PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-57148Criticalpraisonai-platform: praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)CVE-2026-57145Criticalpraisonai: PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationCVE-2026-57146Highpraisonai: PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by defaultCVE-2026-57142Highpraisonai: PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yamlCVE-2026-57130Highpraisonaiagents: PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersCVE-2026-57113Highpraisonai: PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionCVE-2026-56839Highpraisonai: PraisonAI Code agent tools fail open without a workspace boundaryCVE-2026-57124Criticalpraisonai: PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command…CVE-2026-57122Highpraisonai: PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)CVE-2026-57121Highpraisonai-platform: PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APICVE-2026-57116Criticalpraisonai: PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocationCVE-2026-57118Criticalpraisonaiagents: PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsCVE-2026-57114Highpraisonai: PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingCVE-2026-57131Criticalpraisonai: PraisonAI: Jobs API exposes agent-execution endpoints with no authentication CVE-2026-57129Highpraisonaiagents: PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalCVE-2026-57127Criticalpraisonai: praisonai: recipe serve auth middleware silently disables itself when no secret is setCVE-2026-57126Highpraisonaiagents: praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSCVE-2026-57125Criticalpraisonai: PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass CVE-2026-57119Highpraisonai: PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs APICVE-2026-57123Criticalpraisonaiagents: PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inCVE-2026-57120Mediumpraisonaiagents: PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderCVE-2026-57115Mediumpraisonaiagents: PraisonAI: SpiderTools redirect-target SSRF protection bypassCVE-2026-57117Highpraisonai: PraisonAI: Compute-bridged file tools allow shell command injectionCVE-2026-56838Highpraisonai: PraisonAI recipe.run_stream skips dangerous-tool policy enforcementCVE-2026-56840Highpraisonai: PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo