PyPI Package Vulnerabilities

All 1,384 Python packages with known CVEs, ranked by live CVE volume — 6,532 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.tensorflow427 CVEs
  2. 2.tensorflow-cpu424 CVEs
  3. 3.tensorflow-gpu421 CVEs
  4. 4.django159 CVEs
  5. 5.apache-airflow138 CVEs
  6. 6.plone101 CVEs
  7. 7.open-webui99 CVEs
  8. 8.mlflow77 CVEs
  9. 9.pillow69 CVEs
  10. 10.salt69 CVEs
  11. 11.ansible67 CVEs
  12. 12.apache-superset61 CVEs
  13. 13.picklescan58 CVEs
  14. 14.nova54 CVEs
  15. 15.vllm52 CVEs
  16. 16.praisonai51 CVEs
  17. 17.gradio49 CVEs
  18. 18.aiohttp44 CVEs
  19. 19.keystone44 CVEs
  20. 20.matrix-synapse44 CVEs
  21. 21.pyload-ng43 CVEs
  22. 22.rdiffweb43 CVEs
  23. 23.moin41 CVEs
  24. 24.vyper40 CVEs
  25. 25.pyassimp33 CVEs
  26. 26.weblate33 CVEs
  27. 27.paddlepaddle32 CVEs
  28. 28.langflow31 CVEs
  29. 29.opencv-contrib-python30 CVEs
  30. 30.opencv-python30 CVEs
  31. 31.torch30 CVEs
  32. 32.transformers30 CVEs
  33. 33.pgadmin428 CVEs
  34. 34.openbabel24 CVEs
  35. 35.pypdf24 CVEs
  36. 36.litellm23 CVEs
  37. 37.mindsdb23 CVEs
  38. 38.wagtail23 CVEs
  39. 39.ethyca-fides22 CVEs
  40. 40.glance22 CVEs
  41. 41.lollms22 CVEs
  42. 42.octoprint22 CVEs
  43. 43.langchain21 CVEs
  44. 44.praisonaiagents21 CVEs
  45. 45.aim20 CVEs
  46. 46.neutron20 CVEs
  47. 47.pycti20 CVEs
  48. 48.notebook19 CVEs
  49. 49.urllib319 CVEs
  50. 50.vantage619 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →