PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-69112Mediumaccelerate: Accelerate path traversal and denial of service via sharded checkpoint weight_map entriesCVE-2026-68871Mediumapache-airflow-providers-yandex: Apache Airflow Yandex Lockbox backend allows cross-team secret disclosureCVE-2026-12570Mediumkeras: Keras model loading is vulnerable to denial of service through HDF5 shape bombsCVE-2026-12372Lownltk: NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hostsCVE-2026-71870Mediumpypdf: pypdf: Possible large memory usage for large /ToUnicode streamsCVE-2026-71852Mediumpypdf: pypdf: Possible long runtimes/large memory usage for large CID font width rangesCVE-2026-67422Highpymdown-extensions: pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processorsCVE-2026-76220HighGitPython: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command executionGHSA-JM78-9FVV-MHGRHighGitPython: GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)CVE-2026-76222HighGitPython: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPythonCVE-2026-76217MediumGitPython: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()CVE-2026-76218HighGitPython: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooksCVE-2026-76219HighGitPython: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwriteCVE-2026-12261Mediumnltk: NLTK downloader allows cross-package resource and model poisoningCVE-2026-71554Mediumh2: h2: Duplicate Host header could facilitate request smugglingCVE-2026-18654Mediumawscli: AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commandsCVE-2026-71433Mediumlanggraph-checkpoint-postgres: LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storesCVE-2026-71211Highmlflow: MLflow AI Gateway permits SSRF through an unvalidated api_baseCVE-2026-70494Highopen-webui: Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderCVE-2026-70493Mediumopen-webui: Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophicallyCVE-2026-70492Highopen-webui: Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesCVE-2026-70491Mediumopen-webui: Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsCVE-2026-70490Mediumopen-webui: Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role checkCVE-2026-70489Mediumopen-webui: Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingCVE-2026-54020Mediumopen-webui: Open WebUI: DNS Rebinding SSRF Bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo