Python (PyPI) vulnerabilities
6,943 vulnerabilities and 11,940 malicious packages in Python (PyPI). tensorflow has the most reviewed advisories.
Most exploited Python (PyPI) vulnerabilities
- CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere
- CVE-2025-3248 Langflow Missing Authentication
- CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass
- CVE-2020-16846 SaltStack Salt Shell Injection
- CVE-2020-11651 SaltStack Salt Authentication Bypass
- CVE-2025-34291 Langflow Origin Validation Error
- CVE-2025-62593 Ray-Project Ray Code Injection
- CVE-2026-64849 MLflow Server-Side Request Forgery
- CVE-2026-42208 BerriAI LiteLLM SQL Injection
- CVE-2026-39987 Marimo Remote Code Execution
- CVE-2026-33017 Langflow Code Injection
- CVE-2026-111497 Google Brotli Unchecked Return Value
Python (PyPI) packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.