PyPI Package Vulnerabilities

All 1,551 Python packages with known CVEs, ranked by live CVE volume — 7,871 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.tensorflow427 CVEs
  2. 2.tensorflow-cpu424 CVEs
  3. 3.tensorflow-gpu421 CVEs
  4. 4.django162 CVEs
  5. 5.apache-airflow158 CVEs
  6. 6.open-webui148 CVEs
  7. 7.pillow112 CVEs
  8. 8.praisonai106 CVEs
  9. 9.vllm106 CVEs
  10. 10.plone101 CVEs
  11. 11.mlflow85 CVEs
  12. 12.pypdf69 CVEs
  13. 13.salt69 CVEs
  14. 14.ansible67 CVEs
  15. 15.apache-superset66 CVEs
  16. 16.openssl-encrypt60 CVEs
  17. 17.picklescan58 CVEs
  18. 18.aiohttp54 CVEs
  19. 19.nova54 CVEs
  20. 20.nltk52 CVEs
  21. 21.gradio50 CVEs
  22. 22.praisonaiagents49 CVEs
  23. 23.pyload-ng49 CVEs
  24. 24.vyper46 CVEs
  25. 25.gitpython44 CVEs
  26. 26.keystone44 CVEs
  27. 27.matrix-synapse44 CVEs
  28. 28.rdiffweb43 CVEs
  29. 29.langflow42 CVEs
  30. 30.moin41 CVEs
  31. 31.litellm40 CVEs
  32. 32.weblate37 CVEs
  33. 33.pyassimp33 CVEs
  34. 34.paddlepaddle32 CVEs
  35. 35.transformers32 CVEs
  36. 36.torch31 CVEs
  37. 37.mcp-atlassian30 CVEs
  38. 38.opencv-contrib-python30 CVEs
  39. 39.opencv-python30 CVEs
  40. 40.pgadmin428 CVEs
  41. 41.glances26 CVEs
  42. 42.tornado26 CVEs
  43. 43.wagtail26 CVEs
  44. 44.praisonai-platform25 CVEs
  45. 45.lollms24 CVEs
  46. 46.octoprint24 CVEs
  47. 47.openbabel24 CVEs
  48. 48.pyjwt24 CVEs
  49. 49.virtualenv24 CVEs
  50. 50.mindsdb23 CVEs

Which PyPI packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →