PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-52303Mediumaiohttp: aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method CVE-2024-47533Criticalcobbler: cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes CVE-2024-11319Mediumdjango-cms: django CMS Cross-Site Scripting (XSS)CVE-2023-6110Mediumpython-openstackclient: OpenStack improperly deletes access rules CVE-2021-3988Mediumcalibreweb: Cross-site Scripting (XSS) - DOM in janeczku/calibre-web CVE-2021-3987Mediumcalibreweb: Improper Access Control in janeczku/calibre-web CVE-2021-3986Mediumcalibreweb: Generation of Error Message Containing Sensitive Information in janeczku/calibre-web CVE-2024-45784Highairflow: Apache Airflow: Sensitive configuration values are not masked in the logs by default CVE-2024-52524Mediumgiskard: ReDoS in giskard's transformation.py (GHSL-2024-324)CVE-2024-4311Mediumzenml: Missing ratelimit on passwrod resets in zenml CVE-2023-34049Mediumsalt: Salt preflight script could be attacker controlled CVE-2024-43598Highlightgbm: LightGBM Remote Code Execution Vulnerability CVE-2024-11079Lowansible-core: Ansible-Core vulnerable to content protections bypass CVE-2024-27530Highpywasm3: pywasm3 contains a Use-After-Free in ForEachModule CVE-2024-27528Highpywasm3: pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution CVE-2024-27529Mediumgithub.com/shareup/wasm-interpreter-apple: wasm3 uncontrolled memory allocation vulnerability CVE-2024-50378Lowapache-airflow: Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data CVE-2024-51998Highchangedetection.io: changedetection.io path traversal using file URI scheme without supplying hostname CVE-2024-51751Mediumgradio: Gradio vulnerable to arbitrary file read with File and UploadButton components CVE-2024-10082Criticalcodechecker: codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service CVE-2024-10081Criticalcodechecker: codechecker vulnerable to authentication bypass when using specifically crafted URLs CVE-2024-9902Mediumansible-core: ansible-core Incorrect Authorization vulnerability CVE-2024-51493MediumOctoPrint: OctoPrint has API key access in settings without reauthentication CVE-2024-49377MediumOctoPrint: OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates CVE-2024-48061Mediumlangflow: Langflow vulnerable to remote code execution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.