pypi

5,089 tracked vulnerabilities.

CVE-2022-0338 MEDIUM
Conda loguru <0.5.3 - Info Disclosure
Jan 25, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-21699 HIGH
IPython < 5.10.0 - Arbitrary Code Execution via Cross-User Temporary File Mismanagement
Jan 19, 2022
CVSS 8.2
EPSS 0.01
CVE-2022-21694 LOW
OnionShare < 2.5 - Incorrect Permission Assignment for Critical Resource
Jan 18, 2022
CVSS 3.7
EPSS 0.01
CVE-2022-21692 MEDIUM
OnionShare < 2.5 - Improper Authentication in Chat Environment
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-21690 HIGH
OnionShare < 2.5 - Stored Cross-Site Scripting via URL Path Parameter
Jan 18, 2022
CVSS 8.7
EPSS 0.01
CVE-2022-21695 MEDIUM
OnionShare < 2.5 - Unauthenticated Message Spoofing in Chat
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-21693 MEDIUM
OnionShare < 2.5 - Path Traversal in User Home Directory
Jan 18, 2022
CVSS 6.3
EPSS 0.01
CVE-2022-21691 MEDIUM
OnionShare < 2.5 - Unauthenticated Channel Leave Message Spoofing
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-21689 HIGH
OnionShare < 2.5 - Denial of Service via Concurrent Upload Limit Exhaustion
Jan 18, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-21688 HIGH
OnionShare < 2.5 - Denial of Service via QT Image Parsing
Jan 18, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-21696 MEDIUM
OnionShare < 2.5 - Username Spoofing via Trailing Whitespace
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-21683 LOW
Wagtail 2.13-2.15.1 - Unauthorized Exposure of Sensitive Comment Thread Information
Jan 18, 2022
CVSS 3.5
EPSS 0.01
CVE-2022-21668 HIGH
pipenv 2018.10.9-2022.1.8 - Remote Code Execution via Malicious Requirements File Comment
Jan 10, 2022
CVSS 8.0
EPSS 0.04
CVE-2022-22846 HIGH
dnslib < 0.9.16 - DNS ID Spoofing
Jan 10, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-22821 LOW
NVIDIA NeMo < 1.6.0 - Authenticated Path Traversal in ASR WebApp
Jan 10, 2022
CVSS 2.0
EPSS 0.00
CVE-2022-22817 CRITICAL
Pillow < 9.0.1 - Remote Code Execution via ImageMath.eval Expression Injection
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22816 MEDIUM
Pillow < 9.0.0 - Out-of-bounds Read in ImagePath.Path Initialization
Jan 10, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-22815 MEDIUM
Pillow < 9.0.0 - Improper Initialization in ImagePath.Path
Jan 10, 2022
CVSS 6.5
EPSS 0.03
CVE-2021-47935 HIGH
Sentry 8.2.0 Remote Code Execution via Pickle Deserialization
May 10, 2026
CVSS 8.8
EPSS 0.01
CVE-2021-4472 MEDIUM
Mistral-OpenStack - Info Disclosure
Nov 26, 2025
CVSS 6.5
EPSS 0.00
CVE-2021-3988 MEDIUM
calibre-web < 0.6.15 - Stored Cross-Site Scripting in Book Edit Function via Cover Upload
Nov 15, 2024
CVSS 6.1
EPSS 0.00
CVE-2021-3987 MEDIUM
calibre-web < 0.6.15 - Improper Access Control in Shelf Creation
Nov 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2021-3986 MEDIUM
calibre-web < 0.6.15 - Unauthorized Private Shelf Name Disclosure via Error Message
Nov 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2021-46898 MEDIUM
Django Grappelli <2.15.2 - Open Redirect
Oct 22, 2023
CVSS 6.1
EPSS 0.00
CVE-2021-46897 MEDIUM
Wagtail CRX CodeRed Extensions <0.22.3 - Path Traversal
Oct 22, 2023
CVSS 6.5
EPSS 0.01