PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-27975Highaj: Ajenti has potential Remote Code ExecutionCVE-2026-112937Mediumfilelock: filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory nameCVE-2026-112913Lowfilelock: filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its databaseCVE-2026-112907Lowfilelock: filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale breakCVE-2026-113713Mediumvirtualenv: virtualenv: Temporary app-data can leave dangling seed package linksCVE-2026-113717Lowvirtualenv: virtualenv: Pip seeding with download omits wheel digest verificationCVE-2026-113714Lowvirtualenv: virtualenv: Downloaded wheel selection and caching precede verificationCVE-2026-113718Highvirtualenv: virtualenv: Xonsh activation literals depend on the script decoding codecCVE-2026-113720Mediumvirtualenv: virtualenv: Seeded files retain permissions from an older cacheCVE-2026-113723Highvirtualenv: virtualenv: Bash prompt values can change meaning under older compatibility modesCVE-2026-113715Lowvirtualenv: virtualenv: Venv configuration readback can reinterpret path boundariesCVE-2026-113719Mediumvirtualenv: virtualenv: Seed replacement does not contain metadata deletion pathsCVE-2026-115886Mediummlflow: MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsCVE-2026-115883Mediumlanggraph-checkpoint-postgres: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesCVE-2026-112906Mediumfilelock: filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuseCVE-2026-112914Mediumfilelock: filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the…CVE-2026-112940Highfilelock: filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process…CVE-2026-112398Criticalpillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionCVE-2026-114501MediumPillow: Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1GHSA-XMJ3-9GF7-H52WLowsetuptools: setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation DescriptionGHSA-7XGJ-8392-5Q4RMediumfastmcp: FastMCP: Post-transform component authorization is skipped on direct callsGHSA-VQQP-X5QM-5QP4Mediumfastmcp: FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised…CVE-2026-114055Highvllm: vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)CVE-2026-115572Highpypdf: pypdf: Possible long runtimes for repeated references to the same missing objectCVE-2026-115585Highpypdf: pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo