Skip to content
OpenAdvisories

Vendor

devpi

1 known vulnerabilities.

Products

devpi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-54723

    devpi: Database contents leak

    devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.20.2 and 7.0.0b3, a server configured with the primary or deprecated master role allows an unauthenticated, modified GET request to the +changelog route becaus…

    devpi devpi devpi-server PyPI