PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-112896HighPillow: Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readCVE-2026-112895Highpillow: Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)CVE-2026-112395Mediumpillow: Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)CVE-2026-112404HighPillow: Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsCVE-2026-112403CriticalPillow: Pillow: Heap buffer overflow in ImagingJpegDecodeCVE-2026-111748Mediumaiohttp: AIOHTTP: Absolute-form request targets can spoof Request.schemeCVE-2026-111749Lowaiohttp: AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesCVE-2026-111065Mediumaiohttp: AIOHTTP: Connector pool exhaustion via Max-Age overflowCVE-2026-111750Mediumaiohttp: AIOHTTP: Pure-Python parser request smugglingCVE-2026-111066Highaiohttp: AIOHTTP: File descriptor exhaustion in multipart requestsGHSA-HQ85-5CPJ-MR62Criticaluv: uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromisedGHSA-6Q48-6C7W-9GW2Criticalcertifi: certifi bundles emSign root CAs with compromised intermediate CA keysCVE-2026-53995Highmlflow: MLflow FileStore trace IDs allow path traversal and arbitrary file writesCVE-2026-111064Highaiohttp: aiohttp server lacks an initial request/header timeoutCVE-2026-111063Mediumaiohttp: AIOHTTP: Secure attribute not enforced for shared cookieGHSA-2G87-PP6C-29X5Highaiohttp: aiohttp: Multiple instances of excessive or unbounded memory/CPU useCVE-2026-111059Mediummercury: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLCVE-2026-111057Criticalmercury: Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassGHSA-PCC4-RVHR-2PR8Mediumgraphifyy: Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repoCVE-2026-111058Criticalmercury: Mercury: Unauthenticated Remote Code Execution via /api/kernelsCVE-2026-108372Highloopx: LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown filesCVE-2026-105192Criticallmcache: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportCVE-2026-96620Criticalclaude-agent-sdk: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionCVE-2026-68549LowClickMigrate: ClickMigrate has Path Traversal in "revision -m" argumentCVE-2026-102682Mediumpipecat-ai: Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo