PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-53502Highthumbor: Thumbor has path traversal via post-validation URL decoding bypass in file_loaderCVE-2026-53505Highthumbor: Thumbor proportion filter allows unbounded post-transform resize leading to remote DoSCVE-2026-53504Highthumbor: Thumbor has Regex Denial of Service (ReDoS) in `convolution` filterCVE-2026-53503Highthumbor: Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoSCVE-2026-53501Highthumbor: Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signatureCVE-2026-53500Highthumbor: Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dotCVE-2026-12075Highnltk: Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE…CVE-2026-12061Highnltk: Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regexCVE-2026-12072Highnltk: Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox…CVE-2026-12074Highnltk: Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the…CVE-2026-54706Mediumonionshare-cli: OnionShare follows symlinks in shared directories, allowing unintended disclosure of local filesCVE-2026-54707Mediumonionshare-cli: OnionShare Receive mode writes uploaded files even when file uploads are disabledCVE-2026-67424Highflyto-core: Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationCVE-2026-67428Highflyto-core: Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to…CVE-2026-67426Criticalflyto-core: Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationCVE-2026-67425Highflyto-core: Flyto2 Core: LLM/API keys leak to an attacker-controlled base_urlCVE-2026-67427Highflyto-core: Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylistedCVE-2026-67429Criticalflyto-core: Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)CVE-2026-67435Mediumlinuxfabrik-lib: linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirectCVE-2026-13346Mediumpip: pip would incorrectly handle doubly-encoded package URLs from indexesCVE-2026-54727Highproot-distro: proot-distro has a Container Isolation Bypass via Crafted Restore ArchiveCVE-2026-54574Highproot-distro: `proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar ArchiveGHSA-WCHH-9X6H-7F6PMediummatrix-commander: olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193CVE-2026-50558Mediumpenelope-shell-handler: Penelope unsafe tar extraction allows arbitrary local file write via crafted session archiveCVE-2026-54654Highdatamodel-code-generator: `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo