PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-114053Highvllm: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionGHSA-3W55-933P-8PV5Highstrands-agents: Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File StorageGHSA-763V-5PJM-FX36Mediumstrands-agents: Strands Agents: Default FileSessionManager storage is world-readable on shared systemsCVE-2026-114510Highflexible-graphrag: Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from…GHSA-G5FF-637F-6Q2MHighlitellm: LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`GHSA-HHWW-MRG2-969HMediumlitellm: LiteLLM vulnerable to reflected XSS in /sso/debug/callbackGHSA-23MF-XHV8-69C2HighGitPython: GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)GHSA-GQ48-PQFC-9P58MediumGitPython: GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktreeGHSA-F9J4-QGGQ-H239HighGitPython: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command executionGHSA-W8JC-G24H-CRHWHighGitPython: GitPython command wrappers omit unsafe protocol and option checksGHSA-FX3J-RWGX-FR94MediumGitPython: GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule nameGHSA-M64X-33Q8-M5H7HighGitPython: GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity linesCVE-2026-114612Highlitellm: LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyCVE-2026-114613Highmsgpack: MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failureGHSA-J456-XH4H-CPF2Highnltk: NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containmentCVE-2026-96760Criticalauthlib: Authlib: empty signatures validation in JWS JSON deserializationCVE-2026-114608Mediumpylint: Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOMECVE-2026-94624Mediumvllm: vllm p2p never connected zmq_exhaustionCVE-2026-115924Highrembg: Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsCVE-2026-83813LowTwisted: Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address ValidationCVE-2026-114610Mediumfpdf2: fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'CVE-2026-114609Mediumfpdf2: fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled contentCVE-2026-35002Criticalagno: Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`CVE-2026-49272Highoauthlib: OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowCVE-2026-48705Criticalmonai: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo