Skip to content
OpenAdvisories

Ecosystem

PyPI

7,088 known vulnerabilities.

Most affected packages

tensorflow 434 tensorflow-cpu 430 tensorflow-gpu 427 django 162 open-webui 161 apache-airflow 158 pillow 119 vllm 113 praisonai 105 plone 101 mlflow 87 pypdf 69 salt 69 ansible 68 apache-superset 66 openssl-encrypt 60 pyload-ng 58 picklescan 58 aiohttp 55 nova 54 nltk 53 gradio 52 praisonaiagents 50 vyper 47 matrix-synapse 45 litellm 45 keystone 44 gitpython 44 rdiffweb 43 langflow 43 moin 41 weblate 37 pyassimp 33 opencv-python 32 opencv-contrib-python 32 paddlepaddle 32 transformers 32 wagtail 31 torch 31 mcp-atlassian 30
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-59822 Exploited Public exploit

    LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallbac…

    BerriAI litellm litellm PyPI
    KEV Sep 2, 2026
  • High 8.4
    CVE-2026-55255 Exploited Public exploit

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another use…

    langflow-ai langflow langflow PyPI
    KEV Jul 7, 2026
  • High 8.7
    CVE-2026-42271 Exploited Public exploit Scanner template EPSS 91%

    LiteLLM: Authenticated command execution via MCP stdio test endpoints

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/lis…

    BerriAI litellm airflow-3 litellm Wolfi PyPI
    KEV Jun 8, 2026
  • High 8.8
    CVE-2023-4863 Exploited Public exploit EPSS 100%

    libwebp: OOB write in BuildHuffmanTable

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

    Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
    KEV Sep 13, 2023
  • High 8.9
    CVE-2023-27524 Exploited Public exploit Scanner template EPSS 98%

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resour…

    Apache Software Foundation Apache Superset apache-superset PyPI
    KEV Jan 8, 2024
  • High 8.8
    CVE-2022-33891 Exploited Public exploit Scanner template EPSS 93%

    Apache Spark shell command injection vulnerability via Spark UI

    The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

    Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI
    KEV Mar 7, 2023
  • High 8.8
    CVE-2020-11978 Exploited Public exploit Scanner template EPSS 99%

    Remote code execution (RCE) in Apache Airflow

    An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user runnin…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
    KEV Jan 18, 2022