PyPI vulnerabilities | Corgea Advisories

CRITICAL 10.0

PyPI

CVE-2026-46695

BoxLite: Permission Bypass Allows Modification of Read-Only Files

May 21, 2026

CRITICAL 9.6

PyPI

CVE-2026-46703

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

May 21, 2026

CRITICAL 9.1

PyPI

CVE-2026-48039

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

Jun 11, 2026

CRITICAL 9.8

PyPI

CVE-2024-3408

Authentication bypass in dtale

Jun 6, 2024

CRITICAL 9.8

PyPI

CVE-2020-18698

Lin-CMS-Flask vulnerable to Improper Authentication

May 24, 2022

CRITICAL 9.4

PyPI

CVE-2024-32977

May 14, 2024

CRITICAL 9.8

PyPI

CVE-2022-39327

Oct 25, 2022

CRITICAL 9.0

PyPI

CVE-2024-28179

Jupyter Server Proxy's Websocket Proxying does not require authentication

Mar 20, 2024

CRITICAL 9.3

PyPI

CVE-2024-23346

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

Feb 21, 2024

CRITICAL 9.8

PyPI

CVE-2025-31116

Mar 31, 2025

CRITICAL 9.8

PyPI

CVE-2025-32375

BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Apr 9, 2025

CRITICAL 9.6

PyPI

CVE-2024-35225

Jupyter Server Proxy has a reflected XSS issue in host parameter

Jun 11, 2024

CRITICAL 10.0

PyPI

CVE-2025-32444

vLLM Vulnerable to Remote Code Execution via Mooncake Integration

Apr 29, 2025

CRITICAL 9.8

PyPI

CVE-2023-29824

Withdrawn: Use after free in SciPy

Jul 6, 2023

CRITICAL 9.8

PyPI

CVE-2024-22205

Jan 23, 2024

CRITICAL 9.8

PyPI

CVE-2024-22203

Jan 23, 2024

CRITICAL 9.9

PyPI

CVE-2024-2083

Apr 16, 2024

CRITICAL 9.8

PyPI

CVE-2025-6278

Jun 19, 2025

CRITICAL 9.8

PyPI

CVE-2024-9053

Mar 20, 2025

CRITICAL 9.8

PyPI

CVE-2024-53899

Nov 24, 2024

CRITICAL 9.8

PyPI

CVE-2022-3457

Oct 13, 2022

CRITICAL 9.8

PyPI

CVE-2022-3439

Oct 14, 2022

CRITICAL 9.8

PyPI

CVE-2022-3456

Oct 13, 2022

CRITICAL 9.8

PyPI

CVE-2024-34249

May 6, 2024

CRITICAL 9.8

PyPI

CVE-2025-1497

Mar 10, 2025

CRITICAL 9.8

PyPI

CVE-2025-1716

Mar 3, 2025

CRITICAL 9.8

PyPI

CVE-2023-52314

Jan 3, 2024

CRITICAL 9.8

PyPI

CVE-2023-52311

Jan 3, 2024

CRITICAL 9.8

PyPI

CVE-2023-52310

Jan 3, 2024

CRITICAL 9.8

PyPI

CVE-2023-52309

Jan 3, 2024

CRITICAL 9.8

PyPI

CVE-2023-52304

Jan 3, 2024

CRITICAL 9.8

PyPI

CVE-2022-46742

Dec 7, 2022

CRITICAL 9.1

PyPI

CVE-2024-27319

Feb 23, 2024

CRITICAL 9.8

PyPI

CVE-2026-24178

Apr 28, 2026

CRITICAL 9.8

PyPI

CVE-2023-39631

Sep 1, 2023

CRITICAL 9.1

PyPI

CVE-2024-7776

Mar 20, 2025

CRITICAL 9.8

PyPI

CVE-2023-52307

Jan 3, 2024

CRITICAL 10.0

PyPI

CVE-2025-14009

Feb 18, 2026

CRITICAL 9.0

PyPI

CVE-2024-6581

Oct 29, 2024

CRITICAL 10.0

PyPI

CVE-2023-3765

Jul 19, 2023

CRITICAL 9.8

PyPI

CVE-2024-37014

Jun 10, 2024

CRITICAL 10.0

PyPI

CVE-2025-2828

Jun 23, 2025

CRITICAL 9.8

PyPI

CVE-2023-36281

Aug 22, 2023

CRITICAL 9.8

PyPI

CVE-2023-39659

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-38896

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-38860

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-36095

Aug 5, 2023

CRITICAL 9.8

PyPI

CVE-2024-42835

Oct 31, 2024

CRITICAL 9.8

PyPI

CVE-2024-8309

Nov 5, 2024

CRITICAL 9.8

PyPI

CVE-2026-1709

Feb 6, 2026

CRITICAL 9.8

PyPI

CVE-2023-39662

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-44467

Oct 9, 2023

CRITICAL 9.8

PyPI

CVE-2025-1550

Mar 11, 2025

CRITICAL 9.4

PyPI

CVE-2024-0964

Feb 5, 2024

CRITICAL 9.8

PyPI

CVE-2025-6167

Jun 17, 2025

CRITICAL 9.8

PyPI

CVE-2024-53924

Apr 17, 2025

CRITICAL 9.8

PyPI

CVE-2016-20021

Jan 12, 2024

Know every threat before it ships

BoxLite: Permission Bypass Allows Modification of Read-Only Files

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

Authentication bypass in dtale

Lin-CMS-Flask vulnerable to Improper Authentication

CVE-2024-32977

CVE-2022-39327

Jupyter Server Proxy's Websocket Proxying does not require authentication

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

CVE-2025-31116

BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Jupyter Server Proxy has a reflected XSS issue in host parameter

vLLM Vulnerable to Remote Code Execution via Mooncake Integration

Withdrawn: Use after free in SciPy

CVE-2024-22205

CVE-2024-22203

CVE-2024-2083

CVE-2025-6278

CVE-2024-9053

CVE-2024-53899

CVE-2022-3457

CVE-2022-3439

CVE-2022-3456

CVE-2024-34249

CVE-2025-1497

CVE-2025-1716

CVE-2023-52314

CVE-2023-52311

CVE-2023-52310

CVE-2023-52309

CVE-2023-52304

CVE-2022-46742

CVE-2024-27319

CVE-2026-24178

CVE-2023-39631

CVE-2024-7776

CVE-2023-52307

CVE-2025-14009

CVE-2024-6581

CVE-2023-3765

CVE-2024-37014

CVE-2025-2828

CVE-2023-36281

CVE-2023-39659

CVE-2023-38896

CVE-2023-38860

CVE-2023-36095

CVE-2024-42835

CVE-2024-8309

CVE-2026-1709

CVE-2023-39662

CVE-2023-44467

CVE-2025-1550

CVE-2024-0964

CVE-2025-6167

CVE-2024-53924

CVE-2016-20021

Start Securing