PyPI Package Vulnerabilities

All 1,567 Python packages with known CVEs, ranked by live CVE volume — 7,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 501.django-s3file2 CVEs
  2. 502.dnspython2 CVEs
  3. 503.document-merge-service2 CVEs
  4. 504.duckdb2 CVEs
  5. 505.ebookmeta2 CVEs
  6. 506.ekuiper2 CVEs
  7. 507.elastic-apm2 CVEs
  8. 508.embedchain2 CVEs
  9. 509.esphome-device-builder2 CVEs
  10. 510.fastapi2 CVEs
  11. 511.fastapi-admin2 CVEs
  12. 512.fastecdsa2 CVEs
  13. 513.flaskcode2 CVEs
  14. 514.flask-reuploaded2 CVEs
  15. 515.fonttools2 CVEs
  16. 516.fpdf22 CVEs
  17. 517.freetakserver2 CVEs
  18. 518.freewvs2 CVEs
  19. 519.frigate2 CVEs
  20. 520.future2 CVEs
  21. 521.giskard-checks2 CVEs
  22. 522.google-cloud-aiplatform2 CVEs
  23. 523.granian2 CVEs
  24. 524.h22 CVEs
  25. 525.ha-mcp2 CVEs
  26. 526.hpack2 CVEs
  27. 527.html5lib2 CVEs
  28. 528.idna2 CVEs
  29. 529.instructlab2 CVEs
  30. 530.ironic-inspector2 CVEs
  31. 531.ironic-python-agent2 CVEs
  32. 532.irrd2 CVEs
  33. 533.joblib2 CVEs
  34. 534.jubatus2 CVEs
  35. 535.jupyter-core2 CVEs
  36. 536.jupyterhub-ltiauthenticator2 CVEs
  37. 537.kafka-python2 CVEs
  38. 538.kedro-datasets2 CVEs
  39. 539.keycloak-httpd-client-install2 CVEs
  40. 540.knack2 CVEs
  41. 541.langchain-exa2 CVEs
  42. 542.langchain-text-splitters2 CVEs
  43. 543.langgraph-checkpoint-postgres2 CVEs
  44. 544.libosdp2 CVEs
  45. 545.libp2p2 CVEs
  46. 546.libusb2 CVEs
  47. 547.limited-shell2 CVEs
  48. 548.llama-index-readers-obsidian2 CVEs
  49. 549.llama-index-readers-papers2 CVEs
  50. 550.llama-stack2 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →