PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53956Mediumrattler_cache: Rattler vulnerable to package cache path traversal via conda package build string CVE-2026-54651Mediumpypdf: pypdf: Possible infinite loop when processing threads/articles in writer CVE-2026-53720Mediumpymonocypher: pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small CVE-2026-49477Highsoupsieve: Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser CVE-2026-49476Highsoupsieve: Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists GHSA-52VM-MXX8-F227Highphantom-audio: Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths CVE-2026-48987Mediumpyload-ng: pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager CVE-2026-48737Mediumpyload-ng: pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs CVE-2026-49471Highserena-agent: Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE GHSA-MXWC-WH95-PW4GMediumtrapster: Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler CVE-2026-49825Highlxml_html_clean: `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes CVE-2026-50127Mediumweblate: Weblate SSRF: outbound URL guard misses some private ranges GHSA-F66Q-9RF6-8795MediumFlask-Security-Too: Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion GHSA-Q855-8RH5-JFGQMediumha-mcp: ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path CVE-2026-53533Mediumaiosmtplib: aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address CVE-2026-34225Mediumopen-webui: Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality CVE-2026-26193Highopen-webui: Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages CVE-2026-26192Highopen-webui: Open WebUI vulnerable to Stored XSS via iFrame in citations model CVE-2025-46719Highopen-webui: Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via…CVE-2025-46571Mediumopen-webui: Open WebUI allows limited stored XSS vila uploaded html file CVE-2026-44512Mediumonnx: ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)CVE-2026-55630Lowkiwitcms: Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)CVE-2026-54724Mediumkiwitcms: Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint CVE-2026-55615Criticallangroid: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring…CVE-2026-55426Highlinuxfabrik-lib: Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.