Developer Tools
Snyk Learn
Snyk Advisor
Code Checker
About Snyk
Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
Expand this section
APPLICATION
Cargo
cocoapods
Composer
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
Expand this section
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
M
Missing Authorization
chainlit
[,1.3.1)
pip
1 Nov 2024
C
Command Injection
deepspeed
[,0.15.2)
pip
1 Nov 2024
C
Deserialization of Untrusted Data
kedro
[,0.19.9)
pip
1 Nov 2024
H
Race Condition
gradio
[,5.0.0b5)
pip
1 Nov 2024
M
Cross-site Scripting (XSS)
markdown2
[,2.5.1)
pip
1 Nov 2024
M
Cross-site Scripting (XSS)
markdown2
[,2.5.1)
pip
1 Nov 2024
M
SQL Injection
mysql-connector-python
[,8.0.11)
pip
1 Nov 2024
H
Race Condition
gevent
[,24.10.1)
pip
1 Nov 2024
C
Arbitrary Code Injection
langflow
[0,]
pip
31 Oct 2024
M
Cross-site Scripting (XSS)
lollms
[0,]
pip
30 Oct 2024
L
SQL Injection
langchain-community
[0.2.5,0.2.19)
pip
30 Oct 2024
C
Time-of-check Time-of-use (TOCTOU) Race Condition
waitress
[2.0.0,3.0.1)
pip
29 Oct 2024
H
Missing Release of Resource after Effective Lifetime
waitress
[,3.0.1)
pip
29 Oct 2024
C
Command Injection
pyload-ng
[,0.5.0b3.dev87)
pip
28 Oct 2024
M
Allocation of Resources Without Limits or Throttling
quart
[,0.19.7)
pip
27 Oct 2024
M
Allocation of Resources Without Limits or Throttling
werkzeug
[,3.0.6)
pip
27 Oct 2024
M
Directory Traversal
werkzeug
[,3.0.6)
pip
27 Oct 2024
L
Insecure Temporary File
buzz-captions
[0,]
pip
25 Oct 2024
M
Insertion of Sensitive Information into Log File
snowflake-connector-python
[,3.12.3)
pip
25 Oct 2024
C
Deserialization of Untrusted Data
llama-stack
[,0.0.41)
pip
24 Oct 2024
H
Heap-based Buffer Overflow
curl-cffi
[,0.7.0b6)
pip
23 Oct 2024
C
Arbitrary Command Injection
deepspeed
[,0.15.1)
pip
18 Oct 2024
L
Arbitrary Code Injection
flair
[0,]
pip
18 Oct 2024
H
Use of Cache Containing Sensitive Information
querycommander
[,0.9.1)
pip
17 Oct 2024
M
Command Injection
pyninja
[,0.0.4)
pip
17 Oct 2024
H
Improper Authentication
pyninja
[,0.0.4)
pip
17 Oct 2024
H
Access Control Bypass
mysql-connector-python
[,9.1.0)
pip
17 Oct 2024
H
Allocation of Resources Without Limits or Throttling
starlette
[,0.40.0)
pip
15 Oct 2024
M
Incorrect Authorization
opencanary
[,0.9.4)
pip
15 Oct 2024
C
Malicious Package
browser-cookies3
[0,]
pip
13 Oct 2024