pypi
Security Advisories in pypi
Critical
about 19 hours ago
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
pypi
mnemosyne-memory
High
about 20 hours ago
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
pypi
anyio
Critical
about 20 hours ago
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
pypi
anyio
Moderate
about 20 hours ago
AnyIO process-pool workers can block indefinitely on undrained stderr
pypi
anyio
High
about 20 hours ago
LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading
pypi
lmdeploy
Critical
about 20 hours ago
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
pypi
lmdeploy
Moderate
1 day ago
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
pypi
soupsieve
Moderate
1 day ago
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
pypi
soupsieve
High
1 day ago
djust: A template binding inherits a context safety grant it never earned (XSS)
pypi
djust
High
1 day ago
djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)
pypi
djust
High
1 day ago
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
pypi
jupyter_server
Moderate
2 days ago
vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation
pypi
vllm
Moderate
2 days ago
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
pypi
AccessControl
High
2 days ago
RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution
pypi
RestrictedPython
Moderate
2 days ago
sanic chunked trailer request smuggling allows hidden second request execution
pypi
sanic
Moderate
2 days ago
AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION
pypi
asyncssh
Moderate
2 days ago
LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
pypi
litellm
Moderate
3 days ago
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
pypi
vllm
High
3 days ago
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
pypi
djust
Moderate
3 days ago
djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags
pypi
djust
Critical
3 days ago
LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
pypi
lmdeploy
High
3 days ago
djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data
pypi
djust
High
3 days ago
djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler
pypi
djust
Critical
5 days ago
ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
pypi
esphome-device-builder
Critical
8 days ago
Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
pypi
prowler-cloud
Critical
8 days ago
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
pypi
mysql-mcp-server
Moderate
9 days ago
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
pypi
open-webui
High
9 days ago
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
pypi
open-webui
Moderate
9 days ago
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
pypi
open-webui
Moderate
9 days ago
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
pypi
open-webui
Moderate
9 days ago
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
pypi
open-webui
Moderate
9 days ago
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
pypi
open-webui
High
9 days ago
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
pypi
open-webui
Moderate
9 days ago
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
pypi
open-webui
Moderate
9 days ago
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
pypi
open-webui
High
9 days ago
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
pypi
open-webui
High
9 days ago
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
pypi
open-webui
Moderate
9 days ago
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
pypi
open-webui
High
9 days ago
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
pypi
open-webui
High
9 days ago
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
pypi
open-webui
Moderate
9 days ago
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
pypi
open-webui
Moderate
10 days ago
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
pypi
open-webui
Moderate
10 days ago
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
pypi
open-webui
Moderate
10 days ago
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
pypi
open-webui
High
10 days ago
ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
pypi
esphome-device-builder
Moderate
10 days ago
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`
pypi
sqladmin
Moderate
10 days ago
GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server
pypi
githacker
High
11 days ago
HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
pypi
httpx2
Moderate
11 days ago
HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
pypi
httpx2
Moderate
11 days ago
HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
pypi
httpx2
Moderate
11 days ago
HTTPX2: Quadratic SSE line buffering can cause CPU denial of service
pypi
httpx2
High
11 days ago
HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
pypi
httpx2, httpcore2
High
11 days ago
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
pypi
nltk
High
11 days ago
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
pypi
nltk
Moderate
11 days ago
GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)
pypi
GitPython
Moderate
11 days ago
GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()
pypi
GitPython
Moderate
11 days ago
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
pypi
prowler-cloud, prowler
High
11 days ago
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
pypi
nltk
Critical
11 days ago
NLTK: Allowlisted pickle loaders still permit code execution in current source
pypi
nltk
High
11 days ago
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
pypi
nltk
Critical
11 days ago
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
pypi
nltk
Moderate
11 days ago
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely
pypi
nltk
High
11 days ago
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
pypi
nltk
Moderate
11 days ago
NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
pypi
nltk
High
11 days ago
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read
pypi
nltk
Moderate
11 days ago
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol
pypi
nltk
High
11 days ago
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
pypi
nltk
Moderate
15 days ago
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
pypi
vllm
Moderate
15 days ago
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
pypi
vllm
Moderate
15 days ago
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
pypi
vllm
Moderate
16 days ago
Material for MkDocs: DOM XSS in search suggestions via query parameter
pypi
mkdocs-material
Critical
16 days ago
unstructured: Server-Side Request Forgery in the URL-based partitioning
pypi
unstructured
High
17 days ago
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
pypi
scrapy
High
17 days ago
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
pypi
omnigent
Critical
17 days ago
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
pypi
omnigent
High
17 days ago
Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
pypi
omnigent
Moderate
17 days ago
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure
pypi
nltk
Filter by Severity
Filter by Package
tensorflow
433
tensorflow-cpu
406
tensorflow-gpu
394
open-webui
160
apache-airflow
133
Django
107
mlflow
82
vllm
69
salt
67
apache-superset
66
ansible
65
picklescan
59
django
56
Plone
54
PraisonAI
50
gradio
49
nova
48
pyload-ng
48
nltk
48
aiohttp
47
matrix-synapse
45
vyper
44
rdiffweb
43
pypdf
43
pillow
42
plone
41
praisonaiagents
41
litellm
40
praisonai
39
keystone
39
moin
35
Pillow
33
langflow
32
opencv-python
31
wagtail
30
GitPython
30
opencv-contrib-python
30
pgadmin4
26
cryptography
24
weblate
24
openbabel
24
transformers
23
ethyca-fides
22
glance
21
langchain
21
praisonai-platform
21
neutron
21
tornado
21
mistune
20
keras
20
mobsf
20
lollms
20
aim
20
OctoPrint
20
urllib3
19
mindsdb
19
vantage6
19
notebook
19
changedetection.io
19
lemur
18
cobbler
18
mercurial
18
calibreweb
18
nicegui
17
nautobot
17
PaddlePaddle
16
h2o
16
paddlepaddle
16
bentoml
16
djust
15
ckan
15
wger
15
sentry
15
modoboa
15
zenml
14
pyftpdlib
14
jupyterlab
14
fickling
14
roundup
13
Glances
13
swift
13
OpenEXR
13
horizon
13
onnx
13
onionshare-cli
13
pip
13
trytond
13
agentscope
13
glances
13
copyparty
13
Weblate
12
label-studio
12
jupyter-server
12
torch
12
twisted
12
datamodel-code-generator
12
indico
12
authlib
12
yt-dlp
12
kiwitcms
12
crawl4ai
11
ai.h2o:h2o-core
11
pretix
11
ray
11
langroid
11
motioneye
11
metagpt
10
opencv-python-headless
10
lief
10
homeassistant
10
waitress
10
sglang
10
hermes-agent
10
justhtml
10
llama-index-core
10
lmdeploy
10
openssl-encrypt
10
django-cms
10
stigmem-node
10
Flask-AppBuilder
10
bugsink
10
opencv-contrib-python-headless
9
python-multipart
9
cinder
9
litestar
9
ironic
9
langchain-core
9
sqlparse
9
starlette
9
ryu
9
zope
9
pywasm3
9
llama-index
9
web2py
8
python-keystoneclient
8
docling
8
dulwich
8
numpy
8
keylime
8
bleach
8
scrapy
8
bbot
8
jupyterhub
8
codechecker
8
Zope
8
sagemaker
8
Zope2
8
flyto-core
8
dbgpt
8
trac
8
requests
8
aubio
8
ipython
8
fastmcp
8
prefect
8
dtale
8
strawberry-graphql
7
lxml
7
matrix-sydent
7
executorch
7
tuf
7
compliance-trestle
7
asyncssh
7
snowflake-connector-python
7
mayan-edms
7
copier
7
ansible-core
7
pysaml2
7
fschat
7
inventree
7
monai
7
rucio-webui
7
ujson
7
oauthenticator
6
werkzeug
6
thumbor
6
mitmproxy
6
ait-core
6
mage-ai
6
mailman
6
whoogle-search
6
apache-airflow-providers-apache-hive
6
RestrictedPython
6
graphite-web
6
AstrBot
6
Jinja2
6
pytorch-lightning
6
langchain-chatchat
6
Flask-Security-Too
6
esphome
6
DIRAC
6
pyjwt
6
omero-web
6
open-webui
6
Werkzeug
6
guarddog
6
mcp
6
Mezzanine
6
Moin
6
torchserve
6
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/django/django
121
https://github.com/apache/airflow
105
https://github.com/ansible/ansible
59
https://github.com/python-pillow/Pillow
52
https://github.com/vyperlang/vyper
44
https://github.com/saltstack/salt
42
https://github.com/ikus060/rdiffweb
42
https://github.com/mmaitre314/picklescan
39
https://github.com/openstack/nova
38
https://github.com/gradio-app/gradio
38
https://github.com/plone/Products.CMFPlone
37
https://github.com/mlflow/mlflow
36
https://github.com/opencv/opencv
32
https://github.com/matrix-org/synapse
32
https://github.com/PaddlePaddle/Paddle
31
https://github.com/openstack/keystone
28
https://github.com/vllm-project/vllm
25
https://github.com/langchain-ai/langchain
25
https://github.com/pyload/pyload
24
https://github.com/run-llama/llama_index
24
https://github.com/ethyca/fides
20
https://github.com/huggingface/transformers
19
https://github.com/mindsdb/mindsdb
17
https://github.com/vantage6/vantage6
17
https://github.com/pyca/cryptography
16
https://github.com/aio-libs/aiohttp
15
https://github.com/cobbler/cobbler
15
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/twisted/twisted
14
https://github.com/urllib3/urllib3
14
https://github.com/apache/superset
14
https://github.com/janeczku/calibre-web
14
https://github.com/zenml-io/zenml
13
https://github.com/h2oai/h2o-3
13
https://github.com/modoboa/modoboa
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/nautobot/nautobot
12
https://github.com/getsentry/sentry
12
https://github.com/wagtail/wagtail
12
https://github.com/openstack/glance
12
https://github.com/onionshare/onionshare
11
https://github.com/scrapy/scrapy
11
https://github.com/parisneo/lollms
11
https://github.com/Pylons/waitress
10
https://github.com/open-webui/open-webui
10
https://github.com/HumanSignal/label-studio
10
https://github.com/ckan/ckan
10
https://github.com/jupyter/notebook
10
https://github.com/BerriAI/litellm
9
https://github.com/lief-project/LIEF
9
https://github.com/zopefoundation/Zope
9
https://github.com/giampaolo/pyftpdlib
9
https://github.com/faucetsdn/ryu
9
https://github.com/aimhubio/aim
9
https://github.com/element-hq/synapse
9
https://github.com/openstack/horizon
9
https://github.com/WeblateOrg/weblate
9
https://github.com/keras-team/keras
8
https://github.com/9001/copyparty
8
https://github.com/dgtlmoon/changedetection.io
8
https://github.com/numpy/numpy
8
https://github.com/openstack/neutron
8
https://github.com/pallets/werkzeug
8
https://github.com/tornadoweb/tornado
8
https://github.com/ipython/ipython
8
https://github.com/kiwitcms/Kiwi
8
https://github.com/octoprint/octoprint
8
https://github.com/pallets/jinja
7
https://github.com/pypa/pip
7
https://github.com/indico/indico
7
https://github.com/openstack/cinder
7
https://github.com/aubio/aubio
7
https://github.com/jupyter-server/jupyter_server
7
https://github.com/openstack/swift
7
https://github.com/pytorch/pytorch
7
https://github.com/py-pdf/pypdf
7
https://github.com/pytorch/executorch
7
https://github.com/Ericsson/codechecker
7
https://sourceforge.net/projects/sourceforge.net
7
https://github.com/benbusby/whoogle-search
6
https://github.com/yt-dlp/yt-dlp
6
https://github.com/psf/requests
6
https://github.com/graphite-project/graphite-web
6
https://github.com/snowflakedb/snowflake-connector-python
6
https://github.com/roundup-tracker/roundup
6
https://github.com/lxml/lxml
6
https://github.com/modelscope/agentscope
6
https://github.com/man-group/dtale
6
https://github.com/keylime/keylime
6
https://github.com/corydolphin/flask-cors
6
https://github.com/matrix-org/sydent
6
https://github.com/jupyterlab/jupyterlab
6
https://github.com/mozilla/bleach
5
https://github.com/pytorch/serve
5
https://github.com/jupyterhub/oauthenticator
5
https://github.com/TeamSeri0us/pocs
5
https://github.com/ComposioHQ/composio
5
https://github.com/tryton/trytond
5
https://github.com/encode/starlette
5
https://github.com/onnx/onnx
5
https://github.com/Exiv2/exiv2
5
https://github.com/ome/omero-web
5
https://github.com/hwchase17/langchain
5
https://github.com/inventree/InvenTree
5
https://github.com/home-assistant/core
5
https://github.com/gitpython-developers/GitPython
5
https://github.com/ray-project/ray
5
https://github.com/bentoml/BentoML
5
https://github.com/esphome/esphome
5
https://github.com/mitmproxy/mitmproxy
5
https://github.com/bottlepy/bottle
4
https://github.com/ronf/asyncssh
4
https://github.com/pallets/flask
4
https://github.com/AcademySoftwareFoundation/MaterialX
4
https://github.com/django-helpdesk/django-helpdesk
4
https://github.com/blacklanternsecurity/bbot
4
https://github.com/Kozea/Radicale
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/python-ldap/python-ldap
4
https://github.com/qutebrowser/qutebrowser
4
https://github.com/rohe/pysaml2
4
https://github.com/wasm3/wasm3
4
https://github.com/pretix/pretix
4
https://github.com/FreeTAKTeam/UI
4
https://github.com/streamlit/streamlit
4
https://github.com/grpc/grpc
4
https://github.com/NVIDIA/NVFlare
4
https://github.com/frappe/frappe
4
https://github.com/ietf-tools/xml2rfc
4
https://github.com/hiyouga/LLaMA-Factory
4
https://github.com/langflow-ai/langflow
4
https://github.com/litestar-org/litestar
4
https://github.com/simonw/datasette
4
https://github.com/hyperledger/indy-node
4
https://github.com/Cog-Creators/Red-DiscordBot
4
https://github.com/mlc-ai/xgrammar
4
https://github.com/nltk/nltk
4
https://github.com/berriai/litellm
4
https://github.com/jupyterhub/jupyterhub
4
https://github.com/AcademySoftwareFoundation/openexr
4
https://github.com/jhpyle/docassemble
4
https://github.com/eosphoros-ai/DB-GPT
4
https://github.com/pypa/setuptools
4
https://github.com/zopefoundation/RestrictedPython
4
https://github.com/saleor/saleor
4
https://github.com/latchset/jwcrypto
4
https://github.com/dbt-labs/dbt-core
4
https://github.com/web2py/web2py
4
https://github.com/dlitz/pycrypto
3
https://github.com/Gerapy/Gerapy
3
https://github.com/zauberzeug/nicegui
3
https://github.com/sosreport/sos
3
https://github.com/theupdateframework/tuf
3
https://github.com/stephenmcd/mezzanine
3
https://github.com/langchain-ai/langgraph
3
https://github.com/GeoNode/geonode
3
https://github.com/NASA-AMMOS/AIT-Core
3
https://github.com/aws/sagemaker-python-sdk
3
https://github.com/bytecodealliance/wasmtime
3
https://github.com/skops-dev/skops
3
https://github.com/rochacbruno/quokka
3
https://github.com/gventuri/pandas-ai
3
https://github.com/sqlalchemy/sqlalchemy
3
https://github.com/benoitc/gunicorn
3
https://github.com/mpdavis/python-jose
3
https://github.com/github/securitylab
3
https://github.com/modelscope/ms-swift
3
https://github.com/invoke-ai/InvokeAI
3
https://github.com/yaml/pyyaml
3
https://github.com/openstack/ironic
3
https://github.com/authlib/authlib
3
https://github.com/geyang/ml-logger
3
https://github.com/ankitects/anki
3
https://github.com/httplib2/httplib2
3
https://github.com/python/cpython
3
https://github.com/impredicative/bitlyshortener
3
https://github.com/micropython/micropython
3
https://github.com/zopefoundation/AccessControl
3
https://gitlab.com/mayan-edms/mayan-edms
3
https://github.com/trentm/python-markdown2
3
https://github.com/pyinstaller/pyinstaller
3
https://github.com/chatchat-space/Langchain-Chatchat
3
https://github.com/Kludex/python-multipart
3
https://github.com/jpadilla/pyjwt
3
https://github.com/DavidOsipov/PostQuantum-Feldman-VSS
3
https://github.com/openstack/python-keystoneclient
3
https://github.com/jupyterhub/jupyter-server-proxy
3
https://github.com/paramiko/paramiko
3
https://github.com/jlowin/fastmcp
3
https://github.com/theupdateframework/python-tuf
3
https://github.com/certifi/python-certifi
3
https://github.com/astral-sh/uv
3
https://github.com/poezio/slixmpp
3
https://github.com/aws/aws-sam-cli
3
https://github.com/langroid/langroid
3
https://github.com/pypa/advisory-db
3