pypi
Security Advisories in pypi
Moderate
2 days ago
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
pypi
filelock
Low
2 days ago
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
pypi
filelock
Moderate
2 days ago
virtualenv: Temporary app-data can leave dangling seed package links
pypi
virtualenv
Low
2 days ago
virtualenv: Pip seeding with download omits wheel digest verification
pypi
virtualenv
Low
2 days ago
virtualenv: Downloaded wheel selection and caching precede verification
pypi
virtualenv
High
2 days ago
virtualenv: Xonsh activation literals depend on the script decoding codec
pypi
virtualenv
High
2 days ago
virtualenv: Bash prompt values can change meaning under older compatibility modes
pypi
virtualenv
Low
2 days ago
virtualenv: Venv configuration readback can reinterpret path boundaries
pypi
virtualenv
Moderate
2 days ago
virtualenv: Seed replacement does not contain metadata deletion paths
pypi
virtualenv
Moderate
2 days ago
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
pypi
langgraph-checkpoint-sqlite, langgraph-checkpoint-postgres
Moderate
2 days ago
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
pypi
filelock
Critical
2 days ago
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
pypi
pillow
Moderate
2 days ago
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
pypi
Pillow
Low
2 days ago
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
pypi
setuptools
Moderate
2 days ago
FastMCP: Post-transform component authorization is skipped on direct calls
pypi
fastmcp-slim, fastmcp
Moderate
2 days ago
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
pypi
fastmcp-slim, fastmcp
High
2 days ago
pypdf: Possible long runtimes for repeated references to the same missing object
pypi
pypdf
High
2 days ago
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
pypi
pypdf
High
2 days ago
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
npm, pypi
@strands-agents/sdk, strands-agents
Moderate
2 days ago
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
pypi
Twisted
High
2 days ago
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
pypi
Twisted
Moderate
2 days ago
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
pypi
Twisted
Moderate
3 days ago
virtualenv: Generated files can follow existing destination links
pypi
virtualenv
Moderate
3 days ago
pypdf: Possible long runtimes/large memory usage when retrieving form fields
pypi
pypdf
Moderate
3 days ago
pypdf: Possible large memory usage when parsing arrays and dictionaries
pypi
pypdf
High
3 days ago
GitPython validates a submodule's ".git" path only after cloning into it (RCE)
pypi
Gitpython
High
3 days ago
GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit
pypi
graphql-core
High
3 days ago
GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule
pypi
graphql-core
Moderate
3 days ago
OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
pypi
opentelemetry-api
High
3 days ago
Black: GitHub Action installs unvalidated required-version from pyproject.toml
pypi
black
High
3 days ago
Django REST framework: TokenProxy.delete() reports success and revokes nothing
pypi
djangorestframework
High
3 days ago
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation
pypi
djangorestframework
High
3 days ago
Django REST framework: JSONParser applies an attacker-named codec to the request stream
pypi
djangorestframework
High
3 days ago
Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
pypi
Pillow
High
3 days ago
Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
pypi
Pillow
High
3 days ago
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
pypi
Pillow
Critical
3 days ago
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
pypi
Pillow
Moderate
3 days ago
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
pypi
pillow
High
3 days ago
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
pypi
pillow
Moderate
3 days ago
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
pypi
Pillow
High
3 days ago
PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery
pypi
pyjwt
High
3 days ago
Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
pypi
jupyter-server
Critical
3 days ago
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
pypi
brotlicffi, brotli
Moderate
4 days ago
virtualenv: Builtin creation follows linked environment directories
pypi
virtualenv
Moderate
4 days ago
virtualenv: Deletion recovery can change a symlink target's mode
pypi
virtualenv
High
4 days ago
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
pypi
virtualenv
High
4 days ago
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
pypi
Pillow
Critical
4 days ago
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
pypi
Pillow
Moderate
4 days ago
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
pypi
pillow
High
4 days ago
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
pypi
Pillow
High
4 days ago
Pillow: APNG background disposal allocates full canvas before decompression bomb check
pypi
Pillow
Moderate
4 days ago
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
pypi
Pillow
Moderate
4 days ago
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
pypi
Pillow
Moderate
4 days ago
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
pypi
Pillow
Moderate
4 days ago
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
pypi
Pillow
High
4 days ago
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
pypi
Pillow
High
4 days ago
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
pypi
pillow
High
4 days ago
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
pypi
pillow
High
4 days ago
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
pypi
Pillow
Moderate
4 days ago
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
pypi
Pillow
Critical
4 days ago
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
pypi
Pillow
Low
4 days ago
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
pypi
djust
Moderate
4 days ago
pypdf: Possible infinite loop when hitting EOF in standard xref table
pypi
pypdf
High
4 days ago
virtualenv bash activate runs commands from an environment name with a backslash before $
pypi
virtualenv
High
4 days ago
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
pypi
virtualenv
High
4 days ago
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
pypi
virtualenv
High
4 days ago
virtualenv activation scripts run code from a path that contains a placeholder name
pypi
virtualenv
Moderate
4 days ago
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
pypi
pydantic-ai-harness
High
5 days ago
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
pypi
Pillow
Moderate
5 days ago
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
pypi
Pillow
High
5 days ago
Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
pypi
Pillow
High
5 days ago
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
pypi
Pillow
Filter by Severity
Filter by Package
tensorflow
433
tensorflow-gpu
427
tensorflow-cpu
423
open-webui
160
apache-airflow
146
Django
127
mlflow
84
vllm
79
Plone
72
salt
67
apache-superset
66
ansible
65
Pillow
63
pypdf
62
django
59
picklescan
59
pyload-ng
57
aiohttp
55
pillow
54
praisonai
52
PraisonAI
52
nltk
51
praisonaiagents
50
gradio
50
nova
49
vyper
47
matrix-synapse
45
langflow
43
rdiffweb
43
litellm
41
plone
41
keystone
39
moin
35
GitPython
33
opencv-python
31
opencv-contrib-python
31
mcp-atlassian
30
wagtail
30
pgadmin4
26
weblate
24
tornado
24
praisonai-platform
24
openbabel
24
cryptography
24
virtualenv
24
transformers
24
urllib3
22
ethyca-fides
22
langchain
22
glance
22
mistune
21
notebook
21
neutron
21
keras
20
lollms
20
aim
20
OctoPrint
20
mobsf
20
wger
20
vantage6
19
nautobot
19
changedetection.io
19
mindsdb
19
calibreweb
18
mercurial
18
lemur
18
jupyterlab
18
cobbler
18
nicegui
17
docling
17
indico
16
bentoml
16
djust
16
h2o
16
PaddlePaddle
16
paddlepaddle
16
modoboa
15
ckan
15
sentry
15
trytond
14
pyftpdlib
14
copyparty
14
swift
14
pydantic-ai-slim
14
pydantic-ai
14
fickling
14
zenml
14
dulwich
13
horizon
13
onionshare-cli
13
agentscope
13
jupyter-server
13
OpenEXR
13
onnx
13
roundup
13
datamodel-code-generator
13
pip
13
PyJWT
13
Glances
13
glances
13
kiwitcms
12
ai.h2o:h2o-core
12
pyspark
12
twisted
12
label-studio
12
torch
12
homeassistant
12
authlib
12
yt-dlp
12
Weblate
12
langroid
11
crawl4ai
11
motioneye
11
pretix
11
ray
11
lmdeploy
10
openssl-encrypt
10
lightrag-hku
10
justhtml
10
zope
10
django-cms
10
hermes-agent
10
waitress
10
llama-index-core
10
opencv-python-headless
10
Flask-AppBuilder
10
lief
10
metagpt
10
bugsink
10
Twisted
10
opencv-contrib-python-headless
10
pyjwt
10
stigmem-node
10
fastmcp
10
sglang
10
sqlparse
9
python-multipart
9
compliance-trestle
9
pywasm3
9
cinder
9
python-keystoneclient
9
ryu
9
llama-index
9
langchain-core
9
strawberry-graphql
9
bbot
9
starlette
9
litestar
9
ironic
9
numpy
8
langflow-base
8
scrapy
8
trac
8
flyto-core
8
aubio
8
snowflake-connector-python
8
prefect
8
dtale
8
filelock
8
web2py
8
dbgpt
8
ipython
8
docling-slim
8
jupyterhub
8
Werkzeug
8
keylime
8
codechecker
8
requests
8
Zope2
8
bleach
8
sagemaker
8
Zope
8
inventree
7
monai
7
apache-iotdb
7
copier
7
djangorestframework
7
uv
7
omero-web
7
pysaml2
7
Products.CMFPlone
7
rucio-webui
7
asyncssh
7
tuf
7
matrix-sydent
7
ansible-core
7
ujson
7
mcp
7
executorch
7
lxml
7
mayan-edms
7
fschat
7
esphome
6
werkzeug
6
mage-ai
6
langchain-community
6
apache-airflow-providers-apache-hive
6
thumbor
6
torchserve
6
RestrictedPython
6
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/django/django
121
https://github.com/apache/airflow
105
https://github.com/ansible/ansible
59
https://github.com/python-pillow/Pillow
52
https://github.com/vyperlang/vyper
44
https://github.com/saltstack/salt
42
https://github.com/ikus060/rdiffweb
42
https://github.com/mmaitre314/picklescan
39
https://github.com/gradio-app/gradio
38
https://github.com/openstack/nova
38
https://github.com/plone/Products.CMFPlone
37
https://github.com/mlflow/mlflow
36
https://github.com/matrix-org/synapse
32
https://github.com/opencv/opencv
32
https://github.com/PaddlePaddle/Paddle
31
https://github.com/openstack/keystone
28
https://github.com/vllm-project/vllm
25
https://github.com/langchain-ai/langchain
25
https://github.com/pyload/pyload
24
https://github.com/run-llama/llama_index
24
https://github.com/ethyca/fides
20
https://github.com/huggingface/transformers
19
https://github.com/vantage6/vantage6
17
https://github.com/mindsdb/mindsdb
17
https://github.com/pyca/cryptography
16
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/cobbler/cobbler
15
https://github.com/aio-libs/aiohttp
15
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/janeczku/calibre-web
14
https://github.com/twisted/twisted
14
https://github.com/urllib3/urllib3
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/apache/superset
14
https://github.com/zenml-io/zenml
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/modoboa/modoboa
13
https://github.com/h2oai/h2o-3
13
https://github.com/nautobot/nautobot
12
https://github.com/getsentry/sentry
12
https://github.com/wagtail/wagtail
12
https://github.com/openstack/glance
12
https://github.com/scrapy/scrapy
11
https://github.com/parisneo/lollms
11
https://github.com/onionshare/onionshare
11
https://github.com/jupyter/notebook
10
https://github.com/HumanSignal/label-studio
10
https://github.com/ckan/ckan
10
https://github.com/Pylons/waitress
10
https://github.com/open-webui/open-webui
10
https://github.com/WeblateOrg/weblate
9
https://github.com/openstack/horizon
9
https://github.com/aimhubio/aim
9
https://github.com/zopefoundation/Zope
9
https://github.com/giampaolo/pyftpdlib
9
https://github.com/lief-project/LIEF
9
https://github.com/BerriAI/litellm
9
https://github.com/faucetsdn/ryu
9
https://github.com/element-hq/synapse
9
https://github.com/pallets/werkzeug
8
https://github.com/9001/copyparty
8
https://github.com/keras-team/keras
8
https://github.com/tornadoweb/tornado
8
https://github.com/dgtlmoon/changedetection.io
8
https://github.com/numpy/numpy
8
https://github.com/ipython/ipython
8
https://github.com/openstack/neutron
8
https://github.com/kiwitcms/Kiwi
8
https://github.com/octoprint/octoprint
8
https://github.com/jupyter-server/jupyter_server
7
https://github.com/pytorch/pytorch
7
https://sourceforge.net/projects/sourceforge.net
7
https://github.com/openstack/cinder
7
https://github.com/indico/indico
7
https://github.com/openstack/swift
7
https://github.com/Ericsson/codechecker
7
https://github.com/pallets/jinja
7
https://github.com/py-pdf/pypdf
7
https://github.com/pytorch/executorch
7
https://github.com/pypa/pip
7
https://github.com/aubio/aubio
7
https://github.com/benbusby/whoogle-search
6
https://github.com/graphite-project/graphite-web
6
https://github.com/corydolphin/flask-cors
6
https://github.com/psf/requests
6
https://github.com/man-group/dtale
6
https://github.com/yt-dlp/yt-dlp
6
https://github.com/keylime/keylime
6
https://github.com/roundup-tracker/roundup
6
https://github.com/lxml/lxml
6
https://github.com/jupyterlab/jupyterlab
6
https://github.com/snowflakedb/snowflake-connector-python
6
https://github.com/modelscope/agentscope
6
https://github.com/matrix-org/sydent
6
https://github.com/gitpython-developers/GitPython
5
https://github.com/TeamSeri0us/pocs
5
https://github.com/onnx/onnx
5
https://github.com/tryton/trytond
5
https://github.com/Exiv2/exiv2
5
https://github.com/ome/omero-web
5
https://github.com/mozilla/bleach
5
https://github.com/hwchase17/langchain
5
https://github.com/bentoml/BentoML
5
https://github.com/ray-project/ray
5
https://github.com/pytorch/serve
5
https://github.com/mitmproxy/mitmproxy
5
https://github.com/inventree/InvenTree
5
https://github.com/home-assistant/core
5
https://github.com/jupyterhub/oauthenticator
5
https://github.com/ComposioHQ/composio
5
https://github.com/encode/starlette
5
https://github.com/esphome/esphome
5
https://github.com/django-helpdesk/django-helpdesk
4
https://github.com/python-ldap/python-ldap
4
https://github.com/AcademySoftwareFoundation/MaterialX
4
https://github.com/rohe/pysaml2
4
https://github.com/wasm3/wasm3
4
https://github.com/litestar-org/litestar
4
https://github.com/dbt-labs/dbt-core
4
https://github.com/qutebrowser/qutebrowser
4
https://github.com/FreeTAKTeam/UI
4
https://github.com/grpc/grpc
4
https://github.com/mlc-ai/xgrammar
4
https://github.com/ronf/asyncssh
4
https://github.com/pallets/flask
4
https://github.com/Kozea/Radicale
4
https://github.com/bytecodealliance/wasmtime
4
https://github.com/langflow-ai/langflow
4
https://github.com/saleor/saleor
4
https://github.com/eosphoros-ai/DB-GPT
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/Cog-Creators/Red-DiscordBot
4
https://github.com/hyperledger/indy-node
4
https://github.com/latchset/jwcrypto
4
https://github.com/web2py/web2py
4
https://github.com/jupyterhub/jupyterhub
4
https://github.com/zopefoundation/RestrictedPython
4
https://github.com/nltk/nltk
4
https://github.com/pretix/pretix
4
https://github.com/blacklanternsecurity/bbot
4
https://github.com/ietf-tools/xml2rfc
4
https://github.com/bottlepy/bottle
4
https://github.com/hiyouga/LLaMA-Factory
4
https://github.com/simonw/datasette
4
https://github.com/berriai/litellm
4
https://github.com/AcademySoftwareFoundation/openexr
4
https://github.com/frappe/frappe
4
https://github.com/pypa/setuptools
4
https://github.com/jhpyle/docassemble
4
https://github.com/NVIDIA/NVFlare
4
https://github.com/streamlit/streamlit
4
https://github.com/andialbrecht/sqlparse
3
https://github.com/jpadilla/pyjwt
3
https://github.com/stephenmcd/mezzanine
3
https://gitlab.com/mayan-edms/mayan-edms
3
https://github.com/zopefoundation/AccessControl
3
https://github.com/apache/iotdb
3
https://github.com/adamghill/django-unicorn
3
https://github.com/benoitc/gunicorn
3
https://github.com/trentm/python-markdown2
3
https://github.com/ankitects/anki
3
https://github.com/aws/aws-sam-cli
3
https://github.com/skops-dev/skops
3
https://github.com/Gerapy/Gerapy
3
https://github.com/tinymce/tinymce
3
https://github.com/sqlalchemy/sqlalchemy
3
https://github.com/pyca/pyopenssl
3
https://github.com/beancount/fava
3
https://github.com/langchain-ai/langgraph
3
https://github.com/GeoNode/geonode
3
https://github.com/theupdateframework/tuf
3
https://github.com/sosreport/sos
3
https://github.com/modelscope/ms-swift
3
https://github.com/mpdavis/python-jose
3
https://github.com/httplib2/httplib2
3
https://github.com/moinwiki/moin-1.9
3
https://github.com/openstack/octavia
3
https://github.com/apache/streampipes
3
https://github.com/Project-MONAI/MONAI
3
https://github.com/furlongm/openvpn-monitor
3
https://github.com/pygments/pygments
3
https://github.com/openstack/ironic
3
https://github.com/khoj-ai/khoj
3
https://github.com/authlib/authlib
3
https://github.com/djblets/djblets
3
https://github.com/eventlet/eventlet
3
https://github.com/paramiko/paramiko
3
https://github.com/certifi/python-certifi
3
https://github.com/micropython/micropython
3
https://github.com/github/securitylab
3
https://github.com/geyang/ml-logger
3
https://github.com/ansible/ansible-runner
3
https://github.com/Flask-Middleware/flask-security
3
https://github.com/astral-sh/uv
3
https://github.com/poezio/slixmpp
3
https://github.com/DavidOsipov/PostQuantum-Feldman-VSS
3
https://github.com/openstack/python-keystoneclient
3
https://github.com/jlowin/fastmcp
3