PyPI Package Vulnerabilities

All 1,459 Python packages with known CVEs, ranked by live CVE volume — 7,043 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.tensorflow427 CVEs
  2. 2.tensorflow-cpu424 CVEs
  3. 3.tensorflow-gpu421 CVEs
  4. 4.django160 CVEs
  5. 5.apache-airflow150 CVEs
  6. 6.open-webui131 CVEs
  7. 7.plone101 CVEs
  8. 8.mlflow79 CVEs
  9. 9.praisonai77 CVEs
  10. 10.pillow74 CVEs
  11. 11.salt69 CVEs
  12. 12.ansible67 CVEs
  13. 13.apache-superset66 CVEs
  14. 14.picklescan58 CVEs
  15. 15.vllm57 CVEs
  16. 16.nova54 CVEs
  17. 17.gradio50 CVEs
  18. 18.aiohttp47 CVEs
  19. 19.pyload-ng47 CVEs
  20. 20.keystone44 CVEs
  21. 21.matrix-synapse44 CVEs
  22. 22.rdiffweb43 CVEs
  23. 23.moin41 CVEs
  24. 24.vyper40 CVEs
  25. 25.pypdf39 CVEs
  26. 26.weblate35 CVEs
  27. 27.pyassimp33 CVEs
  28. 28.langflow32 CVEs
  29. 29.paddlepaddle32 CVEs
  30. 30.praisonaiagents32 CVEs
  31. 31.torch31 CVEs
  32. 32.opencv-contrib-python30 CVEs
  33. 33.opencv-python30 CVEs
  34. 34.transformers30 CVEs
  35. 35.gitpython28 CVEs
  36. 36.pgadmin428 CVEs
  37. 37.litellm27 CVEs
  38. 38.glances26 CVEs
  39. 39.wagtail25 CVEs
  40. 40.lollms24 CVEs
  41. 41.octoprint24 CVEs
  42. 42.openbabel24 CVEs
  43. 43.mindsdb23 CVEs
  44. 44.ethyca-fides22 CVEs
  45. 45.glance22 CVEs
  46. 46.langchain22 CVEs
  47. 47.llama-index22 CVEs
  48. 48.mobsf22 CVEs
  49. 49.pycti22 CVEs
  50. 50.chuanhuchatgpt21 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →