PyPI — vulnerability landscape

Every CVE-affected package in the PyPI ecosystem, sorted by risk.

Last updated 6/15/2026, 3:52:37 PM

#	Package	CVEs	KEV	Max EPSS
1	salt	69	3	94.4%
2	langflow	23	3	92.7%
3	apache-airflow	132	2	94.3%
4	litellm	20	2	88.6%
5	apache-superset	66	1	84.2%
6	pillow	61	1	93.3%
7	opencv-contrib-python	31	1	93.3%
8	opencv-python	31	1	93.3%
9	pyspark	11	1	93.5%
10	opencv-contrib-python-headless	10	1	93.3%
11	opencv-python-headless	10	1	93.3%
12	langflow-base	5	1	92.7%
13	telnyx	1	1	23.9%
14	marimo	1	1	80.7%
15	imagecodecs	1	1	93.3%
16	tensorflow	427	—	1.5%
17	tensorflow-cpu	424	—	1.5%
18	tensorflow-gpu	421	—	1.5%
19	django	157	—	92.8%
20	plone	101	—	11.7%
21	open-webui	86	—	6.7%
22	mlflow	73	—	93.3%
23	ansible	68	—	10.1%
24	nova	53	—	87.2%
25	praisonai	50	—	0.6%
26	gradio	47	—	93.4%
27	pyload-ng	45	—	92.9%
28	matrix-synapse	44	—	13.2%
29	rdiffweb	43	—	0.7%
30	vllm	42	—	10.0%
31	moin	41	—	73.6%
32	keystone	40	—	4.0%
33	vyper	40	—	1.5%
34	aiohttp	35	—	93.6%
35	weblate	33	—	1.6%
36	paddlepaddle	32	—	1.8%
37	torch	30	—	25.1%
38	pyassimp	28	—	0.3%
39	pgadmin4	28	—	92.9%
40	transformers	28	—	79.5%
41	pypdf	24	—	0.2%
42	mindsdb	23	—	80.8%
43	glance	22	—	3.6%
44	ethyca-fides	22	—	22.2%
45	octoprint	22	—	2.2%
46	langchain	21	—	62.2%
47	lollms	21	—	17.5%
48	aim	20	—	8.4%
49	wagtail	20	—	1.3%
50	praisonaiagents	19	—	0.1%
51	urllib3	19	—	1.1%
52	neutron	19	—	14.3%
53	notebook	19	—	0.9%
54	cobbler	18	—	93.2%
55	mercurial	18	—	77.2%
56	mobsf	18	—	14.8%
57	changedetection-io	18	—	92.1%
58	calibreweb	18	—	16.4%
59	nautobot	17	—	3.0%
60	praisonai-platform	17	—	—
61	pycti	17	—	0.7%
62	nicegui	17	—	1.4%
63	vantage6	17	—	6.1%
64	zope	16	—	1.9%
65	glances	16	—	6.7%
66	chuanhuchatgpt	16	—	5.4%
67	h2o	16	—	2.9%
68	openexr	15	—	2.4%
69	exiv2	15	—	2.6%
70	modoboa	15	—	77.8%
71	ckan	15	—	13.8%
72	roundup	15	—	16.5%
73	cryptography	15	—	88.3%
74	sentry	15	—	4.2%
75	werkzeug	14	—	90.1%
76	flask-appbuilder	14	—	1.0%
77	agentscope	14	—	0.9%
78	pyftpdlib	14	—	1.0%
79	twisted	14	—	67.8%
80	zenml	14	—	89.6%
81	bentoml	14	—	75.8%
82	trytond	14	—	5.6%
83	horizon	13	—	2.9%
84	llama-index	13	—	3.9%
85	jupyter-server	12	—	1.5%
86	authlib	12	—	0.4%
87	keras	12	—	8.0%
88	swift	12	—	5.8%
89	pip	12	—	39.9%
90	lunasvg	12	—	0.4%
91	nltk	12	—	10.8%
92	lief	11	—	0.6%
93	onionshare-cli	11	—	0.7%
94	ray	11	—	92.2%
95	pywasm3	11	—	1.1%
96	copyparty	11	—	90.2%
97	zope2	11	—	90.5%
98	indico	11	—	9.0%
99	jinja2	11	—	2.3%
100	wger	11	—	0.4%
101	label-studio	11	—	70.6%
102	onnx	10	—	5.8%
103	apache-iotdb	10	—	3.4%
104	trac	10	—	3.0%
105	mistune	10	—	0.5%
106	pyjwt	10	—	1.0%
107	kiwitcms	10	—	12.9%
108	llama-index-core	10	—	1.6%
109	pretix	10	—	0.3%
110	python-keystoneclient	9	—	0.8%
111	cinder	9	—	3.6%
112	gitpython	9	—	68.9%
113	litestar	9	—	1.0%
114	ryu	9	—	2.2%
115	waitress	9	—	13.3%
116	keylime	9	—	0.5%
117	langchain-core	9	—	13.4%
118	bugsink	9	—	1.0%
119	metagpt	9	—	0.5%
120	aubio	9	—	1.0%
121	docling	8	—	0.1%
122	homeassistant	8	—	1.1%
123	ipython	8	—	2.1%
124	dbgpt	8	—	1.8%
125	scrapy	8	—	1.5%
126	jupyterlab	8	—	0.9%
127	gdal	8	—	2.2%
128	codechecker	8	—	73.9%
129	web2py	8	—	40.8%
130	numpy	8	—	71.5%
131	requests	8	—	5.9%
132	dtale	8	—	91.7%
133	sglang	8	—	1.9%
134	matrix-sydent	7	—	1.4%
135	pysaml2	7	—	2.1%
136	langchain-community	7	—	2.0%
137	mayan-edms	7	—	1.1%
138	tornado	7	—	1.2%
139	graphite-web	7	—	91.6%
140	fickling	7	—	0.1%
141	lxml	7	—	5.4%
142	apache-atlas	7	—	1.9%
143	fschat	7	—	1.2%
144	jupyterhub	7	—	0.5%
145	executorch	7	—	1.1%
146	picklescan	7	—	16.2%
147	starlette	7	—	3.3%
148	tryton	7	—	5.6%
149	astrbot	7	—	1.1%
150	sagemaker	7	—	0.9%
151	strawberry-graphql	7	—	0.2%
152	dulwich	7	—	2.8%
153	fastmcp	6	—	0.1%
154	esphome	6	—	4.8%
155	grpcio	6	—	1.8%
156	apache-airflow-providers-apache-hive	6	—	31.2%
157	saleor	6	—	0.4%
158	guarddog	6	—	0.8%
159	ollama	6	—	0.6%
160	yt-dlp	6	—	13.0%
161	rucio-webui	6	—	0.1%
162	mailman	6	—	10.6%
163	oauthenticator	6	—	0.7%
164	openc3	6	—	4.0%
165	ajenti-panel	6	—	0.8%
166	lmdeploy	6	—	8.7%
167	omero-web	6	—	0.6%
168	wabt	6	—	0.1%
169	whoogle-search	6	—	0.5%
170	products-cmfplone	6	—	0.5%
171	mage-ai	6	—	0.2%
172	mezzanine	6	—	1.8%
173	ansible-core	6	—	0.1%
174	ujson	6	—	0.3%
175	ait-core	6	—	0.9%
176	paramiko	6	—	53.0%
177	prefect	6	—	0.2%
178	flask-cors	6	—	0.9%
179	copier	6	—	0.1%
180	snowflake-connector-python	6	—	0.5%
181	pytorch-lightning	6	—	2.1%
182	langchain-chatchat	6	—	0.7%
183	pyopenssl	5	—	2.9%
184	tripleo-heat-templates	5	—	0.3%
185	langroid	5	—	0.4%
186	mesop	5	—	12.9%
187	feedparser	5	—	7.2%
188	protobuf	5	—	0.8%
189	mitmproxy	5	—	3.6%
190	python-multipart	5	—	3.3%
191	composio-core	5	—	0.3%
192	bleach	5	—	0.6%
193	smolagents	5	—	3.1%
194	pygments	5	—	7.4%
195	compliance-trestle	5	—	—
196	nvflare	5	—	22.4%
197	invokeai	5	—	44.2%
198	kallithea	5	—	5.3%
199	tendenci	5	—	0.7%
200	python-gnupg	5	—	21.4%
201	langchain-experimental	5	—	13.4%
202	jwcrypto	5	—	0.4%
203	poetry	5	—	0.7%
204	nemo-toolkit	5	—	0.3%
205	pyarrow	5	—	84.8%
206	torchserve	5	—	91.0%
207	ironic	5	—	0.8%
208	flask	5	—	0.6%
209	lmdb	5	—	0.4%
210	streampipes	4	—	1.8%
211	bottle	4	—	1.2%
212	lemur	4	—	0.3%
213	streamlit	4	—	1.7%
214	pyyaml	4	—	13.7%
215	pandasai	4	—	7.8%
216	qutebrowser	4	—	0.7%
217	setuptools	4	—	7.5%
218	freetakserver-ui	4	—	0.3%
219	frappe	4	—	0.8%
220	indy-node	4	—	1.6%
221	ecdsa	4	—	0.6%
222	materialx	4	—	1.8%
223	tuf	4	—	0.6%
224	zeroconf	4	—	—
225	micropython-io	4	—	0.2%
226	clearml	4	—	82.8%
227	wlc	4	—	0.0%
228	red-discordbot	4	—	2.4%
229	mcp-server-git	4	—	0.2%
230	democritus-file-system	4	—	0.9%
231	xgrammar	4	—	0.4%
232	llamafactory	4	—	4.2%
233	vtk	4	—	0.5%
234	democritus-urls	4	—	0.5%
235	pdm	4	—	0.1%
236	skops	4	—	1.3%
237	markdown2	4	—	0.7%
238	mako	4	—	1.0%
239	geonode	4	—	0.2%
240	monai	4	—	2.8%
241	httpie	4	—	0.6%
242	radicale	4	—	1.8%
243	apache-submarine	4	—	77.1%
244	awsiotsdk	4	—	0.3%
245	vanna	4	—	7.5%
246	pypdf2	4	—	0.2%
247	zodb3	4	—	1.0%
248	koji	4	—	0.6%
249	barbican	4	—	0.4%
250	apache-airflow-core	4	—	0.1%
251	pretalx	4	—	76.8%
252	python-jose	4	—	0.9%
253	mem0ai	4	—	0.2%
254	buildbot	4	—	0.6%
255	flask-security-too	4	—	17.1%
256	lin-cms	4	—	1.2%
257	nbconvert	4	—	0.8%
258	django-unicorn	4	—	0.3%
259	reportlab	4	—	30.2%
260	wasmtime	4	—	0.2%
261	asyncssh	4	—	0.4%
262	pycrypto	4	—	13.6%
263	vantage6-server	4	—	0.3%
264	kedro	4	—	6.1%
265	bbot	4	—	0.3%
266	restrictedpython	4	—	1.1%
267	micropython-copy	4	—	0.2%
268	motioneye	4	—	85.3%
269	apache-dolphinscheduler	4	—	2.2%
270	django-helpdesk	4	—	0.5%
271	gerapy	4	—	78.3%
272	guardrails-ai	4	—	0.4%
273	scitokens	3	—	0.0%
274	apache-airflow-providers-cncf-kubernetes	3	—	0.8%
275	rembg	3	—	0.1%
276	admesh	3	—	0.6%
277	ydata-profiling	3	—	0.2%
278	starlite	3	—	1.3%
279	eventlet	3	—	8.4%
280	lxml-html-clean	3	—	0.5%
281	dbt-mcp	3	—	—
282	keyring	3	—	0.3%
283	pptagent	3	—	0.0%
284	mcp	3	—	0.2%
285	diffusers	3	—	0.1%
286	django-cms	3	—	0.7%
287	ipa	3	—	3.4%
288	pyinstaller	3	—	3.2%
289	asyncua	3	—	0.5%
290	freeipa	3	—	3.4%
291	docassemble-webapp	3	—	93.8%
292	ciguard	3	—	0.0%
293	virtualenv	3	—	0.2%
294	taguette	3	—	0.1%
295	datasette	3	—	0.6%
296	snorkel	3	—	0.3%
297	sosreport	3	—	0.1%
298	deluge	3	—	0.6%
299	certifi	3	—	26.3%
300	sqlparse	3	—	10.9%

PyPI — vulnerability landscape

Subscribe via RSS

Every CVE-affected package in the PyPI ecosystem, sorted by risk.

Last updated 6/15/2026, 3:52:37 PM

#	Package	CVEs	KEV	Max EPSS
1	salt	69	3	94.4%
2	langflow	23	3	92.7%
3	apache-airflow	132	2	94.3%
4	litellm	20	2	88.6%
5	apache-superset	66	1	84.2%
6	pillow	61	1	93.3%
7	opencv-contrib-python	31	1	93.3%
8	opencv-python	31	1	93.3%
9	pyspark	11	1	93.5%
10	opencv-contrib-python-headless	10	1	93.3%
11	opencv-python-headless	10	1	93.3%
12	langflow-base	5	1	92.7%
13	telnyx	1	1	23.9%
14	marimo	1	1	80.7%
15	imagecodecs	1	1	93.3%
16	tensorflow	427	—	1.5%
17	tensorflow-cpu	424	—	1.5%
18	tensorflow-gpu	421	—	1.5%
19	django	157	—	92.8%
20	plone	101	—	11.7%
21	open-webui	86	—	6.7%
22	mlflow	73	—	93.3%
23	ansible	68	—	10.1%
24	nova	53	—	87.2%
25	praisonai	50	—	0.6%
26	gradio	47	—	93.4%
27	pyload-ng	45	—	92.9%
28	matrix-synapse	44	—	13.2%
29	rdiffweb	43	—	0.7%
30	vllm	42	—	10.0%
31	moin	41	—	73.6%
32	keystone	40	—	4.0%
33	vyper	40	—	1.5%
34	aiohttp	35	—	93.6%
35	weblate	33	—	1.6%
36	paddlepaddle	32	—	1.8%
37	torch	30	—	25.1%
38	pyassimp	28	—	0.3%
39	pgadmin4	28	—	92.9%
40	transformers	28	—	79.5%
41	pypdf	24	—	0.2%
42	mindsdb	23	—	80.8%
43	glance	22	—	3.6%
44	ethyca-fides	22	—	22.2%
45	octoprint	22	—	2.2%
46	langchain	21	—	62.2%
47	lollms	21	—	17.5%
48	aim	20	—	8.4%
49	wagtail	20	—	1.3%
50	praisonaiagents	19	—	0.1%
51	urllib3	19	—	1.1%
52	neutron	19	—	14.3%
53	notebook	19	—	0.9%
54	cobbler	18	—	93.2%
55	mercurial	18	—	77.2%
56	mobsf	18	—	14.8%
57	changedetection-io	18	—	92.1%
58	calibreweb	18	—	16.4%
59	nautobot	17	—	3.0%
60	praisonai-platform	17	—	—
61	pycti	17	—	0.7%
62	nicegui	17	—	1.4%
63	vantage6	17	—	6.1%
64	zope	16	—	1.9%
65	glances	16	—	6.7%
66	chuanhuchatgpt	16	—	5.4%
67	h2o	16	—	2.9%
68	openexr	15	—	2.4%
69	exiv2	15	—	2.6%
70	modoboa	15	—	77.8%
71	ckan	15	—	13.8%
72	roundup	15	—	16.5%
73	cryptography	15	—	88.3%
74	sentry	15	—	4.2%
75	werkzeug	14	—	90.1%
76	flask-appbuilder	14	—	1.0%
77	agentscope	14	—	0.9%
78	pyftpdlib	14	—	1.0%
79	twisted	14	—	67.8%
80	zenml	14	—	89.6%
81	bentoml	14	—	75.8%
82	trytond	14	—	5.6%
83	horizon	13	—	2.9%
84	llama-index	13	—	3.9%
85	jupyter-server	12	—	1.5%
86	authlib	12	—	0.4%
87	keras	12	—	8.0%
88	swift	12	—	5.8%
89	pip	12	—	39.9%
90	lunasvg	12	—	0.4%
91	nltk	12	—	10.8%
92	lief	11	—	0.6%
93	onionshare-cli	11	—	0.7%
94	ray	11	—	92.2%
95	pywasm3	11	—	1.1%
96	copyparty	11	—	90.2%
97	zope2	11	—	90.5%
98	indico	11	—	9.0%
99	jinja2	11	—	2.3%
100	wger	11	—	0.4%
101	label-studio	11	—	70.6%
102	onnx	10	—	5.8%
103	apache-iotdb	10	—	3.4%
104	trac	10	—	3.0%
105	mistune	10	—	0.5%
106	pyjwt	10	—	1.0%
107	kiwitcms	10	—	12.9%
108	llama-index-core	10	—	1.6%
109	pretix	10	—	0.3%
110	python-keystoneclient	9	—	0.8%
111	cinder	9	—	3.6%
112	gitpython	9	—	68.9%
113	litestar	9	—	1.0%
114	ryu	9	—	2.2%
115	waitress	9	—	13.3%
116	keylime	9	—	0.5%
117	langchain-core	9	—	13.4%
118	bugsink	9	—	1.0%
119	metagpt	9	—	0.5%
120	aubio	9	—	1.0%
121	docling	8	—	0.1%
122	homeassistant	8	—	1.1%
123	ipython	8	—	2.1%
124	dbgpt	8	—	1.8%
125	scrapy	8	—	1.5%
126	jupyterlab	8	—	0.9%
127	gdal	8	—	2.2%
128	codechecker	8	—	73.9%
129	web2py	8	—	40.8%
130	numpy	8	—	71.5%
131	requests	8	—	5.9%
132	dtale	8	—	91.7%
133	sglang	8	—	1.9%
134	matrix-sydent	7	—	1.4%
135	pysaml2	7	—	2.1%
136	langchain-community	7	—	2.0%
137	mayan-edms	7	—	1.1%
138	tornado	7	—	1.2%
139	graphite-web	7	—	91.6%
140	fickling	7	—	0.1%
141	lxml	7	—	5.4%
142	apache-atlas	7	—	1.9%
143	fschat	7	—	1.2%
144	jupyterhub	7	—	0.5%
145	executorch	7	—	1.1%
146	picklescan	7	—	16.2%
147	starlette	7	—	3.3%
148	tryton	7	—	5.6%
149	astrbot	7	—	1.1%
150	sagemaker	7	—	0.9%
151	strawberry-graphql	7	—	0.2%
152	dulwich	7	—	2.8%
153	fastmcp	6	—	0.1%
154	esphome	6	—	4.8%
155	grpcio	6	—	1.8%
156	apache-airflow-providers-apache-hive	6	—	31.2%
157	saleor	6	—	0.4%
158	guarddog	6	—	0.8%
159	ollama	6	—	0.6%
160	yt-dlp	6	—	13.0%
161	rucio-webui	6	—	0.1%
162	mailman	6	—	10.6%
163	oauthenticator	6	—	0.7%
164	openc3	6	—	4.0%
165	ajenti-panel	6	—	0.8%
166	lmdeploy	6	—	8.7%
167	omero-web	6	—	0.6%
168	wabt	6	—	0.1%
169	whoogle-search	6	—	0.5%
170	products-cmfplone	6	—	0.5%
171	mage-ai	6	—	0.2%
172	mezzanine	6	—	1.8%
173	ansible-core	6	—	0.1%
174	ujson	6	—	0.3%
175	ait-core	6	—	0.9%
176	paramiko	6	—	53.0%
177	prefect	6	—	0.2%
178	flask-cors	6	—	0.9%
179	copier	6	—	0.1%
180	snowflake-connector-python	6	—	0.5%
181	pytorch-lightning	6	—	2.1%
182	langchain-chatchat	6	—	0.7%
183	pyopenssl	5	—	2.9%
184	tripleo-heat-templates	5	—	0.3%
185	langroid	5	—	0.4%
186	mesop	5	—	12.9%
187	feedparser	5	—	7.2%
188	protobuf	5	—	0.8%
189	mitmproxy	5	—	3.6%
190	python-multipart	5	—	3.3%
191	composio-core	5	—	0.3%
192	bleach	5	—	0.6%
193	smolagents	5	—	3.1%
194	pygments	5	—	7.4%
195	compliance-trestle	5	—	—
196	nvflare	5	—	22.4%
197	invokeai	5	—	44.2%
198	kallithea	5	—	5.3%
199	tendenci	5	—	0.7%
200	python-gnupg	5	—	21.4%
201	langchain-experimental	5	—	13.4%
202	jwcrypto	5	—	0.4%
203	poetry	5	—	0.7%
204	nemo-toolkit	5	—	0.3%
205	pyarrow	5	—	84.8%
206	torchserve	5	—	91.0%
207	ironic	5	—	0.8%
208	flask	5	—	0.6%
209	lmdb	5	—	0.4%
210	streampipes	4	—	1.8%
211	bottle	4	—	1.2%
212	lemur	4	—	0.3%
213	streamlit	4	—	1.7%
214	pyyaml	4	—	13.7%
215	pandasai	4	—	7.8%
216	qutebrowser	4	—	0.7%
217	setuptools	4	—	7.5%
218	freetakserver-ui	4	—	0.3%
219	frappe	4	—	0.8%
220	indy-node	4	—	1.6%
221	ecdsa	4	—	0.6%
222	materialx	4	—	1.8%
223	tuf	4	—	0.6%
224	zeroconf	4	—	—
225	micropython-io	4	—	0.2%
226	clearml	4	—	82.8%
227	wlc	4	—	0.0%
228	red-discordbot	4	—	2.4%
229	mcp-server-git	4	—	0.2%
230	democritus-file-system	4	—	0.9%
231	xgrammar	4	—	0.4%
232	llamafactory	4	—	4.2%
233	vtk	4	—	0.5%
234	democritus-urls	4	—	0.5%
235	pdm	4	—	0.1%
236	skops	4	—	1.3%
237	markdown2	4	—	0.7%
238	mako	4	—	1.0%
239	geonode	4	—	0.2%
240	monai	4	—	2.8%
241	httpie	4	—	0.6%
242	radicale	4	—	1.8%
243	apache-submarine	4	—	77.1%
244	awsiotsdk	4	—	0.3%
245	vanna	4	—	7.5%
246	pypdf2	4	—	0.2%
247	zodb3	4	—	1.0%
248	koji	4	—	0.6%
249	barbican	4	—	0.4%
250	apache-airflow-core	4	—	0.1%
251	pretalx	4	—	76.8%
252	python-jose	4	—	0.9%
253	mem0ai	4	—	0.2%
254	buildbot	4	—	0.6%
255	flask-security-too	4	—	17.1%
256	lin-cms	4	—	1.2%
257	nbconvert	4	—	0.8%
258	django-unicorn	4	—	0.3%
259	reportlab	4	—	30.2%
260	wasmtime	4	—	0.2%
261	asyncssh	4	—	0.4%
262	pycrypto	4	—	13.6%
263	vantage6-server	4	—	0.3%
264	kedro	4	—	6.1%
265	bbot	4	—	0.3%
266	restrictedpython	4	—	1.1%
267	micropython-copy	4	—	0.2%
268	motioneye	4	—	85.3%
269	apache-dolphinscheduler	4	—	2.2%
270	django-helpdesk	4	—	0.5%
271	gerapy	4	—	78.3%
272	guardrails-ai	4	—	0.4%
273	scitokens	3	—	0.0%
274	apache-airflow-providers-cncf-kubernetes	3	—	0.8%
275	rembg	3	—	0.1%
276	admesh	3	—	0.6%
277	ydata-profiling	3	—	0.2%
278	starlite	3	—	1.3%
279	eventlet	3	—	8.4%
280	lxml-html-clean	3	—	0.5%
281	dbt-mcp	3	—	—
282	keyring	3	—	0.3%
283	pptagent	3	—	0.0%
284	mcp	3	—	0.2%
285	diffusers	3	—	0.1%
286	django-cms	3	—	0.7%
287	ipa	3	—	3.4%
288	pyinstaller	3	—	3.2%
289	asyncua	3	—	0.5%
290	freeipa	3	—	3.4%
291	docassemble-webapp	3	—	93.8%
292	ciguard	3	—	0.0%
293	virtualenv	3	—	0.2%
294	taguette	3	—	0.1%
295	datasette	3	—	0.6%
296	snorkel	3	—	0.3%
297	sosreport	3	—	0.1%
298	deluge	3	—	0.6%
299	certifi	3	—	26.3%
300	sqlparse	3	—	10.9%