Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1501
  • PyPI/koji
 Koji Cross-site Scripting 07 Jul
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-g2vg-8hfg-79vj
  • PyPI/koji
 Koji Cross-site Scripting 24 Dec 2024
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-7498-c9fm-g64p
  • PyPI/koji
 koji hub allows arbitrary upload destinations 24 May 2022
  • Fix available
  • Severity - 7.1 (High)
GHSA-vwp5-w4rq-g4cc
  • PyPI/koji
 Koji blacklisted paths workaround 13 May 2022
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2019-183
  • PyPI/koji
 See record for full details 09 Oct 2019
  • Fix available
GHSA-6mww-xvh7-fq4f
  • PyPI/koji
 Koji hub call does not perform correct access checks 12 Jul 2018
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2018-86
  • PyPI/koji
 See record for full details 04 Apr 2018
  • Fix available