Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2024-12761Denial of Service in brycedrennan/imaginairyPyPI · imaginairy
- CVE-2024-11042Arbitrary File Delete in invoke-ai/invokeaiPyPI · invokeai · fixed in 5.3.0rc1
- CVE-2024-9340Denial of Service (DoS) via Multipart Boundary in zenml-io/zenmlPyPI · zenml · fixed in 0.68.0
- CVE-2024-8019Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightningPyPI · lightning, pytorch-lightning · fixed in 2.4.0
- CVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchainPyPI · langchain-core · fixed in 0.1.53, 0.2.43, 0.3.15
- CVE-2025-0190Denial of Service in aimhubio/aimPyPI · aim
- CVE-2024-10713Denial of Service (DoS) via Multipart Request in szad670401/hyperlprPyPI · hyperlpr3
- CVE-2024-7765Denial of Service in h2oai/h2o-3PyPI · h2o
- CVE-2024-12029Remote Code Execution via Model Deserialization in invoke-ai/invokeaiPyPI · invokeai · fixed in 5.4.3rc2, 5.4.3rc1
- CVE-2024-8501Arbitrary File Download in modelscope/agentscopePyPI · agentscope
- CVE-2025-29783vLLM Allows Remote Code Execution via Mooncake IntegrationPyPI · vllm · fixed in 0.8.0
- CVE-2025-29770vLLM denial of service via outlines unbounded cache on diskPyPI · vllm · fixed in 0.8.0
- CVE-2025-27018Apache Airflow MySQL Provider: SQL injection in MySQL provider core functionPyPI · apache-airflow-providers-mysql · fixed in 6.2.0
- CVE-2025-2368WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflowPyPI · wabt-bin
- CVE-2025-1057Keylime: keylime registrar dos due to incompatible database entry handlingPyPI · keylime · fixed in 7.12.1
- CVE-2025-29780Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix OperationsPyPI · postquantum-feldman-vss
- CVE-2025-29779Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`PyPI · postquantum-feldman-vss
- CVE-2025-2000Qiskit SDK code executionPyPI · qiskit, qiskit-terra · fixed in 1.4.2, 2.0.0rc2
- CVE-2024-27763XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in tPyPI · basicsr
- CVE-2025-24986Azure Promptflow Remote Code Execution VulnerabilityPyPI · promptflow-core, promptflow-tools · fixed in 1.17.2, 1.6.0
- CVE-2025-1550Arbitrary Code Execution via Crafted Keras Config for Model LoadingPyPI · keras · fixed in 3.8.0, 3.9.0
- CVE-2025-1497Remote Code Execution in PlotAIPyPI · plotai · fixed in 0.0.7
- CVE-2025-2152Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflowPyPI · pyassimp
- CVE-2025-2151Open Asset Import Library Assimp File ParsingUtils.h GetNextLine stack-based overflowPyPI · pyassimp
- CVE-2025-2149PyTorch Quantized Sigmoid Module nnq_Sigmoid initializationPyPI · torch
- CVE-2025-2148PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruptionPyPI · torch
- CVE-2025-1945picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorchPyPI · picklescan · fixed in 0.0.23
- CVE-2025-1944picklescan ZIP archive manipulation attack leads to crashPyPI · picklescan · fixed in 0.0.23
- CVE-2025-1979Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is beiPyPI · ray · fixed in 2.43.0
- CVE-2025-26699An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20.PyPI · django · fixed in 4.2.20, 5.0.13, 5.1.7