PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-66004Mediumblender-mcp: BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writesCVE-2026-66007Mediumdatasets: Hugging Face Datasets folder-based builders allow path traversal through file_name metadataCVE-2026-59939Highhttplib2: httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response HandlingCVE-2026-59935Highpypdf: pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)CVE-2026-59936Highpypdf: pypdf: Possible infinite loop for not terminated inline imagesCVE-2026-59937Mediumpypdf: pypdf: Possible long runtimes for repeated malformed cross-reference entries CVE-2026-59938Mediumpypdf: pypdf: Possible large memory usage for wrong image dimensionsCVE-2026-73417Highjupyterlab: JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)CVE-2026-73415Highjupyterlab: JupyterLab: Image viewer allows XSS when opening malicious image in new browser tabCVE-2026-73416Mediumjupyterlab: JupyterLab: PyPI extension blocklist package-name canonicalization bypassGHSA-H5V5-8746-G7MMMediumjupyterlab: JupyterLab PluginManager lock-rule enforcement bypassGHSA-WHVH-WF3X-G77JLowjupyterlab: JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)CVE-2026-59821Lowlitellm: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVE-2026-59822Highlitellm: LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59819Lowlitellm: LiteLLM: Local file read via request-supplied OIDC file referencesCVE-2026-59820Mediumlitellm: LiteLLM: Arbitrary file write via path traversal in Skills archive extractionCVE-2026-67322HighGitPython: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URLCVE-2026-67323HighGitPython: GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via…CVE-2026-67325HighGitPython: GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklistGHSA-V396-V7Q4-X2QJHighGitPython: GitPython unsafe clone option gate bypass through joined short optionsCVE-2026-59886Highpyasn1: pyasn1: Uncontrolled resource consumption when converting decoded REAL valuesCVE-2026-59885Highpyasn1: pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of serviceCVE-2026-59884Highpyasn1: pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsCVE-2026-59890Mediumsetuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+CVE-2026-64825Criticalhomeassistant: Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo