Pypi

16 CVEs across 15 Pypi products. Browse Pypi vulnerabilities, severities, and proof-of-concept exploits.

Pypi products with known CVEs

ProductCVEs
Pypi2
Aamiles1
Beginner1
Bsdiff41
Cloudlabeling1
Cryptoasset-Data-Downloader1
Django-Navbar-Client1
Dr-Web-Engine1
Drxhello1
Explore1
Ml-Scanner1
Perdido1
Rootinteractive1
Watertools1
Watools1
Pypi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-34501Critical9.82022-07-22The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34500Critical9.82022-07-22The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34056Critical9.82022-06-24The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to acces…
CVE-2022-34055Critical9.82022-06-24The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access…
CVE-2022-34054Critical9.82022-06-24The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers t…
CVE-2022-34053Critical9.82022-06-24The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to…
CVE-2022-33004Critical9.82022-06-24The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers…
CVE-2022-33003Critical9.82022-06-24The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers t…
CVE-2022-33002Critical9.82022-06-24The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers…
CVE-2022-33001Critical9.82022-06-24The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access s…
CVE-2022-33000Critical9.82022-06-24The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attacker…
CVE-2022-32999Critical9.82022-06-24The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to ac…
CVE-2022-32998Critical9.82022-06-24The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerabilit…
CVE-2022-32997Critical9.82022-06-24The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows…
CVE-2022-32996Critical9.82022-06-24The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows at…
CVE-2020-15904High7.82020-07-22A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.