PyPI Package Vulnerabilities

All 1,530 Python packages with known CVEs, ranked by live CVE volume — 7,532 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.tensorflow427 CVEs
  2. 2.tensorflow-cpu424 CVEs
  3. 3.tensorflow-gpu421 CVEs
  4. 4.django162 CVEs
  5. 5.apache-airflow158 CVEs
  6. 6.open-webui148 CVEs
  7. 7.plone101 CVEs
  8. 8.praisonai90 CVEs
  9. 9.vllm82 CVEs
  10. 10.mlflow80 CVEs
  11. 11.pillow74 CVEs
  12. 12.salt69 CVEs
  13. 13.ansible67 CVEs
  14. 14.apache-superset66 CVEs
  15. 15.openssl-encrypt60 CVEs
  16. 16.picklescan58 CVEs
  17. 17.nova54 CVEs
  18. 18.nltk51 CVEs
  19. 19.pypdf51 CVEs
  20. 20.gradio50 CVEs
  21. 21.aiohttp47 CVEs
  22. 22.pyload-ng47 CVEs
  23. 23.keystone44 CVEs
  24. 24.matrix-synapse44 CVEs
  25. 25.rdiffweb43 CVEs
  26. 26.moin41 CVEs
  27. 27.praisonaiagents40 CVEs
  28. 28.vyper40 CVEs
  29. 29.litellm39 CVEs
  30. 30.gitpython37 CVEs
  31. 31.weblate37 CVEs
  32. 32.langflow34 CVEs
  33. 33.pyassimp33 CVEs
  34. 34.paddlepaddle32 CVEs
  35. 35.transformers32 CVEs
  36. 36.torch31 CVEs
  37. 37.mcp-atlassian30 CVEs
  38. 38.opencv-contrib-python30 CVEs
  39. 39.opencv-python30 CVEs
  40. 40.pgadmin428 CVEs
  41. 41.glances26 CVEs
  42. 42.wagtail26 CVEs
  43. 43.lollms24 CVEs
  44. 44.octoprint24 CVEs
  45. 45.openbabel24 CVEs
  46. 46.mindsdb23 CVEs
  47. 47.pyjwt23 CVEs
  48. 48.tornado23 CVEs
  49. 49.ethyca-fides22 CVEs
  50. 50.glance22 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →