PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-53878Mediumdjango: Django: DomainNameValidator permits newline characters that may enable HTTP header injectionCVE-2026-48588Lowdjango: Django: cache middleware may expose private responses when unrelated request cookies are presentCVE-2026-44512Mediumonnx: ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)CVE-2026-49296Mediumapache-airflow: apache-airflow DAG source authorization bypass exposes co-located DAG sourceCVE-2026-49487Mediumapache-airflow: Apache Airflow exposes deferred trigger kwargs in task-instance API responsesCVE-2026-33264Criticalapache-airflow: Apache Airflow allows code execution through unsafe serialized DAG deserializationCVE-2026-48892Mediumapache-airflow: Apache Airflow exposes secrets backend credentials through the Config APICVE-2026-48891Mediumapache-airflow: Apache Airflow exposes unreadable DAG identifiers in the scheduling dependencies graphCVE-2026-48828Mediumapache-airflow: Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables APICVE-2026-55630Lowkiwitcms: Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)CVE-2026-54724Mediumkiwitcms: Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpointCVE-2026-55615Criticallangroid: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring…CVE-2026-55426Highlinuxfabrik-lib: Linuxfabrik Monitoring Plugins have local privilege escalation using embedded commandCVE-2026-54771Highlangroid: Langroid: handle_message() executes user-supplied tool JSON without sender verification CVE-2026-54769Criticallangroid: Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgentCVE-2026-54760Criticallangroid: Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file callsCVE-2026-53759Lowlinuxfabrik-lib: Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databasesCVE-2026-55786Highflyto-core: flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`CVE-2026-55787Highflyto-core: flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfCVE-2026-49452Mediumweasyprint: WeasyPrint has CSS Injection via Presentational HintsCVE-2022-46292Highopenbabel: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)CVE-2026-49297Highapache-airflow-providers-google: Apache Airflow Google provider allows path traversal through GCS object namesCVE-2026-12252Highnltk: NLTK Stanford wrapper classes execute untrusted JAR files without verificationCVE-2026-12481Highkeras: Keras: Lambda deserialization can bypass safe mode and execute codeCVE-2026-49360Highrecce: Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo