PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-6WJ5-5PGR-JWQ8Highopen-webui: Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file CVE-2024-7765Highh2o: H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing CVE-2024-7045Mediumopen-webui: Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read CVE-2024-7768Highh2o: H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint CVE-2024-7053Highopen-webui: Open WebUI Vulnerable to a Session Fixation Attack CVE-2024-7760Highaim: Aim vulnerable to Cross-Site Request Forgery CVE-2024-7046Mediumopen-webui: Open WebUI Allows Viewing of Admin Details CVE-2024-7044Mediumopen-webui: Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload CVE-2024-7033Mediumopen-webui: Open WebUI Allows Arbitrary File Write via the `download_model` Endpoint CVE-2024-7039Highopen-webui: Open WebUI Allows Admin Deletion via API Endpoint CVE-2024-6866Mediumflask-cors: Flask-CORS vulnerable to Improper Handling of Case Sensitivity CVE-2024-6851Highaim: Aim Path Traversal vulnerability CVE-2024-6839Mediumflask-cors: Flask-CORS improper regex path matching vulnerability CVE-2024-6854Highh2o: H2O Vulnerable to Arbitrary File Overwrite via File Export CVE-2024-6863Mediumh2o: H2O Vulnerable to Execution of Arbitrary Files CVE-2024-6829Criticalaim: Aim External Control of File Name or Path vulnerability CVE-2024-7036Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability CVE-2024-7043Highopen-webui: Open WebUI Allows Arbitrary File Reading and Deletion CVE-2024-7034Mediumopen-webui: Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint CVE-2024-6825Highlitellm: LiteLLM Vulnerable to Remote Code Execution (RCE)CVE-2024-6844Mediumflask-cors: Flask-CORS allows for inconsistent CORS matching CVE-2024-6982Highlollms: LoLLMS Code Injection vulnerability CVE-2024-6827Highgunicorn: Gunicorn HTTP Request/Response Smuggling vulnerability CVE-2024-6577Mediumtorchserve: TorchServe script references S3 bucket without ensuring ownership or confirming accessibility CVE-2024-6838Mediummlflow: MLflow Uncontrolled Resource Consumption vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.