PyPI2252 advisories

PyPI security advisories

Most-affected PyPI packages

open-webui — 103 advisories
praisonai — 76 advisories
picklescan — 67 advisories
vllm — 65 advisories
django — 62 advisories
apache-airflow — 59 advisories
weblate — 39 advisories
pyload-ng — 39 advisories
mlflow — 34 advisories
praisonaiagents — 33 advisories
torch — 33 advisories
langflow — 32 advisories
pypdf — 30 advisories
aiohttp — 30 advisories
transformers — 23 advisories
pyassimp — 22 advisories
praisonai-platform — 21 advisories
bentoml — 21 advisories
gradio — 20 advisories
pgadmin4 — 18 advisories

Latest PyPI advisories

GHSA-jv2h-4p9v-wf5w — high · PyPI/ouroboros-ai
GHSA-vmhf-c436-hxj4 — medium · PyPI/jupyterlab
GHSA-wg5p-8h9p-3mr7 — high · PyPI/agent-coderag
CVE-2026-12530 — high · PyPI/bedrock-agentcore
GHSA-6v7p-g79w-8964 — high · PyPI/msgpack
GHSA-wm69-2pc3-rmmf — high · PyPI/crawl4ai
GHSA-r253-r9jw-qg44 — critical · PyPI/crawl4ai
GHSA-2jq4-q6vv-4cp3 — critical · PyPI/crawl4ai
GHSA-hxpf-9xvq-wph8 — critical · PyPI/netlicensing-mcp
CVE-2026-54695 — high · PyPI/pipecat-ai
CVE-2026-44727 — critical · PyPI/jupyter-server
CVE-2026-12568 — medium · PyPI/bbot
CVE-2026-12565 — medium · PyPI/bbot
GHSA-2fjj-qqg8-fg7x — medium · PyPI/praisonai-platform
GHSA-jm82-fx9c-mx94 — medium · PyPI/pypdf
CVE-2026-47103 — critical · PyPI/python-statemachine
GHSA-cwj8-7gp2-ggcw — critical · PyPI/praisonai-platform
GHSA-6jcq-6546-qrrw — high · PyPI/praisonai
GHSA-8ccj-p46r-jwqq — high · PyPI/praisonai
GHSA-4pcv-mg8v-vrgf — high · PyPI/praisonaiagents
GHSA-f38v-77qj-h4jq — critical · PyPI/praisonai-platform
GHSA-29w3-p9w9-wc47 — critical · PyPI/praisonai
GHSA-jxcw-qp4h-6jfq — high · PyPI/praisonai
GHSA-7qw2-w5rc-37x2 — high · PyPI/praisonai
GHSA-c969-5x3p-vq3v — high · PyPI/praisonaiagents
GHSA-f44v-7qgw-9gh9 — high · PyPI/praisonai
GHSA-gcq3-mfvh-3x25 — high · PyPI/praisonai
GHSA-p75f-6fp4-p57w — critical · PyPI/praisonai
GHSA-x92v-rpx6-p6cw — high · PyPI/praisonai
GHSA-rh39-9c67-59mh — high · PyPI/praisonai-platform
GHSA-892r-p3jq-jp24 — critical · PyPI/praisonai
GHSA-x8cv-xmq7-p8xp — critical · PyPI/praisonaiagents
GHSA-rjvw-7vvw-549v — high · PyPI/praisonai
GHSA-fq2m-6wqh-x44g — critical · PyPI/praisonai
GHSA-2rcg-mm5h-xchx — high · PyPI/praisonaiagents
GHSA-j4hj-7hfh-g2f4 — critical · PyPI/praisonai
GHSA-vxgj-xg5c-p4h7 — high · PyPI/praisonaiagents
GHSA-4869-x4pr-q22x#praisonaiagents — critical · PyPI/praisonaiagents
GHSA-4869-x4pr-q22x#praisonai — critical · PyPI/praisonai
GHSA-p4pj-vh7h-6cqh — high · PyPI/praisonai

Stateward audits your PyPI dependencies on every pull request and only flags what your code reaches.

Scan my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.