VulertSecurity VulertSecurity

Vulnerability Database · Search

PyPI vulnerabilities — 26,451 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated CVE-2005-4644: Cross-Site Scripting (XSS) in Trac trac PyPI 31 Dec 2005 0.10
Unrated CVE-2006-0847: Directory Traversal Vulnerability in CherryPy cherrypy PyPI 22 Feb 2006 2.1.1
Unrated CVE-2006-2458: Heap-Based Buffer Overflows in Extractor Package extractor PyPI 18 May 2006 No fix published
Unrated CVE-2006-3458: Zope2 Arbitrary File Read Vulnerability zope2 PyPI 07 Jul 2006 No fix published
Unrated CVE-2006-3695: Trac Arbitrary File Read and XSS Vulnerability trac PyPI 21 Jul 2006 0.9.6
Unrated CVE-2006-4684: Vulnerability in Zope2's docutils Module Allows Arbitrary File Read zope2 PyPI 19 Sep 2006 No fix published
Unrated CVE-2006-4247: Plone Password Reset Tool Vulnerability Allows Unauthorized Password Resets plone PyPI 29 Sep 2006 No fix published
Unrated CVE-2006-4247: Plone Password Reset Tool Vulnerability Allows Unauthorized Password Resets plone PyPI 29 Sep 2006 2.5.1
Unrated CVE-2006-5878: Cross-Site Request Forgery (CSRF) Vulnerability in Trac trac PyPI 14 Nov 2006 0.11
Unrated CVE-2006-4249: Plone Package Vulnerability Allows Group Masquerading plone PyPI 07 Dec 2006 2.5.2
Unrated CVE-2006-4249: Plone Package Vulnerability Allows Group Masquerading plone PyPI 07 Dec 2006 No fix published
Unrated CVE-2007-1405: Cross-Site Scripting (XSS) in Trac trac PyPI 10 Mar 2007 0.10.3.1
Unrated CVE-2007-1406: Trac Content-Disposition Header Missing Attachment trac PyPI 10 Mar 2007 0.10.3.1
Unrated CVE-2007-5712: Django Internationalization Denial of Service django PyPI 30 Oct 2007 1.1
Unrated CVE-2007-5741: Plone Remote Code Execution via Untrusted Pickled Objects plone PyPI 07 Nov 2007 2.5.5
Unrated CVE-2008-0252: Directory Traversal Vulnerability in CherryPy cherrypy PyPI 12 Jan 2008 2.1.1
Unrated CVE-2008-0299: Paramiko common.py Information Disclosure paramiko PyPI 16 Jan 2008 1.7.2
Unrated CVE-2008-0164: Plone CMS Cross-Site Request Forgery Vulnerabilities plone PyPI 20 Mar 2008 3.1
Unrated CVE-2008-0164: Plone CMS Cross-Site Request Forgery Vulnerabilities plone PyPI 20 Mar 2008 No fix published
Unrated CVE-2008-1475: Roundup XML-RPC Server Property Permissions Bypass roundup PyPI 24 Mar 2008 1.4.5

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.