PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-19118HighDjango: Django allows unintended model editing CVE-2019-19275Hightyped-ast: typed-ast Out-of-bounds Read CVE-2019-19274Hightyped-ast: typed-ast Out-of-bounds Read CVE-2019-16766Mediumwagtail-2fa: 2FA bypass in Wagtail through new device path CVE-2019-12417Mediumairflow: Apache Airflow vulnerable to XSS and local file disclosure CVE-2019-17206Criticalrediswrapper: Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts CVE-2019-19010Criticallimnoria: Eval injection in Supybot/Limnoria CVE-2018-21030Mediumnotebook: Cross-site scripting in Jupyter Notebook CVE-2017-18638Highgraphite-web: graphite.composer.views.send_email vulnerable to SSRF CVE-2019-17400Highunoconv: Server-Side Request Forgery in unoconv CVE-2019-16865Highpillow: DOS attack in Pillow when processing specially crafted image files GHSA-67CX-RHHQ-MFHQHighindico: High severity vulnerability that affects indico CVE-2019-14853Highecdsa: ecdsa Denial of Service vulnerability in signature verification and signature malleability CVE-2019-11457Highdjango-crm: Cross-Site Request Forgery in MicroPyramid Django CRM CVE-2019-10751Highhttpie: Open Redirect in httpie CVE-2019-15486Mediumdjango-js-reverse: Cross-site Scripting in django-js-reverse CVE-2019-14751Highnltk: NLTK Vulnerable To Path Traversal CVE-2018-20858Mediumrecommender-xblock: Cross-site scripting in recommender-xblock CVE-2019-14806Highwerkzeug: Pallets Werkzeug Insufficient Entropy CVE-2019-12855Criticaltwisted: Improper Certificate Validation in Twisted CVE-2019-14234CriticalDjango: SQL Injection in Django CVE-2019-10099Highorg.apache.spark:spark-core_2.11: Sensitive data written to disk unencrypted in Spark CVE-2019-14233HighDjango: Django Denial-of-service in strip_tags()CVE-2019-14235HighDjango: Uncontrolled Recursion in Django CVE-2019-14232HighDjango: Django Denial-of-service in django.utils.text.Truncator

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo