PyPI vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-9277Mediumlangflow: Inefficient Regular Expression Complexity in langflow CVE-2024-1728Criticalgradio: Gradio allows users to access arbitrary files CVE-2024-46488Highsqlite-vec: Heap-based Buffer Overflow in sqlite-vec CVE-2024-47082Mediumstrawberry-graphql: Cross-Site Request Forgery (CSRF) in strawberry-graphql CVE-2024-9014Highpgadmin4: OAuth2 client ID and secret exposed through the web browser CVE-2024-45793Mediumconfidant: Prevent XSS from Confidant API call CVE-2024-8375Mediumdm-reverb: Reverb use after free vulnerability CVE-2024-46946Criticallangchain-experimental: LangChain Experimental Eval Injection vulnerability CVE-2024-45601Highmesop: Mesop has a local file Inclusion via static file serving functionality CVE-2024-35515Highsqlitedict: sqlitedict insecure deserialization vulnerability CVE-2024-45858Highguardrails-ai: Guardrails has an arbitrary code execution vulnerability CVE-2024-8946Mediummicropython-copy: Heap-based Buffer Overflow in MicroPython CVE-2024-8948Mediummicropython-copy: heap-buffer-overflow in MicroPython CVE-2024-8947Mediummicropython-copy: Use After Free in MicroPython CVE-2024-8768Highvllm: vLLM denial of service vulnerability CVE-2024-8939Mediumvllm: vLLM Denial of Service via the best_of parameter CVE-2024-45606Highsentry: Sentry improperly authorizes muting of alert rules CVE-2024-45605Highsentry: Sentry improperly authorizes deletion of user issue alert notifications CVE-2024-5998Highlangchain-community: LangChain pickle deserialization of untrusted data CVE-2024-8865Mediumcomposio-core: Composio Path Traversal vulnerability CVE-2024-8862Mediumdtale: D-Tale Command Execution Vulnerability CVE-2024-8864Mediumcomposio-core: Composio Code Injection Vulnerability CVE-2024-8863Mediumaim: Aim Stored XSS through TEXT EXPLORER CVE-2024-8775Highansible-core: Ansible vulnerable to Insertion of Sensitive Information into Log File CVE-2024-6587Highlitellm: LiteLLM Server-Side Request Forgery (SSRF) vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo