PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-15266Mediumtensorflow: Float cast overflow undefined behavior CVE-2020-15265Hightensorflow: Segfault in `tf.quantization.quantize_and_dequantize`CVE-2020-25074Highmoin: MoinMoin vulnerable to remote code execution via cache action CVE-2020-15275Mediummoin: malicious SVG attachment causing stored XSS vulnerability CVE-2020-26214Criticalalerta-server: LDAP authentication bypass with empty password GHSA-2XWP-M7MQ-7Q3RLowaws-encryption-sdk-cli: CLI does not correctly implement strict mode CVE-2020-25659Highcryptography: RSA decryption vulnerable to Bleichenbacher timing vulnerability CVE-2020-15278Mediumred-discordbot: Unauthorized privilege escalation in Mod module GHSA-R82C-J4MQ-5XFWHighbitlyshortener: Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs CVE-2020-15271Criticallookatme: Markdown-supplied Shell Command Execution CVE-2020-26943Mediumblazar-dashboard: Arbitrary Code Execution in blazar-dashboard CVE-2020-26891Mediummatrix-synapse: Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint CVE-2020-15251Mediumsopel_plugins.channelmgnt: Privilege Escalation in Channelmgnt plug-in for Sopel CVE-2020-15239Lowxmpp-http-upload: Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request GHSA-F366-4RVV-95X2Lowcryptoauthlib: Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration CVE-2020-15225Highdjango-filter: Potential DoS with NumberFilter conversion to integer values.CVE-2020-15212Criticaltensorflow: Out of bounds access in tensorflow-lite CVE-2020-15214Criticaltensorflow: Out of bounds write in tensorflow-lite CVE-2020-15213Mediumtensorflow: Denial of service in tensorflow-lite CVE-2020-15210Hightensorflow: Segmentation fault in tensorflow-lite CVE-2020-15211Mediumtensorflow: Out of bounds access in tensorflow-lite CVE-2020-15209Hightensorflow: Null pointer dereference in tensorflow-lite CVE-2020-15208Hightensorflow: Data corruption in tensorflow-lite CVE-2020-15207Mediumtensorflow: Segfault and data corruption in tensorflow-lite CVE-2020-15204Mediumtensorflow: Segfault in Tensorflow

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo