PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-10156Mediumansible: Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2019-13611Highpython-engineio: python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2018-19800Criticalaubio: aubio Buffer Overflow vulnerability CVE-2018-19802Highaubio: Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function CVE-2018-19801Highaubio: Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank CVE-2019-1010268Criticalladon: Improper Restriction of XML External Entity Reference in ladon CVE-2019-1010142Highscapy: Infinite Loop in scapy CVE-2019-1010083Highflask: Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage CVE-2019-1010017Highpython-libnmap: XML Injection in python-libnmap CVE-2019-1020005Mediuminvenio-communities: Cross-site Scripting in invenio-communities CVE-2019-1020019Mediuminvenio-previewer: Cross-site Scripting in invenio-previewer CVE-2019-1020003Mediuminvenio-records: Cross-site scripting invenio-records CVE-2019-1020006Mediuminvenio-app: Invenio-App vulnerable to host header injection attack CVE-2017-11427Highpython-saml: Python-saml allows manipulation of SAML data without invalidation of cryptographic signature CVE-2016-6581Highhpack: HPACK Denial of Service vulnerability (HPACK Bomb)CVE-2015-5306Criticalpython-ironic-inspector-client: Injection vulnerability that affects ironic-discoverd CVE-2015-5143Highdjango: Django Denial-of-service by filling session store CVE-2019-16791Highpostfix-mta-sts-resolver: postfix-mta-sts-resolver Algorithm Downgrade vulnerability CVE-2019-12781MediumDjango: Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS CVE-2019-13177Criticaldjango-rest-registration: Improper Verification of Cryptographic Signature in django-rest-registration CVE-2019-12308MediumDjango: Django Cross-site Scripting in AdminURLFieldWidget CVE-2019-12387Mediumtwisted: Twisted CRLF Injection CVE-2019-12761Highpyxdg: Code Injection in PyXDG CVE-2019-12300Criticalbuildbot: Improper Authentication in Buildbot CVE-2018-7577Hightensorflow: Improper Input Validation in Google TensorFlow

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.