pypi
Security Advisories in pypi
Moderate
2 days ago
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
pypi
mcp-contextforge-gateway
High
3 days ago
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences
pypi
nltk
High
3 days ago
atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read
pypi
atomic-agents-stack
Moderate
3 days ago
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
pypi
pydantic-ai, pydantic-ai-slim
High
4 days ago
Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
pypi
ansible-jailexec
High
4 days ago
MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
pypi
stata-mcp
High
4 days ago
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
pypi
compliance-trestle
Moderate
9 days ago
pypdf: Possible long runtimes/large memory usage for large CID font width ranges
pypi
pypdf
High
9 days ago
pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
pypi
pymdown-extensions
Moderate
9 days ago
GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()
pypi
GitPython
High
9 days ago
GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks
pypi
GitPython
Moderate
10 days ago
AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
pypi
awscli
Moderate
10 days ago
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
pypi
langgraph-checkpoint-sqlite, langgraph-checkpoint-postgres
High
12 days ago
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
pypi
open-webui
Moderate
12 days ago
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
pypi
open-webui
High
12 days ago
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
pypi
open-webui
Moderate
12 days ago
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
pypi
open-webui
Moderate
12 days ago
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
pypi
open-webui
Moderate
12 days ago
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
pypi
open-webui
Moderate
12 days ago
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
pypi
open-webui
Moderate
12 days ago
Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
pypi
open-webui
High
12 days ago
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
pypi
open-webui
High
12 days ago
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
pypi
open-webui
Moderate
12 days ago
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
pypi
open-webui
Moderate
12 days ago
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
pypi
open-webui
Low
12 days ago
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
pypi
open-webui
High
12 days ago
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
pypi
open-webui
Moderate
12 days ago
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
pypi
open-webui
High
12 days ago
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
pypi
open-webui
Moderate
13 days ago
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
pypi
cryptography
High
13 days ago
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
pypi
cryptography
High
13 days ago
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
pypi
cryptography
High
13 days ago
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
pypi
aiohttp
Moderate
13 days ago
AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
pypi
aiohttp
Moderate
13 days ago
GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count
pypi
GitPython
Moderate
13 days ago
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()
pypi
GitPython
Moderate
16 days ago
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
pypi
gemini-bridge
High
16 days ago
Thumbor has path traversal via post-validation URL decoding bypass in file_loader
pypi
thumbor
High
16 days ago
Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
pypi
thumbor
High
16 days ago
Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS
pypi
thumbor
High
16 days ago
Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature
pypi
thumbor
High
16 days ago
Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot
pypi
thumbor
High
16 days ago
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
pypi
nltk
Moderate
16 days ago
OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files
pypi
onionshare-cli
Moderate
16 days ago
OnionShare Receive mode writes uploaded files even when file uploads are disabled
pypi
onionshare-cli
High
17 days ago
Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
pypi
flyto-core
Critical
17 days ago
Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
pypi
flyto-core
High
17 days ago
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
pypi
flyto-core
Critical
17 days ago
Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
pypi
flyto-core
Moderate
17 days ago
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect
pypi
linuxfabrik-lib
High
18 days ago
proot-distro has a Container Isolation Bypass via Crafted Restore Archive
pypi
proot-distro
High
18 days ago
`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
pypi
proot-distro
Moderate
18 days ago
olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193
pypi
matrix-commander
Moderate
18 days ago
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
pypi
penelope-shell-handler
High
19 days ago
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`
pypi
datamodel-code-generator
High
19 days ago
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
pypi
datamodel-code-generator
High
19 days ago
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements
pypi
datamodel-code-generator
High
19 days ago
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
pypi
datamodel-code-generator
High
19 days ago
`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
pypi
datamodel-code-generator
Low
19 days ago
datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
pypi
datamodel-code-generator
High
19 days ago
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
pypi
datamodel-code-generator
High
19 days ago
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
npm, pypi, maven
qti-neon, com.quietterminal:qti-neon
High
23 days ago
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
pypi
bedrock-agentcore
High
23 days ago
AWS API MCP Server Security Policy Bypass via Startup Initialization Failure
pypi
awslabs.aws-api-mcp-server
High
23 days ago
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
pypi
vantage6
High
23 days ago
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
pypi
GitPython
High
23 days ago
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
pypi
open-webui
Moderate
23 days ago
Open WebUI: Arena task endpoints can bypass underlying model access controls
pypi
open-webui
Moderate
23 days ago
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
pypi
open-webui
Moderate
23 days ago
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
pypi
open-webui
High
23 days ago
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
pypi
yt-dlp
Moderate
23 days ago
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
pypi
open-webui
Low
23 days ago
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
pypi
open-webui
Filter by Severity
Filter by Package
tensorflow
433
tensorflow-cpu
409
tensorflow-gpu
398
open-webui
147
apache-airflow
128
Django
107
mlflow
79
salt
67
apache-superset
66
ansible
65
vllm
60
picklescan
59
django
56
Plone
54
gradio
49
pyload-ng
48
nova
48
aiohttp
47
matrix-synapse
45
vyper
44
rdiffweb
43
pillow
42
plone
41
pypdf
39
praisonai
39
keystone
39
PraisonAI
37
moin
35
praisonaiagents
33
Pillow
33
langflow
32
opencv-python
31
opencv-contrib-python
31
litellm
29
pgadmin4
26
GitPython
25
openbabel
24
cryptography
24
weblate
23
ethyca-fides
22
transformers
22
glance
21
langchain
21
neutron
21
praisonai-platform
21
lollms
20
OctoPrint
20
wagtail
20
aim
20
notebook
19
vantage6
19
mindsdb
19
mistune
19
keras
19
changedetection.io
19
nltk
19
urllib3
19
tornado
18
cobbler
18
mercurial
18
calibreweb
18
nicegui
17
nautobot
17
PaddlePaddle
16
paddlepaddle
16
bentoml
16
mobsf
16
h2o
16
sentry
15
ckan
15
wger
15
modoboa
15
pyftpdlib
14
jupyterlab
14
zenml
14
fickling
14
roundup
13
OpenEXR
13
onionshare-cli
13
agentscope
13
Glances
13
horizon
13
swift
13
onnx
13
trytond
13
twisted
12
jupyter-server
12
pip
12
datamodel-code-generator
12
ai.h2o:h2o-core
12
authlib
12
yt-dlp
12
label-studio
12
kiwitcms
12
copyparty
12
torch
12
indico
12
ray
11
langroid
11
Weblate
11
pretix
11
motioneye
11
homeassistant
10
Flask-AppBuilder
10
opencv-python-headless
10
lief
10
lemur
10
metagpt
10
openssl-encrypt
10
llama-index-core
10
bugsink
10
justhtml
10
waitress
10
hermes-agent
10
crawl4ai
10
langchain-core
9
stigmem-node
9
pywasm3
9
zope
9
cinder
9
llama-index
9
opencv-contrib-python-headless
9
sglang
9
starlette
9
litestar
9
ryu
9
python-multipart
9
requests
8
trac
8
glances
8
keylime
8
sagemaker
8
bbot
8
Zope2
8
ironic
8
python-keystoneclient
8
aubio
8
ipython
8
flyto-core
8
dulwich
8
numpy
8
codechecker
8
Zope
8
web2py
8
dtale
8
bleach
8
fastmcp
8
dbgpt
8
docling
8
prefect
8
inventree
7
ujson
7
ansible-core
7
scrapy
7
tuf
7
pysaml2
7
executorch
7
strawberry-graphql
7
lxml
7
rucio-webui
7
mayan-edms
7
fschat
7
matrix-sydent
7
jupyterhub
7
apache-airflow-providers-apache-hive
6
mailman
6
langchain-chatchat
6
graphite-web
6
AstrBot
6
torchserve
6
copier
6
Moin
6
Jinja2
6
werkzeug
6
DIRAC
6
mitmproxy
6
Flask-Security-Too
6
Mezzanine
6
mcp
6
pyjwt
6
whoogle-search
6
snowflake-connector-python
6
lmdeploy
6
guarddog
6
Werkzeug
6
esphome
6
compliance-trestle
6
oauthenticator
6
open-webui
6
pytorch-lightning
6
ait-core
6
mage-ai
6
thumbor
6
omero-web
6
Nova
5
nemo-toolkit
5
paramiko
5
feedparser
5
pymdown-extensions
5
setuptools
5
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/django/django
121
https://github.com/apache/airflow
105
https://github.com/ansible/ansible
59
https://github.com/python-pillow/Pillow
52
https://github.com/vyperlang/vyper
44
https://github.com/saltstack/salt
42
https://github.com/ikus060/rdiffweb
42
https://github.com/mmaitre314/picklescan
39
https://github.com/gradio-app/gradio
38
https://github.com/openstack/nova
38
https://github.com/plone/Products.CMFPlone
37
https://github.com/mlflow/mlflow
36
https://github.com/opencv/opencv
32
https://github.com/matrix-org/synapse
32
https://github.com/PaddlePaddle/Paddle
31
https://github.com/openstack/keystone
28
https://github.com/langchain-ai/langchain
25
https://github.com/vllm-project/vllm
25
https://github.com/pyload/pyload
24
https://github.com/run-llama/llama_index
24
https://github.com/ethyca/fides
20
https://github.com/huggingface/transformers
19
https://github.com/mindsdb/mindsdb
17
https://github.com/vantage6/vantage6
17
https://github.com/pyca/cryptography
16
https://github.com/aio-libs/aiohttp
15
https://github.com/cobbler/cobbler
15
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/janeczku/calibre-web
14
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/apache/superset
14
https://github.com/twisted/twisted
14
https://github.com/urllib3/urllib3
14
https://github.com/h2oai/h2o-3
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/modoboa/modoboa
13
https://github.com/zenml-io/zenml
13
https://github.com/wagtail/wagtail
12
https://github.com/getsentry/sentry
12
https://github.com/openstack/glance
12
https://github.com/nautobot/nautobot
12
https://github.com/scrapy/scrapy
11
https://github.com/open-webui/open-webui
11
https://github.com/onionshare/onionshare
11
https://github.com/parisneo/lollms
11
https://github.com/Pylons/waitress
10
https://github.com/HumanSignal/label-studio
10
https://github.com/ckan/ckan
10
https://github.com/jupyter/notebook
10
https://github.com/aimhubio/aim
9
https://github.com/openstack/horizon
9
https://github.com/giampaolo/pyftpdlib
9
https://github.com/WeblateOrg/weblate
9
https://github.com/faucetsdn/ryu
9
https://github.com/BerriAI/litellm
9
https://github.com/zopefoundation/Zope
9
https://github.com/lief-project/LIEF
9
https://github.com/element-hq/synapse
9
https://github.com/openstack/neutron
8
https://github.com/keras-team/keras
8
https://github.com/numpy/numpy
8
https://github.com/octoprint/octoprint
8
https://github.com/tornadoweb/tornado
8
https://github.com/9001/copyparty
8
https://github.com/kiwitcms/Kiwi
8
https://github.com/ipython/ipython
8
https://github.com/dgtlmoon/changedetection.io
8
https://github.com/pallets/werkzeug
8
https://github.com/openstack/cinder
7
https://github.com/pytorch/executorch
7
https://github.com/Ericsson/codechecker
7
https://github.com/pypa/pip
7
https://github.com/openstack/swift
7
https://github.com/indico/indico
7
https://github.com/jupyter-server/jupyter_server
7
https://sourceforge.net/projects/sourceforge.net
7
https://github.com/pallets/jinja
7
https://github.com/pytorch/pytorch
7
https://github.com/py-pdf/pypdf
7
https://github.com/aubio/aubio
7
https://github.com/benbusby/whoogle-search
6
https://github.com/graphite-project/graphite-web
6
https://github.com/snowflakedb/snowflake-connector-python
6
https://github.com/yt-dlp/yt-dlp
6
https://github.com/man-group/dtale
6
https://github.com/matrix-org/sydent
6
https://github.com/jupyterlab/jupyterlab
6
https://github.com/modelscope/agentscope
6
https://github.com/corydolphin/flask-cors
6
https://github.com/psf/requests
6
https://github.com/keylime/keylime
6
https://github.com/lxml/lxml
6
https://github.com/roundup-tracker/roundup
6
https://github.com/onnx/onnx
5
https://github.com/mitmproxy/mitmproxy
5
https://github.com/ome/omero-web
5
https://github.com/ComposioHQ/composio
5
https://github.com/gitpython-developers/GitPython
5
https://github.com/pytorch/serve
5
https://github.com/tryton/trytond
5
https://github.com/esphome/esphome
5
https://github.com/Exiv2/exiv2
5
https://github.com/bentoml/BentoML
5
https://github.com/home-assistant/core
5
https://github.com/TeamSeri0us/pocs
5
https://github.com/inventree/InvenTree
5
https://github.com/encode/starlette
5
https://github.com/mozilla/bleach
5
https://github.com/jupyterhub/oauthenticator
5
https://github.com/ray-project/ray
5
https://github.com/hwchase17/langchain
5
https://github.com/pallets/flask
4
https://github.com/grpc/grpc
4
https://github.com/zopefoundation/RestrictedPython
4
https://github.com/nltk/nltk
4
https://github.com/ietf-tools/xml2rfc
4
https://github.com/bottlepy/bottle
4
https://github.com/FreeTAKTeam/UI
4
https://github.com/jhpyle/docassemble
4
https://github.com/pretix/pretix
4
https://github.com/ronf/asyncssh
4
https://github.com/mlc-ai/xgrammar
4
https://github.com/rohe/pysaml2
4
https://github.com/eosphoros-ai/DB-GPT
4
https://github.com/hyperledger/indy-node
4
https://github.com/latchset/jwcrypto
4
https://github.com/NVIDIA/NVFlare
4
https://github.com/frappe/frappe
4
https://github.com/dbt-labs/dbt-core
4
https://github.com/hiyouga/LLaMA-Factory
4
https://github.com/saleor/saleor
4
https://github.com/web2py/web2py
4
https://github.com/berriai/litellm
4
https://github.com/jupyterhub/jupyterhub
4
https://github.com/langflow-ai/langflow
4
https://github.com/wasm3/wasm3
4
https://github.com/simonw/datasette
4
https://github.com/AcademySoftwareFoundation/openexr
4
https://github.com/blacklanternsecurity/bbot
4
https://github.com/pypa/setuptools
4
https://github.com/streamlit/streamlit
4
https://github.com/Kozea/Radicale
4
https://github.com/Cog-Creators/Red-DiscordBot
4
https://github.com/python-ldap/python-ldap
4
https://github.com/django-helpdesk/django-helpdesk
4
https://github.com/litestar-org/litestar
4
https://github.com/qutebrowser/qutebrowser
4
https://github.com/AcademySoftwareFoundation/MaterialX
4
https://github.com/gventuri/pandas-ai
3
https://github.com/skops-dev/skops
3
https://github.com/paramiko/paramiko
3
https://github.com/chatchat-space/Langchain-Chatchat
3
https://github.com/python/cpython
3
https://github.com/jpadilla/pyjwt
3
https://github.com/certifi/python-certifi
3
https://github.com/aws/aws-iot-device-sdk-java-v2
3
https://github.com/ansible/ansible-runner
3
https://github.com/Gerapy/Gerapy
3
https://github.com/stephenmcd/mezzanine
3
https://github.com/bytecodealliance/wasmtime
3
https://github.com/Kludex/python-multipart
3
https://github.com/ankitects/anki
3
https://github.com/pyinstaller/pyinstaller
3
https://github.com/NASA-AMMOS/AIT-Core
3
https://github.com/openstack/ironic
3
https://github.com/pyca/pyopenssl
3
https://github.com/theupdateframework/python-tuf
3
https://github.com/openstack/octavia
3
https://github.com/aws/aws-sam-cli
3
https://github.com/beancount/fava
3
https://github.com/impredicative/bitlyshortener
3
https://github.com/rochacbruno/quokka
3
https://github.com/Project-MONAI/MONAI
3
https://github.com/modelscope/ms-swift
3
https://github.com/theupdateframework/tuf
3
https://github.com/khoj-ai/khoj
3
https://github.com/sosreport/sos
3
https://github.com/andialbrecht/sqlparse
3
https://github.com/benoitc/gunicorn
3
https://github.com/pypa/advisory-db
3
https://github.com/invoke-ai/InvokeAI
3
https://github.com/openstack/python-keystoneclient
3
https://github.com/eventlet/eventlet
3
https://github.com/micropython/micropython
3
https://github.com/github/securitylab
3
https://gitlab.com/mayan-edms/mayan-edms
3
https://github.com/lepture/mistune
3
https://github.com/astral-sh/uv
3
https://github.com/langchain-ai/langgraph
3
https://github.com/djblets/djblets
3
https://github.com/poezio/slixmpp
3
https://sourceforge.net/projects/roject
3
https://github.com/IdentityPython/pysaml2
3
https://github.com/mpdavis/python-jose
3
https://github.com/jupyterhub/jupyter-server-proxy
3
https://github.com/jlowin/fastmcp
3
https://github.com/furlongm/openvpn-monitor
3