PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2011-4140HighDjango: Django Cross-Site Request Forgery vulnerability CVE-2012-6661HighZope2: Plone and Zope2 do not reseed pseudo-random number generator CVE-2011-0696HighDjango: Cross-site request forgery in Django CVE-2012-5507HighZope2: Plone and Zope2 affected by Race Condition CVE-2011-1948MediumProducts.PasswordResetTool: Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool CVE-2011-4462HighPlone: Plone Denial of Service vulnerability CVE-2011-4103Criticaldjango-piston: Django-piston and Django-tastypie do not properly deserialize YAML data CVE-2011-1156Highfeedparser: feedparser denial of service vulnerability CVE-2009-0662MediumProducts.PlonePAS: Moderate severity vulnerability that affects Products.PlonePAS CVE-2017-16763Criticalconfire: Unsafe deserialization in confire CVE-2017-1000246Mediumpysaml2: Pysaml2 improperly initializes encryption vector CVE-2016-10149Highpysaml2: Pysaml2 does not sanitize XML responses CVE-2017-2810Criticaltablib: Loaded Databook of Tablib prone to python insertion resulting in command execution CVE-2017-0359Criticaldiffoscope: Diffoscope may write to arbitrary locations due to an untrusted archive CVE-2017-1000433Criticalpysaml2: pysaml2 Improper Authentication vulnerability CVE-2017-16618Criticalowlmixin: Unsafe deserialization in owlmixin CVE-2017-16615CriticalMLAlchemy: Unsafe deserialization in MLAlchemy CVE-2017-7235Highcfscrape: cfscrape Improper Input Validation vulnerability CVE-2017-6591Mediumdjango-epiceditor: django-epiceditor vulnerable to XSS in form field CVE-2017-1000001HighFedMsg: FedMsg not properly completing message validation CVE-2017-9462Highmercurial: Mercurial has Incorrect Permission Assignment for Critical Resource CVE-2017-1002150Mediumpython-fedora: python-fedora vulnerable to an open redirect resulting in loss of CSRF protection CVE-2017-16764Criticaldjango_make_app: django_make_app is vulnerable to Code Injection CVE-2017-2809Highansible-vault: Code injection in ansible CVE-2017-2592Highoslo.middleware: oslo.middleware Information Disclosure vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.