pypi

5,089 tracked vulnerabilities.

CVE-2021-32811 HIGH
Zope 4.0-4.6.2 and 5.0-5.2 - Remote Code Execution via Python Script Object Modification
Aug 02, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-32806 MEDIUM
Products.isurlinportal <1.2.0 - Open Redirect
Aug 02, 2021
CVSS 6.5
EPSS 0.01
CVE-2021-32807 MEDIUM
AccessControl 4.0-4.2 - Remote Code Execution via String Formatter Override
Jul 30, 2021
CVSS 4.4
EPSS 0.02
CVE-2021-23418 MEDIUM
glances < 3.2.1 - XML External Entity Injection via Fault XML Parser
Jul 29, 2021
CVSS 6.3
EPSS 0.02
CVE-2021-34552 CRITICAL
Pillow < 8.3.0 and PIL < 1.1.7 - Buffer Overflow in Convert.c
Jul 13, 2021
CVSS 9.8
EPSS 0.03
CVE-2021-32559 MEDIUM
pywin32 < 301 - Denial of Service via Integer Overflow in ACL Entry Addition
Jul 06, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-23401 MEDIUM
Flask-User - Open Redirect via URL Validation Bypass
Jul 05, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-35042 CRITICAL NUCLEI
Django <3.1.13, <3.2.5 - SQL Injection
Jul 02, 2021
CVSS 9.8
EPSS 0.44
CVE-2021-25951 HIGH
XML2Dict 0.2.2 - XML External Entity Denial of Service
Jun 30, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-35959 MEDIUM
Plone 5.0-5.2.4 - Stored Cross-Site Scripting in Folder Description Field
Jun 30, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-33503 HIGH
urllib3 >=1.25.4 <1.26.5 - Denial of Service via Authority Component Regex Backtracking
Jun 29, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-29063 HIGH
mpmath 1.0.0-1.2.1 - Regular Expression Denial of Service via mpmathify Function
Jun 21, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-32681 MEDIUM
Wagtail < 2.11.8, 2.12-2.12.4, 2.13-2.13.1 - Authenticated Stored Cross-Site Scripting via include_block Template Tag
Jun 17, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-23393 MEDIUM
Flask-Unchained < 0.9.0 - Open Redirect via Backslash Bypass in _validate_redirect_url
Jun 11, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-34363 CRITICAL
the_fuck < 3.31 - Path Traversal and Arbitrary File Deletion via Undo Archive Operation
Jun 10, 2021
CVSS 9.1
EPSS 0.02
CVE-2021-32677 HIGH
FastAPI < 0.65.2 - Cross-Site Request Forgery via JSON Payload in text/plain Content-Type
Jun 09, 2021
CVSS 8.2
EPSS 0.01
CVE-2021-33571 HIGH
Django <2.2.24, <3.1.12, <3.2.4 - Info Disclosure
Jun 08, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-33203 MEDIUM
Django <2.2.24, 3.x <3.1.12, 3.2.x <3.2.4 - Path Traversal
Jun 08, 2021
CVSS 4.9
EPSS 0.03
CVE-2021-32674 HIGH
Zope < 4.6.1 and 5.0-5.2.1 - Authenticated Path Traversal via TAL Expression
Jun 08, 2021
CVSS 8.8
EPSS 0.02
CVE-2021-32670 HIGH
Datasette < 0.56.1 - Reflected Cross-Site Scripting via _trace Debug Parameter
Jun 07, 2021
CVSS 7.2
EPSS 0.01
CVE-2021-29621 MEDIUM
Flask-AppBuilder <= 3.2.3 - Unauthenticated User Enumeration via Timing Attack
Jun 07, 2021
CVSS 5.3
EPSS 0.03
CVE-2021-33880 MEDIUM
websockets < 9.1 - Timing Attack via HTTP Basic Authentication
Jun 06, 2021
CVSS 5.9
EPSS 0.02
CVE-2021-28678 MEDIUM
Pillow < 8.2.0 - Denial of Service via BLP Image Data Handling
Jun 02, 2021
CVSS 5.5
EPSS 0.01
CVE-2021-28677 HIGH
Pillow < 8.2.0 - Denial of Service via EPS Line Ending Parsing
Jun 02, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-28676 HIGH
Pillow < 8.2.0 - Denial of Service via FLI Block Advance Infinite Loop
Jun 02, 2021
CVSS 7.5
EPSS 0.02
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 pgadmin4 26 openbabel 24 litellm 23
Quick Filters
Critical CVEs With Exploits In CISA KEV