PyPI Package Vulnerabilities

All 1,567 Python packages with known CVEs, ranked by live CVE volume — 7,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.pymdown-extensions5 CVEs
  2. 252.pyopenssl5 CVEs
  3. 253.python-gnupg5 CVEs
  4. 254.python-jose5 CVEs
  5. 255.setuptools5 CVEs
  6. 256.smolagents5 CVEs
  7. 257.streamlit5 CVEs
  8. 258.tendenci5 CVEs
  9. 259.torchserve5 CVEs
  10. 260.tripleo-heat-templates5 CVEs
  11. 261.tuf5 CVEs
  12. 262.uv5 CVEs
  13. 263.vantage6-server5 CVEs
  14. 264.weasyprint5 CVEs
  15. 265.wlc5 CVEs
  16. 266.zeroconf5 CVEs
  17. 267.apache-airflow-providers-amazon4 CVEs
  18. 268.apache-dolphinscheduler4 CVEs
  19. 269.apache-submarine4 CVEs
  20. 270.awsiotsdk4 CVEs
  21. 271.barbican4 CVEs
  22. 272.black4 CVEs
  23. 273.bottle4 CVEs
  24. 274.brotli4 CVEs
  25. 275.buildbot4 CVEs
  26. 276.cairosvg4 CVEs
  27. 277.cbor24 CVEs
  28. 278.chromadb4 CVEs
  29. 279.clearml4 CVEs
  30. 280.dbt-mcp4 CVEs
  31. 281.democritus-file-system4 CVEs
  32. 282.democritus-urls4 CVEs
  33. 283.django-helpdesk4 CVEs
  34. 284.django-unicorn4 CVEs
  35. 285.ecdsa4 CVEs
  36. 286.feast4 CVEs
  37. 287.flask-security-too4 CVEs
  38. 288.frappe4 CVEs
  39. 289.freetakserver-ui4 CVEs
  40. 290.guardrails-ai4 CVEs
  41. 291.httpie4 CVEs
  42. 292.httplib24 CVEs
  43. 293.hydra-core4 CVEs
  44. 294.indy-node4 CVEs
  45. 295.kedro4 CVEs
  46. 296.koji4 CVEs
  47. 297.langsmith4 CVEs
  48. 298.lin-cms4 CVEs
  49. 299.llamafactory4 CVEs
  50. 300.lxml-html-clean4 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →