PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-54338Mediumjupyterhub: JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed LoginCVE-2026-55099Highicalendar: icalendar has Algorithmic Complexity in EqualityCVE-2026-45019Highchainlit: Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network accessCVE-2026-45018Criticalchainlit: Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code executionCVE-2026-55620Higheml_parser: eml_parser vulnerable to DoS via deeply nested parens in Received headersCVE-2026-55619Mediumeml_parser: eml_parser has parser DoS via deeply nested parentheses in e-mail headersCVE-2026-55618Mediumeml_parser: eml_parser has a URL extraction bypass via HTML entities in URLsGHSA-VWF3-4XXJ-QG6HHighmcp-contextforge-gateway: mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via…CVE-2026-55419Mediumreachy-mini: reachy_mini Allows Unrestricted Upload of File with Dangerous TypeCVE-2026-55585Highqwed: qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`CVE-2026-55571Highdjust: djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated…CVE-2026-55640Criticalnextcloud-mcp-server: nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset (…GHSA-8CP3-QXJ6-PX34Highutcp-http: utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI ConversionCVE-2026-12210Mediumutcp-gql: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket pluginsGHSA-9QHG-99WW-9MQCHighutcp-http: utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the targetCVE-2026-55546Criticalqwed-mcp: qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression InputCVE-2026-55536CriticalPraisonAI: PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 /…CVE-2026-55532HighPraisonAI: PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP…CVE-2026-55533HighPraisonAI: PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secretCVE-2026-55539HighPraisonAI: PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft,…CVE-2026-55527Highpraisonaiagents: praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable…CVE-2026-55541HighPraisonAI: PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedCVE-2026-55535MediumPraisonAI: PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validationCVE-2026-55537HighPraisonAI: PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114CVE-2026-55538HighPraisonAI: PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo