PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-112936Mediumfilelock: filelock: ReadWriteLock follows a symlink at the lock path into SQLiteCVE-2026-112938Mediumfilelock: filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local…CVE-2026-112934Mediumfilelock: filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its…CVE-2026-112935Mediumfilelock: filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersCVE-2026-118667Mediumlanggraph-sdk: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsCVE-2026-58273Highrucio: rucio has an Authorization Bypass on REST API endpoint for signing URLsCVE-2026-116690Highmlflow: MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceCVE-2026-116691Mediummlflow: MLflow CrewAI autologging records LLM provider API keys in logged trace spansCVE-2026-116692Criticalmlflow: MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed…CVE-2026-116684Mediummcp: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverCVE-2026-116694Mediumopentelemetry-propagator-jaeger: OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagationCVE-2026-116685Mediummcp: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesCVE-2026-116686Mediummcp: Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasGHSA-WF6J-7HVR-GR93Highhydra-core: Hydra legacy target blacklist permits unsafe PyYAML loadingCVE-2026-114616HighAuthlib: Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)CVE-2026-114620Mediumauthlib: Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFCVE-2026-114617Mediumauthlib: Authlib: ID token can disable its own nonce validation via the nonce_supported claimCVE-2026-114618Mediumauthlib: Authlib: Default JWT bearer grant accepts assertions for the wrong audienceCVE-2026-114619Mediumauthlib: Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensCVE-2026-114615Highauthlib: Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysCVE-2026-114614Lowauthlib: Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback…CVE-2026-114605Highdnspython: dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-116588Highddtrace: Datadog dd-trace-py: ReDoS in URL query string obfuscationCVE-2026-116589Highddtrace: Datadog dd-trace-py: IAST instrumentation can lead to application DOSCVE-2026-106435Highpymongo: MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo