PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-28231Mediumpi-heif: pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds ReadCVE-2026-25527Mediumchangedetection.io: changedetection.io is vulnerable to unauthenticated static path traversalCVE-2025-67726Hightornado: Tornado: Quadratic DoS via Crafted Multipart ParametersCVE-2025-67725Hightornado: Tornado: Quadratic DoS via Repeated Header CoalescingCVE-2025-67724Mediumtornado: Tornado vulnerable to Header Injection and XSS via reason argumentCVE-2026-12484Highkeras: Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle dataCVE-2026-54559Mediumpocketsphinx: PocketSphinx: Buffer overflows in language and acoustic model loading codeGHSA-MFR4-MQ8W-VMG6Mediumproot-distro: PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container RootfsCVE-2026-54567HighFlask-Reuploaded: Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)CVE-2026-53598Highprompty: Prompty: Arbitrary file read via file reference expansionCVE-2026-54547Highmeta-ads-mcp: meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta TokenCVE-2026-54549Highmeta-ads-mcp: meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` FetchCVE-2026-54552Highsh: sh _uid does not drop supplementary groups (incomplete privilege drop)GHSA-8RQH-VXPR-X77PMediumplone.restapi: plone.restapi: Stored XSS by spoofing mime typeCVE-2026-54503Mediumplone.app.textfield: plone.app.textfield: Stored XSS by spoofing mime type CVE-2026-55646Mediumvllm: vLLM: Speech-to-text upload size limit is enforced after full UploadFile readCVE-2026-55574Highvllm: vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsCVE-2026-54234Highvllm: vLLM has Remote DoS via Invalid Recovered Token ReinjectionCVE-2026-34760Mediumvllm: vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio modelsCVE-2026-59950Highmcp: MCP Python SDK: WebSocket server transport does not support Host/Origin validationCVE-2026-52869Highmcp: MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalCVE-2026-52870Highmcp: MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksCVE-2026-15925Criticalsnowflake-connector-python: Snowflake Connector for Python improperly verifies TLS hostnamesCVE-2025-65720Criticalgpt-researcher: GPT Researcher MCP STDIO configuration allows remote command executionCVE-2026-50271Highddtrace: dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo