PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-55540HighPraisonAI: PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinksCVE-2026-55530Mediumpraisonaiagents: praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation toolCVE-2026-55524Highpraisonaiagents: praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)CVE-2026-55534HighPraisonAI: PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent executionCVE-2026-55526Highpraisonaiagents: praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)CVE-2026-55531MediumPraisonAI: PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)CVE-2026-55528Highpraisonaiagents: praisonaiagents: AgentServer declares auth_token but never enforces it on any routeCVE-2026-55529MediumPraisonAI: PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local…CVE-2026-55523Highpraisonaiagents: praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targetsCVE-2026-55522Highpraisonaiagents: PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codeCVE-2026-55525Highpraisonaiagents: praisonaiagents web_crawl vulnerable to SSRF via redirect-followingCVE-2026-54625Mediumdjango-cms: django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)CVE-2026-54623Highdjango-cms: django CMS: Plugin move endpoint allows cyclic reparenting (DoS)CVE-2026-53710Criticalmcp-contextforge-gateway: mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverCVE-2026-71514Lownltk: NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosureCVE-2026-71513Highnltk: NLTK AllowlistUnpickler dotted-name validation bypass allows remote code executionCVE-2026-68508Highhydra-core: Hydra: hydra.utils.instantiate with untrusted config can lead to code executionCVE-2026-61539Criticalxinference: Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsingCVE-2026-72818Highnltk: NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtrackingGHSA-JM5P-837G-RV8GMediumwagtail: Wagtail: Improper restriction handling on Page translation API endpointGHSA-X5CX-W6P2-MXF2Mediumwagtail: Wagtail: Improper permission handling when copying snippetsGHSA-C2XX-CJMH-9Q8FMediumwagtail: Wagtail: Improper restriction handling on descendant collections in Documents and Images APIGHSA-92HV-J533-69WCLowwagtail: Wagtail: Identification of documents by SHA1 hashCVE-2026-61663Mediumdjango-cms: django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffCVE-2026-63003Mediumdjango-cms: django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo