PyPI — vulnerability landscape

Every CVE-affected package in the PyPI ecosystem, sorted by risk.

Last updated 6/4/2026, 12:34:37 PM

#PackageCVEsKEVMax EPSS
1salt69394.4%
2langflow23392.7%
3apache-airflow125294.3%
4apache-superset66184.2%
5pillow61193.3%
6opencv-contrib-python31193.3%
7opencv-python31193.3%
8litellm20188.6%
9pyspark11193.5%
10opencv-contrib-python-headless10193.3%
11opencv-python-headless10193.3%
12langflow-base5192.7%
13marimo1182.2%
14imagecodecs1193.3%
15telnyx1129.4%
16tensorflow427—1.5%
17tensorflow-cpu424—1.5%
18tensorflow-gpu421—1.5%
19django152—92.8%
20plone101—11.7%
21open-webui86—6.7%
22mlflow71—93.3%
23ansible68—10.1%
24nova53—87.2%
25praisonai50—0.6%
26gradio47—93.4%
27pyload-ng45—93.4%
28matrix-synapse44—13.2%
29rdiffweb43—0.7%
30vllm41—10.0%
31moin41—73.6%
32vyper40—1.5%
33keystone40—4.0%
34weblate33—1.6%
35paddlepaddle32—1.8%
36aiohttp32—93.5%
37torch30—25.1%
38transformers28—79.5%
39pyassimp28—0.3%
40pgadmin428—92.9%
41pypdf24—0.2%
42mindsdb23—82.8%
43glance22—3.6%
44ethyca-fides22—22.2%
45octoprint22—2.2%
46langchain21—62.2%
47lollms20—17.5%
48wagtail20—1.3%
49aim20—8.4%
50notebook19—0.9%
51praisonaiagents19—0.1%
52neutron19—14.3%
53urllib319—1.1%
54mercurial18—77.2%
55changedetection-io18—92.1%
56cobbler18—93.2%
57calibreweb18—16.4%
58mobsf18—14.8%
59nautobot17—3.0%
60nicegui17—1.4%
61zope16—1.9%
62pycti16—0.7%
63praisonai-platform16——
64h2o16—2.9%
65glances16—6.7%
66chuanhuchatgpt16—5.4%
67openexr15—2.4%
68cryptography15—88.3%
69sentry15—4.2%
70vantage615—6.1%
71ckan15—13.8%
72exiv215—2.6%
73roundup15—16.5%
74modoboa15—77.8%
75werkzeug14—90.1%
76pyftpdlib14—1.0%
77agentscope14—0.9%
78flask-appbuilder14—1.0%
79trytond14—5.6%
80twisted14—67.8%
81zenml14—89.6%
82bentoml14—75.8%
83llama-index13—3.9%
84horizon13—2.9%
85swift12—5.8%
86keras12—8.0%
87jupyter-server12—1.5%
88lunasvg12—0.4%
89nltk12—10.8%
90copyparty11—89.9%
91lief11—0.6%
92ray11—92.2%
93label-studio11—70.6%
94authlib11—0.4%
95onionshare-cli11—0.7%
96pywasm311—1.1%
97jinja211—2.3%
98wger11—0.4%
99indico11—9.0%
100zope211—90.5%
101pip11—39.9%
102onnx10—5.8%
103llama-index-core10—1.6%
104kiwitcms10—12.9%
105pyjwt10—1.0%
106mistune10—0.5%
107trac10—3.0%
108apache-iotdb10—3.4%
109pretix10—0.3%
110langchain-core9—13.4%
111aubio9—1.0%
112waitress9—13.3%
113ryu9—2.2%
114python-keystoneclient9—0.8%
115cinder9—3.6%
116gitpython9—68.9%
117metagpt9—0.5%
118keylime9—0.5%
119scrapy8—0.5%
120codechecker8—73.9%
121jupyterlab8—0.9%
122requests8—6.1%
123web2py8—40.8%
124ipython8—2.1%
125homeassistant8—1.1%
126numpy8—71.5%
127dbgpt8—1.8%
128dtale8—91.7%
129sglang8—1.9%
130sagemaker7—0.9%
131matrix-sydent7—1.4%
132langchain-community7—2.0%
133pysaml27—2.1%
134litestar7—1.0%
135tornado7—1.2%
136jupyterhub7—0.5%
137astrbot7—1.1%
138mayan-edms7—1.1%
139lxml7—5.4%
140graphite-web7—91.6%
141gdal7—2.2%
142picklescan7—16.2%
143fschat7—0.9%
144fickling7—0.1%
145executorch7—0.4%
146apache-atlas7—1.9%
147starlette7—3.3%
148tryton7—5.6%
149oauthenticator6—0.7%
150rucio-webui6—0.1%
151saleor6—0.4%
152ollama6—0.6%
153mailman6—10.6%
154openc36—4.0%
155copier6—0.1%
156lmdeploy6—8.7%
157fastmcp6—0.1%
158pytorch-lightning6—2.1%
159langchain-chatchat6—0.7%
160paramiko6—54.2%
161ajenti-panel6—0.8%
162yt-dlp6—13.0%
163mage-ai6—0.2%
164whoogle-search6—0.5%
165apache-airflow-providers-apache-hive6—31.2%
166products-cmfplone6—0.5%
167wabt6—0.1%
168prefect6—0.2%
169guarddog6—0.8%
170grpcio6—1.8%
171bugsink6—1.0%
172mezzanine6—1.8%
173flask-cors6—0.9%
174ujson6—0.3%
175omero-web6—0.6%
176esphome6—4.8%
177snowflake-connector-python6—0.5%
178ansible-core6—0.1%
179lmdb5—0.4%
180python-multipart5—3.3%
181langroid5—0.4%
182composio-core5—0.3%
183langchain-experimental5—13.4%
184python-gnupg5—21.4%
185compliance-trestle5——
186jwcrypto5—0.4%
187kallithea5—5.3%
188ironic5—0.8%
189pygments5—7.4%
190invokeai5—44.2%
191ait-core5—0.9%
192protobuf5—0.8%
193pyarrow5—84.8%
194poetry5—0.7%
195mesop5—12.9%
196tripleo-heat-templates5—0.3%
197torchserve5—91.7%
198flask5—0.6%
199bleach5—0.6%
200tendenci5—0.7%
201nvflare5—22.4%
202feedparser5—7.2%
203dulwich5—2.8%
204strawberry-graphql5—0.2%
205smolagents5—3.1%
206nemo-toolkit5—0.3%
207pyopenssl5—2.9%
208mitmproxy5—3.6%
209micropython-copy4—0.2%
210barbican4—0.4%
211micropython-io4—0.2%
212mcp-server-git4—0.2%
213mem0ai4—0.2%
214materialx4—1.8%
215markdown24—0.7%
216reportlab4—26.9%
217restrictedpython4—1.1%
218mako4—1.0%
219red-discordbot4—2.4%
220llamafactory4—4.2%
221lemur4—0.3%
222pyyaml4—13.7%
223awsiotsdk4—0.3%
224lin-cms4—1.2%
225python-jose4—0.9%
226qutebrowser4—0.7%
227pypdf24—0.2%
228asyncssh4—0.4%
229radicale4—1.8%
230clearml4—82.8%
231kedro4—6.1%
232koji4—0.6%
233setuptools4—9.9%
234xgrammar4—0.4%
235wlc4—0.0%
236zodb34—1.0%
237indy-node4—1.6%
238pycrypto4—13.6%
239pretalx4—76.8%
240apache-airflow-core4—0.1%
241vantage6-server4—0.3%
242guardrails-ai4—0.4%
243vanna4—7.5%
244httpie4—0.6%
245vtk4—0.5%
246wasmtime4—0.2%
247buildbot4—0.6%
248geonode4—0.2%
249gerapy4—78.3%
250apache-submarine4—77.1%
251bottle4—1.2%
252freetakserver-ui4—0.3%
253frappe4—0.8%
254pandasai4—5.9%
255flask-security-too4—17.1%
256tuf4—0.6%
257apache-dolphinscheduler4—2.2%
258democritus-urls4—0.5%
259democritus-file-system4—0.9%
260streampipes4—1.8%
261motioneye4—85.3%
262ecdsa4—0.6%
263monai4—2.1%
264skops4—0.4%
265nbconvert4—0.8%
266django-unicorn4—0.3%
267django-helpdesk4—0.5%
268bbot4—0.3%
269streamlit4—1.7%
270dagster3—2.2%
271scikit-learn3—0.9%
272scipy3—0.3%
273scitokens3—0.0%
274mcp3—0.2%
275anki3—3.1%
276backend-ai3—0.3%
277rsa3—3.1%
278lxml-html-clean3—0.5%
279redshift-connector3—0.9%
280local-deep-research3—0.0%
281localstack3—0.4%
282rembg3—0.1%
283crawl4ai3—0.2%
284apache-airflow-providers-google3—2.2%
285couchbase3—0.5%
286lightrag-hku3—0.1%
287langgraph-checkpoint-sqlite3—0.0%
288langsmith3—0.0%
289python-ldap3—0.2%
290quokka3—2.6%
291avro3—3.0%
292keystonemiddleware3—0.6%
293khoj3—0.9%
294keyring3—0.3%
295admesh3—0.6%
296jupyter-server-proxy3—1.1%
297asyncua3—0.5%
298pyspector3—0.0%
299apache-airflow-providers-apache-spark3—3.0%
300ciguard3—0.0%