PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-33175Highoauthenticator: Auth0OAuthenticator has an Authentication Bypass via Unverified Email ClaimsCVE-2026-0545Criticalmlflow: mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorizationCVE-2026-34756Mediumvllm: vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API ServerCVE-2026-5463Criticalpymetasploit3: pymetasploit3 vulnerable to command injection in console.run_module_with_output()CVE-2026-35536Hightornado: Tornado has cookie attribute injection via .RequestHandler.set_cookieCVE-2026-35175Highajenti-panel: Ajenti has an authorization bypass during custom package installationCVE-2026-35171Criticalkedro: Kedro has Arbitrary Code Execution via Malicious Logging ConfigurationCVE-2026-35167Highkedro: Kedro: Path Traversal in versioned dataset loading via unsanitized version stringCVE-2026-35052Mediumdtale: D-Tale: Remote Code Execution through redis/shelf storageCVE-2026-35002Criticalagno: Agno is vulnerable to Eval InjectionGHSA-Q56X-G2FJ-4RJ6Highonnx: ONNX: TOCTOU arbitrary file read/write in save_external_dat CVE-2026-34953Criticalpraisonai: PraisonAI Has Authentication Bypass via OAuthManager.validate_token()CVE-2026-34952Criticalpraisonai: PraisonAI Has Missing Authentication in WebSocket GatewayCVE-2026-34954Highpraisonaiagents: PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URLCVE-2026-34955Highpraisonai: PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandboxCVE-2026-34936Highpraisonai: PraisonAI: SSRF via Unvalidated api_base in passthrough() FallbackCVE-2026-34939Mediumpraisonai: PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()CVE-2026-34934Criticalpraisonai: PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`CVE-2026-34935Criticalpraisonai: PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()CVE-2026-34937Highpraisonaiagents: PraisonAI: Shell Injection in run_python() via Unescaped $() SubstitutionCVE-2026-34938Criticalpraisonaiagents: PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codeCVE-2026-34730Mediumcopier: Copier `_external_data` allows path traversal and absolute-path local file read without unsafe modeCVE-2026-34726Mediumcopier: Copier `_subdirectory` allows template root escape via parent-directory traversalCVE-2026-34591Highpoetry: Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File WriteCVE-2026-34525Mediumaiohttp: AIOHTTP accepts duplicate Host headers

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo