pypi
Security Advisories in pypi
Critical
1 day ago
Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
pypi
prowler-cloud
Critical
1 day ago
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
pypi
mysql-mcp-server
Moderate
2 days ago
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
pypi
open-webui
High
2 days ago
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
pypi
open-webui
Moderate
2 days ago
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
pypi
open-webui
Moderate
2 days ago
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
pypi
open-webui
Moderate
2 days ago
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
pypi
open-webui
Moderate
3 days ago
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
pypi
open-webui
High
3 days ago
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
pypi
open-webui
Moderate
3 days ago
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
pypi
open-webui
Moderate
3 days ago
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
pypi
open-webui
High
3 days ago
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
pypi
open-webui
High
3 days ago
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
pypi
open-webui
Moderate
3 days ago
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
pypi
open-webui
High
3 days ago
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
pypi
open-webui
High
3 days ago
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
pypi
open-webui
Moderate
3 days ago
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
pypi
open-webui
Moderate
3 days ago
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
pypi
open-webui
Moderate
3 days ago
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
pypi
open-webui
Moderate
3 days ago
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
pypi
open-webui
High
3 days ago
ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
pypi
esphome-device-builder
Moderate
4 days ago
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`
pypi
sqladmin
Moderate
4 days ago
GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server
pypi
githacker
High
5 days ago
HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
pypi
httpx2
Moderate
5 days ago
HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
pypi
httpx2
Moderate
5 days ago
HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
pypi
httpx2
Moderate
5 days ago
HTTPX2: Quadratic SSE line buffering can cause CPU denial of service
pypi
httpx2
High
5 days ago
HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
pypi
httpx2, httpcore2
High
5 days ago
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
pypi
nltk
High
5 days ago
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
pypi
nltk
Moderate
5 days ago
GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()
pypi
GitPython
Moderate
5 days ago
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
pypi
prowler-cloud, prowler
High
5 days ago
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
pypi
nltk
Critical
5 days ago
NLTK: Allowlisted pickle loaders still permit code execution in current source
pypi
nltk
High
5 days ago
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
pypi
nltk
Critical
5 days ago
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
pypi
nltk
Moderate
5 days ago
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely
pypi
nltk
High
5 days ago
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
pypi
nltk
Moderate
5 days ago
NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
pypi
nltk
High
5 days ago
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read
pypi
nltk
Moderate
5 days ago
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol
pypi
nltk
High
5 days ago
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
pypi
nltk
Moderate
8 days ago
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
pypi
vllm
Moderate
8 days ago
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
pypi
vllm
Moderate
8 days ago
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
pypi
vllm
Moderate
10 days ago
Material for MkDocs: DOM XSS in search suggestions via query parameter
pypi
mkdocs-material
Critical
10 days ago
unstructured: Server-Side Request Forgery in the URL-based partitioning
pypi
unstructured
High
10 days ago
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
pypi
scrapy
High
10 days ago
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
pypi
omnigent
Critical
10 days ago
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
pypi
omnigent
High
10 days ago
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
pypi
omnigent
Moderate
11 days ago
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure
pypi
nltk
High
11 days ago
Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown
pypi
mistune
High
11 days ago
Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
pypi
tornado
Moderate
11 days ago
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
pypi
banks
Moderate
11 days ago
pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
pypi
pypdf
Moderate
11 days ago
NLTK: Downloader.download follows hardlinks and overwrites outside-root files
pypi
nltk
High
11 days ago
NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
pypi
nltk
Moderate
11 days ago
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
pypi
nltk
Moderate
11 days ago
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
pypi
nltk
Moderate
12 days ago
pypdf: Possible long runtimes/large memory usage when retrieving outlines
pypi
pypdf
Moderate
12 days ago
pypdf: Possible long runtimes/large memory usage when extracting XForm objects
pypi
pypdf
Moderate
12 days ago
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
pypi
sqlparse
Critical
12 days ago
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
pypi
nltk
Moderate
12 days ago
tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)
pypi
tornado
Moderate
12 days ago
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
pypi
djangorestframework
Moderate
12 days ago
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
pypi
djangorestframework
High
15 days ago
RestrictedPython guard hooks can be shadowed via positional-only arguments
pypi
RestrictedPython
Moderate
16 days ago
AIIR verification and policy gates could report success without enforcing the control (fail-open)
pypi
aiir
Critical
16 days ago
plone.app.event vulnerable to denial of service via iCalendar import
pypi
plone.app.event
Moderate
16 days ago
Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups
pypi
weblate
High
16 days ago
Protego has exponential backtracking ReDoS in robots.txt URL wildcard matching
pypi
Protego
Critical
16 days ago
plone.app.portlets vulnerable to denial of service via RSS feed portlet
pypi
plone.app.portlets
High
16 days ago
piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
pypi
piccolo-admin
High
16 days ago
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
pypi
compliance-trestle
Moderate
16 days ago
WebOb: Open redirect in Location header normalization via leading C0 control / space characters
pypi
webob
Filter by Severity
Filter by Package
tensorflow
433
tensorflow-cpu
411
tensorflow-gpu
401
open-webui
160
apache-airflow
133
Django
107
mlflow
82
vllm
67
salt
67
apache-superset
66
ansible
65
picklescan
59
django
56
Plone
54
PraisonAI
50
nova
49
gradio
49
nltk
48
pyload-ng
48
aiohttp
47
matrix-synapse
45
vyper
44
pypdf
43
rdiffweb
43
pillow
42
praisonaiagents
41
plone
41
praisonai
39
keystone
39
moin
35
litellm
35
Pillow
33
langflow
32
opencv-python
31
wagtail
30
opencv-contrib-python
30
GitPython
30
pgadmin4
26
openbabel
24
weblate
24
cryptography
24
transformers
23
glance
22
ethyca-fides
22
langchain
21
tornado
21
neutron
21
praisonai-platform
21
mistune
20
aim
20
lollms
20
keras
20
mobsf
20
OctoPrint
20
notebook
19
vantage6
19
urllib3
19
mindsdb
19
changedetection.io
19
calibreweb
18
lemur
18
mercurial
18
cobbler
18
nicegui
17
nautobot
17
h2o
16
paddlepaddle
16
PaddlePaddle
16
bentoml
16
ckan
15
wger
15
modoboa
15
sentry
15
zenml
14
jupyterlab
14
fickling
14
pyftpdlib
14
trytond
13
copyparty
13
roundup
13
agentscope
13
OpenEXR
13
Glances
13
onnx
13
pip
13
glances
13
onionshare-cli
13
horizon
13
swift
13
twisted
12
label-studio
12
ai.h2o:h2o-core
12
torch
12
authlib
12
datamodel-code-generator
12
Weblate
12
jupyter-server
12
kiwitcms
12
yt-dlp
12
indico
12
langroid
11
pretix
11
ray
11
motioneye
11
justhtml
10
bugsink
10
Flask-AppBuilder
10
metagpt
10
waitress
10
llama-index-core
10
homeassistant
10
stigmem-node
10
lief
10
openssl-encrypt
10
sglang
10
opencv-python-headless
10
django-cms
10
hermes-agent
10
crawl4ai
10
pywasm3
9
zope
9
langchain-core
9
litestar
9
starlette
9
ryu
9
ironic
9
llama-index
9
python-multipart
9
cinder
9
sqlparse
9
dbgpt
8
jupyterhub
8
scrapy
8
dtale
8
bleach
8
keylime
8
numpy
8
aubio
8
bbot
8
docling
8
Zope
8
sagemaker
8
dulwich
8
fastmcp
8
codechecker
8
prefect
8
trac
8
requests
8
flyto-core
8
Zope2
8
opencv-contrib-python-headless
8
python-keystoneclient
8
ipython
8
web2py
8
lxml
7
matrix-sydent
7
mayan-edms
7
ujson
7
snowflake-connector-python
7
ansible-core
7
executorch
7
monai
7
pysaml2
7
inventree
7
tuf
7
fschat
7
compliance-trestle
7
rucio-webui
7
copier
7
strawberry-graphql
7
Mezzanine
6
torchserve
6
open-webui
6
AstrBot
6
mage-ai
6
apache-airflow-providers-apache-hive
6
oauthenticator
6
mitmproxy
6
langchain-chatchat
6
esphome
6
thumbor
6
graphite-web
6
whoogle-search
6
mailman
6
lmdeploy
6
Flask-Security-Too
6
mcp
6
Werkzeug
6
guarddog
6
Jinja2
6
DIRAC
6
pyjwt
6
asyncssh
6
Moin
6
werkzeug
6
ait-core
6
omero-web
6
pytorch-lightning
6
lmdb
5
linuxfabrik-lib
5
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/django/django
121
https://github.com/apache/airflow
105
https://github.com/ansible/ansible
59
https://github.com/python-pillow/Pillow
52
https://github.com/vyperlang/vyper
44
https://github.com/saltstack/salt
42
https://github.com/ikus060/rdiffweb
42
https://github.com/mmaitre314/picklescan
39
https://github.com/gradio-app/gradio
38
https://github.com/openstack/nova
38
https://github.com/plone/Products.CMFPlone
37
https://github.com/mlflow/mlflow
36
https://github.com/opencv/opencv
32
https://github.com/matrix-org/synapse
32
https://github.com/PaddlePaddle/Paddle
31
https://github.com/openstack/keystone
28
https://github.com/vllm-project/vllm
25
https://github.com/langchain-ai/langchain
25
https://github.com/pyload/pyload
24
https://github.com/run-llama/llama_index
24
https://github.com/ethyca/fides
20
https://github.com/huggingface/transformers
19
https://github.com/mindsdb/mindsdb
17
https://github.com/vantage6/vantage6
17
https://github.com/pyca/cryptography
16
https://github.com/aio-libs/aiohttp
15
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/cobbler/cobbler
15
https://github.com/twisted/twisted
14
https://github.com/janeczku/calibre-web
14
https://github.com/apache/superset
14
https://github.com/urllib3/urllib3
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/modoboa/modoboa
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/h2oai/h2o-3
13
https://github.com/zenml-io/zenml
13
https://github.com/openstack/glance
12
https://github.com/getsentry/sentry
12
https://github.com/nautobot/nautobot
12
https://github.com/wagtail/wagtail
12
https://github.com/scrapy/scrapy
11
https://github.com/parisneo/lollms
11
https://github.com/onionshare/onionshare
11
https://github.com/HumanSignal/label-studio
10
https://github.com/jupyter/notebook
10
https://github.com/Pylons/waitress
10
https://github.com/open-webui/open-webui
10
https://github.com/ckan/ckan
10
https://github.com/BerriAI/litellm
9
https://github.com/aimhubio/aim
9
https://github.com/faucetsdn/ryu
9
https://github.com/WeblateOrg/weblate
9
https://github.com/element-hq/synapse
9
https://github.com/giampaolo/pyftpdlib
9
https://github.com/openstack/horizon
9
https://github.com/zopefoundation/Zope
9
https://github.com/lief-project/LIEF
9
https://github.com/keras-team/keras
8
https://github.com/numpy/numpy
8
https://github.com/octoprint/octoprint
8
https://github.com/9001/copyparty
8
https://github.com/openstack/neutron
8
https://github.com/kiwitcms/Kiwi
8
https://github.com/pallets/werkzeug
8
https://github.com/dgtlmoon/changedetection.io
8
https://github.com/ipython/ipython
8
https://github.com/tornadoweb/tornado
8
https://github.com/Ericsson/codechecker
7
https://github.com/openstack/cinder
7
https://github.com/pytorch/executorch
7
https://github.com/pytorch/pytorch
7
https://github.com/aubio/aubio
7
https://github.com/openstack/swift
7
https://github.com/indico/indico
7
https://github.com/py-pdf/pypdf
7
https://github.com/jupyter-server/jupyter_server
7
https://github.com/pypa/pip
7
https://github.com/pallets/jinja
7
https://sourceforge.net/projects/sourceforge.net
7
https://github.com/modelscope/agentscope
6
https://github.com/psf/requests
6
https://github.com/snowflakedb/snowflake-connector-python
6
https://github.com/corydolphin/flask-cors
6
https://github.com/matrix-org/sydent
6
https://github.com/jupyterlab/jupyterlab
6
https://github.com/yt-dlp/yt-dlp
6
https://github.com/keylime/keylime
6
https://github.com/man-group/dtale
6
https://github.com/benbusby/whoogle-search
6
https://github.com/roundup-tracker/roundup
6
https://github.com/graphite-project/graphite-web
6
https://github.com/lxml/lxml
6
https://github.com/onnx/onnx
5
https://github.com/Exiv2/exiv2
5
https://github.com/ray-project/ray
5
https://github.com/tryton/trytond
5
https://github.com/hwchase17/langchain
5
https://github.com/ome/omero-web
5
https://github.com/esphome/esphome
5
https://github.com/jupyterhub/oauthenticator
5
https://github.com/inventree/InvenTree
5
https://github.com/pytorch/serve
5
https://github.com/TeamSeri0us/pocs
5
https://github.com/gitpython-developers/GitPython
5
https://github.com/bentoml/BentoML
5
https://github.com/home-assistant/core
5
https://github.com/encode/starlette
5
https://github.com/mitmproxy/mitmproxy
5
https://github.com/ComposioHQ/composio
5
https://github.com/mozilla/bleach
5
https://github.com/litestar-org/litestar
4
https://github.com/pretix/pretix
4
https://github.com/Kozea/Radicale
4
https://github.com/FreeTAKTeam/UI
4
https://github.com/nltk/nltk
4
https://github.com/Cog-Creators/Red-DiscordBot
4
https://github.com/langflow-ai/langflow
4
https://github.com/grpc/grpc
4
https://github.com/mlc-ai/xgrammar
4
https://github.com/ronf/asyncssh
4
https://github.com/hyperledger/indy-node
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/web2py/web2py
4
https://github.com/pallets/flask
4
https://github.com/wasm3/wasm3
4
https://github.com/latchset/jwcrypto
4
https://github.com/zopefoundation/RestrictedPython
4
https://github.com/saleor/saleor
4
https://github.com/qutebrowser/qutebrowser
4
https://github.com/python-ldap/python-ldap
4
https://github.com/django-helpdesk/django-helpdesk
4
https://github.com/simonw/datasette
4
https://github.com/jhpyle/docassemble
4
https://github.com/rohe/pysaml2
4
https://github.com/AcademySoftwareFoundation/openexr
4
https://github.com/dbt-labs/dbt-core
4
https://github.com/streamlit/streamlit
4
https://github.com/berriai/litellm
4
https://github.com/NVIDIA/NVFlare
4
https://github.com/frappe/frappe
4
https://github.com/hiyouga/LLaMA-Factory
4
https://github.com/eosphoros-ai/DB-GPT
4
https://github.com/ietf-tools/xml2rfc
4
https://github.com/blacklanternsecurity/bbot
4
https://github.com/AcademySoftwareFoundation/MaterialX
4
https://github.com/jupyterhub/jupyterhub
4
https://github.com/bottlepy/bottle
4
https://github.com/pypa/setuptools
4
https://github.com/httplib2/httplib2
3
https://github.com/zopefoundation/AccessControl
3
https://github.com/modelscope/ms-swift
3
https://github.com/Project-MONAI/MONAI
3
https://gitlab.com/mayan-edms/mayan-edms
3
https://github.com/theupdateframework/tuf
3
https://github.com/GeoNode/geonode
3
https://github.com/sosreport/sos
3
https://github.com/khoj-ai/khoj
3
https://github.com/authlib/authlib
3
https://github.com/andialbrecht/sqlparse
3
https://github.com/benoitc/gunicorn
3
https://github.com/yaml/pyyaml
3
https://github.com/invoke-ai/InvokeAI
3
https://github.com/github/securitylab
3
https://github.com/python/cpython
3
https://github.com/chatchat-space/Langchain-Chatchat
3
https://github.com/certifi/python-certifi
3
https://github.com/Kludex/python-multipart
3
https://github.com/pyinstaller/pyinstaller
3
https://github.com/theupdateframework/python-tuf
3
https://github.com/impredicative/bitlyshortener
3
https://github.com/ansible/ansible-runner
3
https://github.com/Gerapy/Gerapy
3
https://github.com/stephenmcd/mezzanine
3
https://github.com/jpadilla/pyjwt
3
https://github.com/bytecodealliance/wasmtime
3
https://github.com/ankitects/anki
3
https://github.com/eventlet/eventlet
3
https://github.com/openstack/ironic
3
https://github.com/NASA-AMMOS/AIT-Core
3
https://github.com/jupyterhub/jupyter-server-proxy
3
https://github.com/pyca/pyopenssl
3
https://github.com/openstack/octavia
3
https://sourceforge.net/projects/roject
3
https://github.com/aws/aws-sam-cli
3
https://github.com/beancount/fava
3
https://github.com/openstack/python-keystoneclient
3
https://github.com/DavidOsipov/PostQuantum-Feldman-VSS
3
https://github.com/pypa/advisory-db
3
https://github.com/rochacbruno/quokka
3
https://github.com/langroid/langroid
3
https://github.com/zauberzeug/nicegui
3
https://github.com/aws/sagemaker-python-sdk
3
https://github.com/geyang/ml-logger
3
https://github.com/Flask-Middleware/flask-security
3
https://github.com/djblets/djblets
3
https://github.com/dlitz/pycrypto
3