PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-1000111Mediumtwisted: Forced Browsing in Twisted CVE-2020-7212Highurllib3: Uncontrolled Resource Consumption in urllib3 CVE-2021-26722Mediumoncall: LinkedIn Oncall vulnerable to Cross-Site Scripting GHSA-JGPV-4H4C-XHW3Mediumpillow: Uncontrolled Resource Consumption in pillow CVE-2020-1733Lowansible: Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2019-14905Highansible: Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in…CVE-2020-10691Mediumansible: Path Traversal in Ansible CVE-2019-14904Highansible: OS Command Injection and Improper Input Validation in ansible CVE-2020-14365Mediumansible: Improper Verification of Cryptographic Signature in ansible CVE-2020-1746Mediumansible: Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2020-1737Highansible: Path Traversal in Ansible CVE-2019-20477Criticalpyyaml: Deserialization of Untrusted Data in PyYAML CVE-2020-17526Highapache-airflow: Incorrect Session Validation in Apache Airflow CVE-2020-17515Mediumapache-airflow: Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944 CVE-2020-29651Highpy: py vulnerable to Regular Expression Denial of Service CVE-2020-29456Mediumpapermerge: Cross-site scripting in papermerge CVE-2021-20270HighPygments: Infinite Loop in Pygments CVE-2021-25925Mediumsickrage: Cross-site scripting in SiCKRAGE CVE-2021-25926Mediumsickrage: Cross-site scripting in sickrage CVE-2020-17446Criticalasyncpg: Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer CVE-2020-28724Mediumwerkzeug: Open Redirect in werkzeug CVE-2021-29421Highpikepdf: Improper Restriction of XML External Entity Reference in pikepdf CVE-2020-27589Highblackduck: Improper Certificate Validation in blackduck CVE-2020-1747Criticalpyyaml: Improper Input Validation in PyYAML CVE-2020-35678Mediumautobahn: Open Redirect in autobahn

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo