PyPI Package Vulnerabilities
All 1,567 Python packages with known CVEs, ranked by live CVE volume — 7,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 951.farm-haystack1 CVE
- 952.fast-agent-mcp1 CVE
- 953.fastapi-api-key1 CVE
- 954.fastapi-opa1 CVE
- 955.fastapi-sso1 CVE
- 956.fastapi-users1 CVE
- 957.fastbots1 CVE
- 958.fastfeedparser1 CVE
- 959.fast-mcp-telegram1 CVE
- 960.fedmsg1 CVE
- 961.feedgen1 CVE
- 962.fiftyone1 CVE
- 963.firefighter-incident1 CVE
- 964.flair1 CVE
- 965.flash-attn1 CVE
- 966.flask-admin1 CVE
- 967.flaskbb1 CVE
- 968.flask-caching1 CVE
- 969.flask-httpauth1 CVE
- 970.flask-oidc1 CVE
- 971.flask-restx1 CVE
- 972.flask-security1 CVE
- 973.flask-session-captcha1 CVE
- 974.flask-unchained1 CVE
- 975.flask-user1 CVE
- 976.flawfinder1 CVE
- 977.flexible-graphrag1 CVE
- 978.flower1 CVE
- 979.foreman-mcp-server1 CVE
- 980.formencode1 CVE
- 981.fsspec1 CVE
- 982.fugue1 CVE
- 983.gakido1 CVE
- 984.galaxy-app1 CVE
- 985.galaxy-auth1 CVE
- 986.galaxy-data1 CVE
- 987.galaxy-importer1 CVE
- 988.galaxy-ng1 CVE
- 989.ganga1 CVE
- 990.garminconnect1 CVE
- 991.gateone1 CVE
- 992.gdown1 CVE
- 993.gemini-bridge1 CVE
- 994.geolens1 CVE
- 995.geolens-cli1 CVE
- 996.geopandas1 CVE
- 997.geopy1 CVE
- 998.gevent1 CVE
- 999.gi-docgen1 CVE
- 1,000.giskard1 CVE
Which PyPI packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →