PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-12910Mediumllama-index: LlamaIndex Uncontrolled Resource Consumption vulnerability CVE-2024-12909Criticalllama-index-packs-finchat: llama-index-packs-finchat SQL Injection vulnerability CVE-2024-6483Mediumaim: Aim Relative Path Traversal vulnerability CVE-2024-12911Highllama-index: LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions GHSA-W466-2WFC-8G58Highopen-webui: Open WebUI has vulnerable dependency on starlette via fastapi CVE-2024-12778Highaim: Aim Uncontrolled Resource Consumption vulnerability CVE-2024-12720Mediumtransformers: Transformers Regular Expression Denial of Service (ReDoS) vulnerability CVE-2024-12537Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability CVE-2024-12376Highfschat: FastChat Server-Side Request Forgery vulnerability CVE-2024-12534Highopen-webui: Open WebUI Uncontrolled Resource Consumption vulnerability GHSA-564P-RX2Q-4C8VMediumbentoml: BentoML Open Redirect vulnerability CVE-2024-12761HighimaginAIry: imaginAIry Denial of Service (DoS) vulnerability CVE-2024-12704Highllama-index-core: LlamaIndex Improper Handling of Exceptional Conditions vulnerability CVE-2024-12777Mediumaim: Aim vulnerable to Synchronous Access of Remote Resource without Timeout GHSA-HH3J-9M59-P8VCHighbentoml: BentoML vulnerable to Uncontrolled Resource Consumption CVE-2024-12217Mediumgradio: Gradio Path Traversal vulnerability CVE-2024-12215Highkedro: Kedro allows Remote Code Execution by Pulling Micro Packages CVE-2024-12216Highgluoncv: GluonCV Arbitrary File Write via TarSlip CVE-2024-11958Criticalllama-index-retrievers-duckdb-retriever: LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection CVE-2024-11602Highfeast: Feast Cross-Origin Resource Sharing vulnerability CVE-2024-11603Highfschat: FastChat Server-Side Request Forgery vulnerability CVE-2024-11043HighInvokeAI: InvokeAI Uncontrolled Resource Consumption vulnerability CVE-2024-11041Criticalvllm: vLLM Deserialization of Untrusted Data vulnerability CVE-2024-10908Mediumfschat: FastChat open redirect vulnerability CVE-2024-10940Mediumlangchain-core: langchain-core allows unauthorized users to read arbitrary files from the host file system

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo