PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-11042CriticalInvokeAI: InvokeAI Arbitrary File Deletion vulnerability CVE-2024-10907Highfschat: FastChat Uncontrolled Resource Consumption vulnerability CVE-2024-10912Highfschat: FastChat Denial of Service vulnerability CVE-2024-10901Criticaldbgpt: DB-GPT Arbitrary File Write vulnerability CVE-2024-10831Criticaldbgpt: DB-GPT Absolute Path Traversal vulnerability CVE-2024-10821HighInvokeAI: InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`CVE-2024-10835Criticaldbgpt: DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users CVE-2024-10830Highdbgpt: DB-GPT Path Traversal vulnerability CVE-2024-10713Highhyperlpr3: HyperLPR Denial of Service vulnerability CVE-2024-10833Criticaldbgpt: DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload CVE-2024-10829Highdbgpt: DB-GPT Uncontrolled Resource Consumption vulnerability CVE-2024-10902Criticaldbgpt: DB-GPT vulnerable to Arbitrary File Upload with Path Traversal CVE-2024-10906Highdbgpt: DB-GPT vulnerable to Cross-Site Request Forgery CVE-2024-10550Highh2o: H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint CVE-2024-10648Highgradio: Gradio Vulnerable to Arbitrary File Deletion CVE-2024-10553Criticalh2o: H2O Deserialization of Untrusted Data Vulnerability CVE-2024-10572Highh2o: H2O Vulnerable to Denial of Service (DoS) and File Write CVE-2024-10624Highgradio: Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request CVE-2024-10569Highgradio: Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb CVE-2024-10549Highh2o: H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint CVE-2024-10188Highlitellm: LiteLLM Vulnerable to Denial of Service (DoS)CVE-2024-10110Highaim: Aim Vulnerable to Denial of Service (DoS)CVE-2024-10190Criticalhorovod: Horovod Vulnerable to Command Injection CVE-2025-29783Criticalvllm: vLLM Allows Remote Code Execution via Mooncake Integration CVE-2025-29770Mediumvllm: vLLM denial of service via outlines unbounded cache on disk

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo