PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-56837Highpraisonai: PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingCVE-2026-56834Highpraisonai: PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storageCVE-2026-56835Highpraisonai: PraisonAI Slack app_mention bypasses configured user/channel authorizationCVE-2026-56836Highpraisonai: PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardCVE-2026-57112Highpraisonaiagents: PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsCVE-2026-56833Highpraisonai: PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalCVE-2026-56832Highpraisonai: PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsCVE-2026-57128Mediumpraisonaiagents: PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointCVE-2026-54386Mediummarimo: marimo contains a reflected cross-site scripting vulnerability in the notebook pageCVE-2026-53869Highhermes-agent: Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validationCVE-2026-53870Mediumhermes-agent: Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)CVE-2026-55450Criticallangflow: Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakCVE-2025-26240Highpdfkit: pdfkit: Path traversal in from_stringCVE-2026-55748Mediumhorizon: OpenStack Horizon RC file generation does not escape special characters in project namesCVE-2026-50203Criticalapache-airflow-providers-sftp: Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directoryCVE-2026-54022Mediumopen-webui: Open WebUI: Any authenticated user can read other users' private notes via Socket.IOCVE-2026-54021Mediumopen-webui: Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameterCVE-2026-54019Mediumopen-webui: Open WebUI: RAG ACL Bypass in Milvus Multitenancy ModeCVE-2026-54018Highopen-webui: Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsCVE-2026-54017Highopen-webui: Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalCVE-2026-54016Mediumopen-webui: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationCVE-2026-54015Mediumopen-webui: Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletionCVE-2026-54014Mediumopen-webui: Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}CVE-2026-54013Highopen-webui: Open WebUI: Stored XSS to Account Takeover via Model Profile Images CVE-2026-54012Highopen-webui: Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo