PyPI Package Vulnerabilities

All 1,417 Python packages with known CVEs, ranked by live CVE volume — 6,728 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.tensorflow427 CVEs
  2. 2.tensorflow-cpu424 CVEs
  3. 3.tensorflow-gpu421 CVEs
  4. 4.django159 CVEs
  5. 5.apache-airflow139 CVEs
  6. 6.open-webui106 CVEs
  7. 7.plone101 CVEs
  8. 8.mlflow77 CVEs
  9. 9.praisonai77 CVEs
  10. 10.pillow74 CVEs
  11. 11.salt69 CVEs
  12. 12.ansible67 CVEs
  13. 13.apache-superset61 CVEs
  14. 14.picklescan58 CVEs
  15. 15.vllm56 CVEs
  16. 16.nova54 CVEs
  17. 17.gradio50 CVEs
  18. 18.pyload-ng45 CVEs
  19. 19.aiohttp44 CVEs
  20. 20.keystone44 CVEs
  21. 21.matrix-synapse44 CVEs
  22. 22.rdiffweb43 CVEs
  23. 23.moin41 CVEs
  24. 24.vyper40 CVEs
  25. 25.pyassimp33 CVEs
  26. 26.weblate33 CVEs
  27. 27.paddlepaddle32 CVEs
  28. 28.praisonaiagents32 CVEs
  29. 29.langflow31 CVEs
  30. 30.torch31 CVEs
  31. 31.opencv-contrib-python30 CVEs
  32. 32.opencv-python30 CVEs
  33. 33.transformers30 CVEs
  34. 34.pgadmin428 CVEs
  35. 35.pypdf28 CVEs
  36. 36.litellm27 CVEs
  37. 37.octoprint24 CVEs
  38. 38.openbabel24 CVEs
  39. 39.wagtail24 CVEs
  40. 40.mindsdb23 CVEs
  41. 41.ethyca-fides22 CVEs
  42. 42.glance22 CVEs
  43. 43.langchain22 CVEs
  44. 44.llama-index22 CVEs
  45. 45.lollms22 CVEs
  46. 46.chuanhuchatgpt21 CVEs
  47. 47.neutron21 CVEs
  48. 48.praisonai-platform21 CVEs
  49. 49.pycti21 CVEs
  50. 50.aim20 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →