pypi
5,089 tracked vulnerabilities.
CVE-2021-29512
LOW
TensorFlow 2.3.0-2.3.3 - Heap Buffer Overflow in RaggedBincount Op
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-33026
CRITICAL
Flask-Caching <1.10.1 - Code Injection
May 13, 2021
CVSS 9.8
EPSS 0.07
CVE-2021-29510
LOW
pydantic < 1.6.2 - Denial of Service via Infinite Loop in DateTime Validation
May 13, 2021
CVSS 3.3
EPSS 0.01
CVE-2021-29471
LOW
Synapse < 1.33.2 - Denial of Service via Push Rule Event Match Pattern
May 11, 2021
CVSS 3.7
EPSS 0.02
CVE-2021-32561
MEDIUM
OctoPrint < 1.6.0 - Cross-Site Scripting via API Error Messages
May 11, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-32560
MEDIUM
OctoPrint < 1.6.0 - Unauthenticated Arbitrary File Write via Logging Subsystem
May 11, 2021
CVSS 6.5
EPSS 0.01
CVE-2021-21419
MEDIUM
eventlet >=0.10 <0.31.0 - Uncontrolled Resource Consumption via WebSocket Frame
May 07, 2021
CVSS 5.3
EPSS 0.02
CVE-2021-32091
MEDIUM
LocalStack 0.12.6 - Cross-Site Scripting
May 07, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-32090
CRITICAL
LocalStack < 0.12.10 - OS Command Injection via Dashboard functionName Parameter
May 07, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-32052
MEDIUM
Django 2.2-2.2.21, 3.1-3.1.9, 3.2-3.2.1 - Header Injection via URLValidator
May 06, 2021
CVSS 6.1
EPSS 0.03
CVE-2021-31542
HIGH
Django 2.2-2.2.20, 3.1-3.1.8, 3.2-3.2.0 - Path Traversal via Uploaded File Name
May 05, 2021
CVSS 7.5
EPSS 0.05
CVE-2021-31800
CRITICAL
Impacket < 0.9.22 - Path Traversal and Arbitrary File Write via SMB Server
May 05, 2021
CVSS 9.8
EPSS 0.19
CVE-2021-28359
MEDIUM
Apache Airflow <1.10.15 & <2.0.2 - XSS
May 02, 2021
CVSS 6.1
EPSS 0.14
CVE-2021-20228
HIGH
Ansible Engine 2.9.18 - Exposure of Sensitive Information via Basic.py Module Sub-Option Feature
Apr 29, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-28125
MEDIUM
Apache Superset <= 1.0.1 - Open Redirect
Apr 27, 2021
CVSS 6.1
EPSS 0.63
CVE-2021-31607
HIGH
SaltStack Salt 2016.9-3002.6 - OS Command Injection via Snapper Module
Apr 23, 2021
CVSS 7.8
EPSS 0.04
CVE-2021-29434
MEDIUM
Wagtail < 2.11.6, 2.11.0-2.11.7, 2.12.0-2.12.4 - Authenticated Stored Cross-Site Scripting via Rich Text Link URL
Apr 19, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-29432
MEDIUM
matrix-sydent < 2.3.0 - Arbitrary Email Spoofing via Identity Server
Apr 15, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-29431
HIGH
Sydent < 2.3.0 - Server-Side Request Forgery via HTTP GET Request
Apr 15, 2021
CVSS 7.7
EPSS 0.01
CVE-2021-29430
HIGH
Sydent < 2.3.0 - Unauthenticated Denial of Service via Unbounded HTTP Request/Response
Apr 15, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-29433
MEDIUM
Sydent < 2.3.0 - Uncontrolled Resource Consumption via Third-Party Identifier Confirmation Endpoint
Apr 15, 2021
CVSS 4.3
EPSS 0.01
CVE-2021-30459
CRITICAL
Jazzband Django Debug Toolbar <3.2.1 - SQL Injection
Apr 14, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-21393
MEDIUM
Synapse 0.24.0-1.27.9 - Denial of Service via Third-Party Identifier Confirmation Endpoint
Apr 12, 2021
CVSS 5.3
EPSS 0.02
CVE-2021-21392
MEDIUM
Synapse < 1.28.0 - Server-Side Request Forgery via Transitional IPv6 Address Handling
Apr 12, 2021
CVSS 6.3
EPSS 0.01
CVE-2021-21394
MEDIUM
Synapse 0.17.0-1.27.9 - Denial of Service via Third-Party Identifier Confirmation Endpoint
Apr 12, 2021
CVSS 5.3
EPSS 0.02
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
pgadmin4 26
openbabel 24
litellm 23
Quick Filters