PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-54011Highopen-webui: Open WebUI: Stored XSS in Mermaid Markdown PreviewCVE-2026-54010Highopen-webui: Open WebUI: Forged chat-file link allows cross-user file read and deletionCVE-2026-54009Mediumopen-webui: Open WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldCVE-2026-54008Highopen-webui: Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)CVE-2026-54007Highopen-webui: Open WebUI: Cross-origin postMessage confirmation bypass via action:submitCVE-2026-54006Mediumopen-webui: Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendarCVE-2026-54233Mediumvllm: vLLM: OOM Denial of Service via Audio Decompression BombCVE-2026-54236Mediumvllm: vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic routerCVE-2026-53923Mediumvllm: vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant servingCVE-2026-12491Mediumvllm: vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and ExpectationsCVE-2026-54235Mediumvllm: vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernelsCVE-2026-49468Criticallitellm: LiteLLM: Authentication Bypass via Host Header InjectionGHSA-69QJ-PVH9-C5WGHighyt-dlp: yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlpCVE-2026-46448Mediumnova: OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraintsCVE-2026-50574Highyt-dlp: yt-dlp: Arbitrary code execution via manifest downloads with aria2cCVE-2026-53755Highcrawl4ai: Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkGHSA-7CX2-G3H9-382PHighcrawl4ai: Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker serverGHSA-F989-C77F-R2CQHighcrawl4ai: Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolutionCVE-2026-53754Highcrawl4ai: Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)CVE-2026-50023Highyt-dlp: yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)CVE-2026-50019Mediumyt-dlp: yt-dlp: File Downloader cookie leak with curl CVE-2026-56266Criticalcrawl4ai: Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS ExecutionCVE-2026-53753Criticalcrawl4ai: Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APICVE-2026-48746Criticalvllm: vLLM: OpenAI auth bypassCVE-2026-48520Mediumlangflow: Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo