PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-8596Highsagemaker: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve pathCVE-2026-46432Highlmdeploy: LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initializationCVE-2026-46486Mediummvt: Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processingCVE-2026-48989Highwindows-mcp: Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORSCVE-2026-2734Mediummlflow: MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checksGHSA-MW8F-W6P8-XRF4Highwger: wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=NoneCVE-2026-45804Highdiffusers: Diffusers: TOCTOU Trust Remote Code BypassCVE-2026-27173Highapache-airflow-providers-cncf-kubernetes: Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsCVE-2026-42526Mediumapache-airflow-providers-amazon: Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backendsCVE-2026-46374Highsqlfluff: SQLFluff: Uncontrolled Resource Consumption in SQLFluff ParserCVE-2026-46373Highsqlfluff: SQLFluff: Recursive Stack Overflow in ParserCVE-2026-46338Mediumpymdown-extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_pathCVE-2026-31072Criticalapscheduler: APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure DeserializationCVE-2026-45739Lowstrawberry-graphql: Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsCVE-2026-45758Criticalguardrails-ai: Malicious code in guardrails-ai 0.10.1 (supply chain compromise)CVE-2025-51427Highmodelscope: ModelScope is vulnerable to arbitrary code injection via a crafted moduleCVE-2026-45568Criticalzrok: rok Python ProxyShare can be used as an SSRF proxy through absolute URL pathsCVE-2026-45409Mediumidna: Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fixCVE-2026-2611Criticalmlflow: MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command ExecutionCVE-2026-4137Highmlflow: MLFlow Creates a Temporary File With Insecure Permissions CVE-2026-45554Mediumnicegui: NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routesCVE-2026-45553Highnicegui: NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()CVE-2026-45829Criticalchromadb: ChromaDB Python project has a pre-authentication code injection vulnerabilityGHSA-WX9M-WX4F-4CMGCriticalmistralai: Malicious dropper in mistralai 2.4.6 PyPI packageCVE-2026-45727Highcloakbrowser: CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo