PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-48050Highagentscope: AgentScope uses `eval`CVE-2024-48052Mediumgradio: gradio Server Side Request Forgery vulnerability CVE-2024-51734MediumAccessControl: Access control vulnerable to user data deletion by anonynmous users CVE-2024-51483Mediumchangedetection.io: changedetection.io Path Traversal CVE-2024-42835Highlangflow: langflow has vulnerability in PythonCodeTool component CVE-2024-8309Lowlangchain: Langchain SQL Injection vulnerability CVE-2024-6581Mediumlollms: Lollms vulnerable to Cross-site Scripting CVE-2024-49768Criticalwaitress: Waitress has request processing race condition in HTTP pipelining with invalid first request CVE-2024-49769Highwaitress: Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion CVE-2024-49771Mediumnet.sf.mpxj:mpxj: MPXJ has a Potential Path Traversal Vulnerability CVE-2024-47821Highpyload-ng: pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API CVE-2024-49767MediumQuart: Werkzeug possible resource exhaustion when parsing file data in forms CVE-2024-49766MediumWerkzeug: Werkzeug safe_join not safe on Windows CVE-2024-49750Mediumsnowflake-connector-python: The Snowflake Connector for Python stores sensitive data in logs GHSA-3VPC-4P9P-47HCHighcurl-cffi: curl_cffi bundles a version of libcurl affected by High Severity vulnerability CVE-2024-10073Mediumflair: Flair allows arbitrary code execution CVE-2024-25112Mediumexiv2: Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder CVE-2024-24826Mediumexiv2: Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder CVE-2024-21272Highmysql-connector-python: MySQL Connector/Python connector takeover vulnerability CVE-2024-47874Highstarlette: Starlette Denial of service (DoS) via multipart/form-data CVE-2024-32651Criticalchangedetection.io: changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution CVE-2024-48911MediumOpenCanary: OpenCanary Executes Commands From Potentially Writable Config File CVE-2024-6985Mediumlollms: Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint CVE-2024-6971Lowlollms: Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py GHSA-26JH-R8G2-6FPRLowgradio: Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.