PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-10903Highcryptography: PyCA Cryptography vulnerable to GCM tag forgery CVE-2018-14505Criticalmitmproxy: Mitmweb in mitmproxy allows DNS Rebinding attacks CVE-2014-3539Criticalrope: Code injection in rope CVE-2016-4009Criticalpillow: Pillow Integer overflow in ImagingResampleHorizontal CVE-2016-0775HighPillow: Pillow Buffer overflow in ImagingFliDecode CVE-2016-2533Highpillow: Pillow buffer overflow in ImagingPcdDecode CVE-2016-9189Mediumpillow: Pillow Integer overflow in Map.c CVE-2016-0740Mediumpillow: Pillow Buffer overflow in ImagingLibTiffDecode CVE-2012-2921Highfeedparser: feedparser denial of service vulnerability CVE-2011-1949MediumPlone: Plone Cross-site Scripting vulnerability CVE-2011-0697MediumDjango: Cross-site scripting in django CVE-2011-1950Highplone.app.users: Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts CVE-2010-3082MediumDjango: Cross-site scripting in django CVE-2011-4136MediumDjango: Session manipulation in Django CVE-2012-5503HighPlone: Plone allows remote attackers to read hidden folder contents CVE-2011-0698CriticalDjango: Directory traversal in Django CVE-2011-1157Mediumfeedparser: feedparser Cross-site Scripting vulnerability CVE-2012-5489HighZope2: Plone and Zope2 vulnerable to unauthorized access to restricted attributes CVE-2011-2528HighPlone: High severity vulnerability that affects Plone and Zope2 CVE-2010-4535Mediumdjango: Improper date handling in Django CVE-2012-5486HighZope2: HTTP header injection in Plone and Zope2 CVE-2011-1158Mediumfeedparser: feedparser Cross-site Scripting vulnerability CVE-2010-4534Highdjango: Improper query string handling in Django CVE-2011-4137HighDjango: Denial of service in django CVE-2010-1104MediumZope2: Moderate severity vulnerability that affects Zope2

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo