PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45360Highapache-airflow: Apache Airflow Vulnerable to Deserialization of Untrusted Data CVE-2026-42358Mediumapache-airflow: Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor CVE-2026-42252Criticalapache-airflow: Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine CVE-2026-41017Mediumapache-airflow: Apache Airflow has a Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2026-41014Mediumapache-airflow: Apache Airflow has a Missing Authorization issue CVE-2026-40961Highapache-airflow: Apache Airflow: Authenticated users can bypass the `is_safe_url` check CVE-2026-40861Mediumapache-airflow: Apache Airflow has a Link Following issue CVE-2026-40963Lowapache-airflow: Apache Airflow has an Improper Authorization issue CVE-2026-45192Mediumapache-airflow: Apache Airflow: Incomplete redaction allowlist exposes secrets in Connection `extra` to read-permitted users CVE-2026-10223Lowhermes-agent: hermes-agent has an Injection issue CVE-2026-10224Mediumhermes-agent: hermes-agent has an Uncontrolled Resource Consumption issue CVE-2026-10222Lowhermes-agent: hermes-agent has an Injection issue CVE-2026-10221Mediumhermes-agent: hermes-agent has an Injection issue CVE-2026-10212LowAstrBot: AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass CVE-2026-10177Lowaider-chat: Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint CVE-2026-10175Lowaider-chat: Aider is vulnerable to Code Injection via editor_coder.run function CVE-2026-47416Criticalpraisonai-platform: praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}CVE-2026-47409Highpraisonai-platform: praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role CVE-2026-47414Highpraisonai-platform: praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)CVE-2026-47406Highpraisonai-platform: praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks CVE-2026-47410Criticalpraisonai-platform: praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is…CVE-2026-47405Highpraisonai-platform: PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership CVE-2026-47399Highpraisonai-platform: PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID CVE-2026-47407Criticalpraisonai-platform: PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation CVE-2026-47408Mediumpraisonai-platform: praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo