PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-59153Highaqt: Anki's local HTTP server does not sufficiently validate requestsGHSA-4XGF-CPJX-PC3JMediumpydantic-settings: pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing…GHSA-F4XH-W4CJ-QXQ8Highlangsmith: LangSmith SDK TracingMiddleware: Arbitrary server-side file readGHSA-4CC2-G9W2-FHF6Mediumzeep: Zeep: Server-Side Request Forgery (SSRF)GHSA-CW6H-FFMH-X6VHMediumaqt: Anki: User scripts in iframes have access to the internal Anki APIGHSA-WVRH-2F4M-924VMediumChatterBot: ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainerGHSA-C795-2G9C-J48MHigheveros: EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_idGHSA-6GQW-JQV7-V88MHighstigmem-node: stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)GHSA-XHV3-Q4XX-349RHighstigmem-node: stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)GHSA-X26H-XMV8-GXF7Highstigmem-node: stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)GHSA-6V7P-G79W-8964Highmsgpack: MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught errorCVE-2026-55447Criticallangflow: Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitCVE-2026-55446Highlangflow: Langflow: Unauthenticated DoS through multipart form boundary file uploadCVE-2026-55423Mediumlangflow: Langflow: Logout button does not clear sessionCVE-2026-55255Highlangflow: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's FlowCVE-2026-55206Mediumpy7zr: py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()CVE-2026-55195Mediumpy7zr: py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizeGHSA-RPJ2-4HQ8-938GHighvcrpy: VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette filesCVE-2026-55837Mediumdbt-mcp: dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform TokensGHSA-P5WC-9W9R-M232Highultimate-sitemap-parser: Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParserGHSA-8823-QG2X-PV9FHighultimate-sitemap-parser: Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size LimitCVE-2026-54911Mediumujson: UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()CVE-2026-55865Mediumpython-liquid: Python Liquid: Infinite loop when parsing malformed `{% case %}` tagsCVE-2026-54528Highjupyterlab-git: jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded DirectoriesCVE-2026-54527Highjupyterlab-git: jupyterlab-git extension: Stored XSS leading to RCE

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo