Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo
cocoapods
Composer
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
M
Denial of Service (DoS)
django
[4.2,4.2.18)
[5.0,5.0.11)
[5.1,5.1.5)
pip
15 Jan 2025
M
Insufficient Type Distinction
strawberry-graphql
[0.182.0,0.257.0)
pip
10 Jan 2025
M
Race Condition
pgadmin4
[,7.0)
pip
9 Jan 2025
H
Arbitrary Command Injection
composio-core
[,0.6.9)
pip
9 Jan 2025
M
Open Redirect
sickchill
[0,]
pip
9 Jan 2025
H
Insufficient Session Expiration
apache-airflow-providers-fab
[,1.5.2rc1)
pip
8 Jan 2025
H
Improper Authentication
nicegui
[,2.9.1)
pip
7 Jan 2025
C
Malicious Package
monoliht
[0,]
pip
5 Jan 2025
H
Server-side Request Forgery (SSRF)
timetagger
[,24.12.2)
pip
2 Jan 2025
M
Improper Check for Unusual or Exceptional Conditions
nipype
[,1.8.3)
pip
2 Jan 2025
H
Race Condition
psyclone
[,3.0.0)
pip
1 Jan 2025
M
Improper Authorization
pyninja
[,1.1.0)
pip
1 Jan 2025
H
Improper Verification of Cryptographic Signature
joserfc
[,0.11.0)
pip
1 Jan 2025
M
Improper Access Control
gpt-researcher
[,0.10.4)
pip
1 Jan 2025
H
Race Condition
amici
[,0.29.0)
pip
1 Jan 2025
M
Reliance on Cookies without Validation and Integrity Checking
yt-dlp
[,2023.9.24)
pip
1 Jan 2025
C
Deserialization of Untrusted Data
diffusion-model-framework
[,0.1.2rc2)
pip
1 Jan 2025
M
Cross-site Scripting (XSS)
collaborative-article-sharing
[,0.1.0b2)
pip
1 Jan 2025
M
Information Exposure
collaborative-article-sharing
[,0.1.0b2)
pip
1 Jan 2025
M
Timing Attack
django-allauth
[,65.3.0)
pip
1 Jan 2025
M
Authorization Bypass Through User-Controlled Key
khoj
[,1.29.0)
pip
31 Dec 2024
H
Server-side Request Forgery (SSRF)
fastchat
[0,]
pip
30 Dec 2024
M
Missing Authorization
letta
[,0.5.2)
pip
29 Dec 2024
C
Directory Traversal
changedetection.io
[,0.48.5)
pip
29 Dec 2024
H
SQL Injection
python-sql
[,1.5.2)
pip
27 Dec 2024
H
SQL Injection
redshift-connector
[2.1.4,2.1.5)
pip
25 Dec 2024
C
Malicious Package
cometlogger
[0,]
pip
24 Dec 2024
C
Malicious Package
zebo
[0,]
pip
24 Dec 2024
M
Improper Encoding or Escaping of Output
koji
[,1.33.2)
[1.34.0,1.34.3)
[1.35.0,1.35.1)
pip
24 Dec 2024
H
Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
aptrs
[0,]
pip
24 Dec 2024