Plone CVE-2021-33513MediumPlone: Cross-site scripting in Plone CVE-2017-8761Lowswift: Temporary urls leaked via logging CVE-2021-28677HighPillow: Uncontrolled Resource Consumption in Pillow CVE-2021-25288HighPillow: Pillow Out-of-bounds Read vulnerability CVE-2021-28678MediumPillow: Insufficient Verification of Data Authenticity in Pillow CVE-2021-28675HighPillow: Pillow denial of service CVE-2021-25287HighPillow: Out-of-bounds Read in Pillow CVE-2021-28676HighPillow: Potential infinite loop in Pillow CVE-2021-32674HighZope: Remote Code Execution via traversal in TAL expressions CVE-2021-32670Mediumdatasette: Reflected cross-site scripting issue in Datasette CVE-2020-17495Highdjango-celery-results: django-celery-results Stores Sensitive Information In Cleartext CVE-2021-31542HighDjango: Path Traversal in Django CVE-2020-13388Criticaljw.util: OS Command Injection in jw.util CVE-2021-26813Highmarkdown2: markdown2 Regular Expression Denial of Service CVE-2021-33038HighHyperKitty: Exposure of sensitive information to an unauthorized actor in HyperKitty CVE-2021-20178Highansible: Insertion of Sensitive Information into Log File in ansible

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo