PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2014-1933MediumPillow: Pillow Temporary file name leakage CVE-2018-21233Hightensorflow: Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.CVE-2020-11054Lowqutebrowser: Incorrect Provision of Specified Functionality in qutebrowser CVE-2020-11037Mediumwagtail: Potential Observable Timing Discrepancy in Wagtail CVE-2019-12398Mediumapache-airflow: XSS in Apache Airflow CVE-2020-5390Highpysaml2: Improper Verification of Cryptographic Signature in PySAML2 CVE-2019-1000007Highaioxmpp: Depth counting error in guard() leading to multiple potential security issues in aioxmpp CVE-2020-11888Mediummarkdown2: XSS in python-markdown2 CVE-2020-11010Mediumtortoise-orm: SQL injection in Tortoise ORM CVE-2020-11001Mediumwagtail: Possible XSS attack in Wagtail CVE-2019-19911Highpillow: Uncontrolled Resource Consumption in Pillow CVE-2020-5313HighPillow: Out-of-bounds Read in Pillow CVE-2019-14859Criticalecdsa: Improper Verification of Cryptographic Signature in Pure-Python ECDSA CVE-2020-10108CriticalTwisted: Improper Input Validation in Twisted CVE-2020-10109CriticalTwisted: HTTP Request Smuggling in Twisted CVE-2020-6817Highbleach: regular expression denial-of-service (ReDoS) in Bleach GHSA-MR6R-MVW4-736GLowvyper: Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used CVE-2020-5252Mediumsafety: Malicious package may avoid detection in python auditing CVE-2020-6816Mediumbleach: Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag CVE-2020-5262Criticaleasybuild-framework: GitHub personal access token leaking into temporary EasyBuild (debug) logs CVE-2020-10571Criticalpsd-tools: Potential buffer overflow in psd-tools CVE-2020-5240Mediumwagtail-2fa: 2FA bypass through deleting devices in wagtail-2fa CVE-2009-5042Criticaldocutils: python-docutils allows insecure usage of temporary files CVE-2019-18874Highpsutil: Double Free in psutil CVE-2019-10138Highnovajoin: Improper Access Control in novajoin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.