pypi
5,089 tracked vulnerabilities.
CVE-2021-25926
MEDIUM
SiCKRAGE 9.3.54-10.0.11 - Reflected Cross-Site Scripting via Quicksearch Feature
Apr 12, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-25925
MEDIUM
SiCKRAGE 4.2.0-10.0.11.dev1 - Stored Cross-Site Scripting
Apr 12, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-21431
HIGH
sopel-channelmgnt < 2.0.1 - Improper Access Control via Multi-User Kick Command
Apr 09, 2021
CVSS 7.6
EPSS 0.01
CVE-2021-30185
HIGH
CERN Indico < 2.3.4 - Password Reset Link Manipulation via Host Header
Apr 07, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-21423
MEDIUM
projen < 0.16.41 - Unauthenticated Exposure of Version-Control Repository via Rebuild-Bot Workflow
Apr 06, 2021
CVSS 6.8
EPSS 0.01
CVE-2021-28658
MEDIUM
Django 2.2-2.2.19, 3.0-3.0.13, 3.1-3.1.7 - Path Traversal via Multipart File Upload
Apr 06, 2021
CVSS 5.3
EPSS 0.04
CVE-2021-21416
LOW
django-registration < 3.1.2 - Sensitive Information Exposure in Error Reports
Apr 01, 2021
CVSS 3.7
EPSS 0.00
CVE-2021-29421
HIGH
pikepdf 1.3.0-2.9.2 - XML External Entity Injection in XMP Metadata Parser
Apr 01, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-21333
MEDIUM
Synapse < 1.27.0 - HTML Injection in Notification Emails
Mar 26, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-21332
MEDIUM
Synapse < 1.27.0 - Cross-Site Scripting via Password Reset Endpoint
Mar 26, 2021
CVSS 6.9
EPSS 0.01
CVE-2021-21386
CRITICAL
APKLeaks < 2.0.3 - OS Command Injection via Package Name in Application Manifest
Mar 24, 2021
CVSS 9.3
EPSS 0.02
CVE-2021-29002
MEDIUM
Plone CMS 5.2.3 - Stored Cross-Site Scripting via Site Control Panel Site Title Parameter
Mar 24, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-21401
HIGH
Nanopb <0.3.9.8-0.4.5 - Memory Corruption
Mar 23, 2021
CVSS 7.1
EPSS 0.02
CVE-2021-20270
HIGH
Pygments 1.5-2.7.3 - Denial of Service via SMLLexer Infinite Loop
Mar 23, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-21377
MEDIUM
OMERO.web < 5.9.0 - Open Redirect via Unvalidated URL Parameter
Mar 23, 2021
CVSS 4.8
EPSS 0.01
CVE-2021-21376
MEDIUM
OMERO.web < 5.9.0 - Exposure of Sensitive User Information
Mar 23, 2021
CVSS 6.4
EPSS 0.01
CVE-2021-28957
MEDIUM
lxml < 4.6.3 - Cross-Site Scripting via Formaction Attribute Bypass
Mar 21, 2021
CVSS 6.1
EPSS 0.04
CVE-2021-25293
HIGH
Pillow < 8.1.1 - Out-of-bounds Read in SGIRleDecode.c
Mar 19, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-25292
MEDIUM
Pillow < 8.1.1 - Denial of Service via PDF Parser Regex Backtracking
Mar 19, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-25291
HIGH
Pillow < 8.1.1 - Out-of-bounds Read in TiffreadRGBATile
Mar 19, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-25290
HIGH
Pillow < 8.1.1 - Out-of-bounds Write in TiffDecode.c
Mar 19, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-25289
CRITICAL
Pillow < 8.1.1 - Heap-Based Buffer Overflow in TiffDecode
Mar 19, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-28667
HIGH
StackStorm < 3.4.1 - Denial of Service via Unicode Logging in Non-UTF-8 Locale
Mar 18, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-27291
HIGH
Pygments 1.1-2.7.3 - Denial of Service via Inefficient Regular Expression Complexity
Mar 17, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-28363
MEDIUM
urllib3 1.26.0-1.26.3 - Improper Certificate Validation in HTTPS Proxy Connections
Mar 15, 2021
CVSS 6.5
EPSS 0.02
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
pgadmin4 26
openbabel 24
litellm 23
Quick Filters