Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
Vulnerabilities
search
All ecosystems
594208
AlmaLinux
4166
Alpaquita
7189
Alpine
3919
Android
3141
BellSoft Hardened Containers
253
Bitnami
6230
Chainguard
32835
CRAN
11
crates.io
1893
Debian
50523
Echo
2258
GHC
3
GIT
73921
GitHub Actions
37
Go
5049
Hackage
25
Hex
44
Julia
332
Linux
22036
Mageia
5758
Maven
6052
MinimOS
8522
npm
213118
NuGet
1496
openEuler
5486
openSUSE
10285
OSS-Fuzz
3724
Packagist
5002
Pub
10
PyPI
17333
Red Hat
17611
Rocky Linux
2443
RubyGems
1799
SUSE
17010
SwiftURL
42
Ubuntu
48259
VSCode
14
Wolfi
16379
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2025-192382
PyPI/raft-dask
Malicious code in raft-dask (PyPI)
1 hour ago
No fix available
MAL-2025-192380
PyPI/sketchfab-spinner
Malicious code in sketchfab-spinner (PyPI)
4 hours ago
No fix available
MAL-2025-192379
PyPI/helloharry123p
Malicious code in helloharry123p (PyPI)
8 hours ago
No fix available
GHSA-2m4f-cg75-76w2
PyPI/nicegui
NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content
10 hours ago
Fix available
Severity - 6.1 (Medium)
GHSA-72qc-wxch-74mg
PyPI/nicegui
NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection
11 hours ago
Fix available
Severity - 6.1 (Medium)
MAL-2025-192376
PyPI/graphnode
Malicious code in graphnode (PyPI)
18 hours ago
No fix available
MAL-2025-192367
PyPI/hexdeci
Malicious code in hexdeci (PyPI)
yesterday
No fix available
MAL-2025-192365
PyPI/python-tg-bot
Malicious code in python-tg-bot (PyPI)
2 days ago
No fix available
MAL-2025-192364
PyPI/blank-lib
Malicious code in blank-lib (PyPI)
2 days ago
No fix available
MAL-2025-192362
PyPI/evil-rce2
Malicious code in evil-rce2 (PyPI)
2 days ago
No fix available
MAL-2025-192363
PyPI/telco
Malicious code in telco (PyPI)
2 days ago
No fix available
MAL-2025-192351
PyPI/evil-rce
Malicious code in evil-rce (PyPI)
2 days ago
No fix available
MAL-2025-192349
PyPI/qt-main
Malicious code in qt-main (PyPI)
3 days ago
No fix available
GHSA-2xpw-w6gg-jr37
PyPI/urllib3
urllib3 streaming API improperly handles highly compressed data
3 days ago
Fix available
Severity - 8.9 (High)
GHSA-gm62-xv2j-4w53
PyPI/urllib3
urllib3 allows an unbounded number of links in the decompression chain
3 days ago
Fix available
Severity - 8.9 (High)
MAL-2025-192323
PyPI/rendom
Malicious code in rendom (PyPI)
3 days ago
No fix available
Load more...
PyPI - OSV