PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-87995Highopen-webui: Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originCVE-2026-87996Highopen-webui: Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderCVE-2026-87997Mediumopen-webui: Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsCVE-2026-87998Highopen-webui: Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionCVE-2026-87999Highopen-webui: Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchCVE-2026-88005Mediumopen-webui: Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeCVE-2026-88000Mediumopen-webui: Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treeCVE-2026-88001Mediumopen-webui: Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsCVE-2026-88002Mediumopen-webui: Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyCVE-2026-59177Highesphome-device-builder: ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesCVE-2026-55073Mediumweasyprint: weasyprint Has Server-Side Request Forgery (SSRF)CVE-2026-54529Mediumsqladmin: SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`CVE-2026-50024Mediumgithacker: GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git serverCVE-2026-84452Highwinml-cli: Windows ML CLI: CORS misconfig enables localhost RCECVE-2026-84382Highhttpx2: HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)CVE-2026-84380Mediumhttpx2: HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generatedCVE-2026-84379Mediumhttpx2: HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headersCVE-2026-84378Mediumhttpx2: HTTPX2: Quadratic SSE line buffering can cause CPU denial of serviceCVE-2026-84381Highhttpcore2: HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxiesCVE-2026-73560Mediumvllm: vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protectionsCVE-2026-81725Mediumnltk: NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocksCVE-2026-80206Highnltk: NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressionsCVE-2026-80205Highnltk: NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressionsCVE-2026-73558Mediumvllm: vLLM: Cross-User Data Leak VulnerabilityCVE-2026-78679MediumGitPython: GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo