PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-46745Mediumapache-airflow-providers-fab: Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerabilityCVE-2026-45361Highapache-airflow-providers-google: Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by defaultCVE-2026-2651Criticalmlflow: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabledCVE-2026-4372Hightransformers: HuggingFace transformers vulnerable to remote code executionCVE-2026-9369Lowhermes-agent: hermes-agent has an Incorrect ComparisonCVE-2026-9368Mediumhermes-agent: hermes-agent has a sandbox issueCVE-2026-9366Mediumhermes-agent: hermes-agent has an Injection issueCVE-2026-9353Mediumhermes-agent: hermes-agent has an Injection issueCVE-2026-3515Highprefect: Prefect has an Argument Injection issueGHSA-GGXF-37HM-9WQFMediuminstagrapi: instagrapi: Unsafe signup challenge path handling in instagrapiCVE-2026-47157Mediumaiograpi: aiograpi: Unsafe signup challenge path handlingCVE-2026-46715MediumFlask-Security-Too: Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptanceCVE-2026-70646Highaiosend: aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handlerCVE-2026-46703Criticalboxlite: Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the HostCVE-2026-46695Criticalboxlite: BoxLite: Permission Bypass Allows Modification of Read-Only FilesCVE-2026-46678Mediumpydantic-ai: Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)CVE-2026-46645Mediumsqladmin: SQLAdmin: Authorization Bypass on `ajax_lookup`CVE-2026-47102Highlitellm: LiteLLM allows a user to modify their own user_role via the /user/update endpointCVE-2026-47101Highlitellm: LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permitCVE-2026-46556Mediumflaskbb: FlaskBB: SSRF in get_image_info() via unrestricted avatar URLCVE-2026-46561Mediumpyload-ng: pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls APICVE-2026-46517Highlmdeploy: lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-outCVE-2026-46497Lowcrawlee: Crawlee for Python: SSRF via sitemap-derived URLsCVE-2026-48207Criticalpyfory: Apache Fory PyFory Deserialization of Untrusted Data CVE-2026-8597Mediumsagemaker: Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo