Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
URL Redirection to Untrusted Site ('Open Redirect')		scout-browser[,4.89)pip1 Oct 2024
  • M
Improper Escaping of Output		scout-browser[,4.89)pip1 Oct 2024
  • H
Server-side Request Forgery (SSRF)		prefect[,2.20.11)[3.0.0rc1,3.0.2)pip1 Oct 2024
  • M
HTTP Header Injection		eventlet[,0.37.0)pip1 Oct 2024
  • C
Arbitrary Code Execution		jsonpickle[,3.3.0)pip1 Oct 2024
  • M
Command Injection		virtualenv[,20.26.6)pip1 Oct 2024
  • M
Uncaught Exception		restrictedpython[,7.3)pip30 Sept 2024
  • M
Regular Expression Denial of Service (ReDoS)		langflow[0,]pip27 Sept 2024
  • M
Cross-Site Request Forgery (CSRF)		strawberry-graphql[,0.243.0)pip26 Sept 2024
  • H
Information Exposure		pgadmin4[,8.12)pip24 Sept 2024
  • M
Remote Code Execution (RCE)		dtale[,3.14.1)pip24 Sept 2024
  • M
Server-side Request Forgery (SSRF)		doccano[0,]pip24 Sept 2024
  • M
Improper Neutralization of Special Elements Used in a Template Engine		auto-labeling-pipeline[0,]pip24 Sept 2024
  • C
Malicious Package		minisound[0,]pip23 Sept 2024
  • C
Malicious Package		beautifultext[0,]pip23 Sept 2024
  • C
Malicious Package		coloredtxt[0,]pip23 Sept 2024
  • C
Malicious Package		real-ids[0,]pip23 Sept 2024
  • L
Cross-site Scripting (XSS)		confidant[,7.0.0)pip22 Sept 2024
  • M
Deserialization of Untrusted Data		dm-reverb[0,]pip20 Sept 2024
  • M
Deserialization of Untrusted Data		sqlitedict[0,]pip19 Sept 2024
  • H
Path Traversal		mesop[0.9.0,0.12.4)pip19 Sept 2024
  • M
Eval Injection		langchain-experimental[0.0.58,0.3.1)pip19 Sept 2024
  • H
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')		guardrails-ai[0.2.9,0.5.10)pip19 Sept 2024
  • M
Uncontrolled Resource Consumption ('Resource Exhaustion')		vllm[,0.6.3)pip18 Sept 2024
  • M
Deserialization of Untrusted Data		langchain[,0.2.10)pip18 Sept 2024
  • H
Improper Validation of Syntactic Correctness of Input		vllm[,0.5.5)pip15 Sept 2024
  • M
Arbitrary File Read		composio-core[,0.5.0)pip15 Sept 2024
  • M
Code Injection		composio-core[0,]pip15 Sept 2024
  • M
Exposure of Sensitive Information in Log Files		ansible-core[,2.14.18rc1)pip15 Sept 2024
  • H
Server-Side Request Forgery (SSRF)		litellm[,1.44.8)pip15 Sept 2024