Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in flask-auth-sys (PyPI) MAL-2025-191730 | Malicious | Not scored | 02 Apr, 2025 | PyPI flask-auth-sys |
Malicious release: Malicious code in flask-auth-system (PyPI) MAL-2025-191731 | Malicious | Not scored | 02 Apr, 2025 | PyPI flask-auth-system |
Django Potential Denial of Service (DoS) on Windows BIT-django-2025-27556, CVE-2025-27556, GHSA-wqfg-m96j-85vm, PYSEC-2025-14 | High | 1.1% | 02 Apr, 2025 | PyPI Django PyPI django |
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument mW CVE-2025-3016, PYSEC-2025-262 | Medium | 0.7% | 31 Mar, 2025 | PyPI pyassimp |
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE File Handler. The manipulation of the argument mIndices leads to CVE-2025-3015, PYSEC-2025-261 | Medium | 0.5% | 31 Mar, 2025 | PyPI pyassimp |
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding CVE-2025-31116, GHSA-fcfq-m8p6-gw56, PYSEC-2025-48 | Critical | 0.5% | 31 Mar, 2025 | PyPI mobsf |
AWS SAM CLI Path Traversal allows file copy to local cache CVE-2025-3048, GHSA-pp64-wj43-xqcr, PYSEC-2026-1206 | Medium | 0.7% | 31 Mar, 2025 | PyPI aws-sam-cli |
AWS SAM CLI Path Traversal allows file copy to build container CVE-2025-3047, GHSA-px37-jpqx-97q9, PYSEC-2026-1207 | Medium | 0.8% | 31 Mar, 2025 | PyPI aws-sam-cli |
PyTorch is vulnerable to memory corruption through its torch.lstm_cell function BIT-pytorch-2025-3001, CVE-2025-3001, GHSA-qfhq-4f3w-5fph, PYSEC-2025-195 | Medium | 0.2% | 31 Mar, 2025 | PyPI torch |
PyTorch is vulnerable to memory corruption through its torch.jit.script function BIT-pytorch-2025-3000, CVE-2025-3000, GHSA-rrmf-rvhw-rf47, PYSEC-2025-194 | Medium | 0.2% | 31 Mar, 2025 | PyPI torch |
PyTorch is vulnerable to memory corruption through its unpack_sequence function BIT-pytorch-2025-2999, CVE-2025-2999, GHSA-vgrw-7cvw-pwgx, PYSEC-2025-193 | Medium | 0.2% | 31 Mar, 2025 | PyPI torch |
PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function BIT-pytorch-2025-2998, CVE-2025-2998, GHSA-f4hp-rmr7-r7v8, PYSEC-2025-192 | Medium | 0.2% | 31 Mar, 2025 | PyPI torch |
Malicious release: Malicious code in randomwifi (PyPI) MAL-2025-3463 | Malicious | Not scored | 31 Mar, 2025 | PyPI randomwifi |
Malicious release: Malicious code in runningwifi (PyPI) MAL-2025-3467 | Malicious | Not scored | 31 Mar, 2025 | PyPI runningwifi |
Malicious release: Malicious code in runwifi (PyPI) MAL-2025-3468 | Malicious | Not scored | 31 Mar, 2025 | PyPI runwifi |
Malicious release: Malicious code in sccket (PyPI) MAL-2025-3469 | Malicious | Not scored | 31 Mar, 2025 | PyPI sccket |
PyTorch susceptible to local Denial of Service BIT-pytorch-2025-2953, CVE-2025-2953, GHSA-3749-ghw9-m3mg, PYSEC-2025-191 | Medium | 0.3% | 30 Mar, 2025 | PyPI torch |
Malicious release: Malicious code in bitcoinlib-dev (PyPI) MAL-2025-3436, SNYK-PYTHON-BITCOINLIBDEV-9667327 | Malicious | Not scored | 30 Mar, 2025 | PyPI bitcoinlib-dev |
Malicious release: Malicious code in bitcoinlibdbfix (PyPI) MAL-2025-3437, SNYK-PYTHON-BITCOINLIBDBFIX-9667328 | Malicious | Not scored | 30 Mar, 2025 | PyPI bitcoinlibdbfix |
Malicious release: Malicious code in textgradient (PyPI) MAL-2025-3473 | Malicious | Not scored | 28 Mar, 2025 | PyPI textgradient |
Malicious release: Malicious code in ytest-cov (PyPI) MAL-2025-3020 | Malicious | Not scored | 28 Mar, 2025 | PyPI ytest-cov |
Malicious release: Malicious code in twilio-rest (PyPI) MAL-2025-3012 | Malicious | Not scored | 28 Mar, 2025 | PyPI twilio-rest |
Malicious release: Malicious code in utilmy (PyPI) MAL-2025-3013 | Malicious | Not scored | 28 Mar, 2025 | PyPI utilmy |
Malicious release: Malicious code in torahbiblecodes (PyPI) MAL-2025-3009 | Malicious | Not scored | 28 Mar, 2025 | PyPI torahbiblecodes |
Malicious release: Malicious code in tempeh (PyPI) MAL-2025-3007 | Malicious | Not scored | 28 Mar, 2025 | PyPI tempeh |
Malicious release: Malicious code in sphinxcontrib-napolean (PyPI) MAL-2025-3003 | Malicious | Not scored | 28 Mar, 2025 | PyPI sphinxcontrib-napolean |
Malicious release: Malicious code in solscan (PyPI) MAL-2025-3001 | Malicious | Not scored | 28 Mar, 2025 | PyPI solscan |
Malicious release: Malicious code in ska-low-cbf-fpga (PyPI) MAL-2025-2997 | Malicious | Not scored | 28 Mar, 2025 | PyPI ska-low-cbf-fpga |
Malicious release: Malicious code in slide-tc (PyPI) MAL-2025-2998 | Malicious | Not scored | 28 Mar, 2025 | PyPI slide-tc |
Malicious release: Malicious code in shleeh (PyPI) MAL-2025-2996 | Malicious | Not scored | 28 Mar, 2025 | PyPI shleeh |
Malicious release: Malicious code in requests-wiki (PyPI) MAL-2025-2995 | Malicious | Not scored | 28 Mar, 2025 | PyPI requests-wiki |
Malicious release: Malicious code in random-00013 (PyPI) MAL-2025-2994 | Malicious | Not scored | 28 Mar, 2025 | PyPI random-00013 |
Malicious release: Malicious code in pyroforktgcrypto-pyrofork (PyPI) MAL-2025-2990 | Malicious | Not scored | 28 Mar, 2025 | PyPI pyroforktgcrypto-pyrofork |
Malicious release: Malicious code in pyscf-fciqmc (PyPI) MAL-2025-2991 | Malicious | Not scored | 28 Mar, 2025 | PyPI pyscf-fciqmc |
Malicious release: Malicious code in pychaosvm (PyPI) MAL-2025-2988 | Malicious | Not scored | 28 Mar, 2025 | PyPI pychaosvm |
Malicious release: Malicious code in pydantic-kit (PyPI) MAL-2025-2989 | Malicious | Not scored | 28 Mar, 2025 | PyPI pydantic-kit |
Malicious release: Malicious code in piauthorizer (PyPI) MAL-2025-2987 | Malicious | Not scored | 28 Mar, 2025 | PyPI piauthorizer |
Malicious release: Malicious code in pgmysql (PyPI) MAL-2025-2986 | Malicious | Not scored | 28 Mar, 2025 | PyPI pgmysql |
Malicious release: Malicious code in pandaspytest (PyPI) MAL-2025-2985 | Malicious | Not scored | 28 Mar, 2025 | PyPI pandaspytest |
Malicious release: Malicious code in opera2d (PyPI) MAL-2025-2982 | Malicious | Not scored | 28 Mar, 2025 | PyPI opera2d |
Malicious release: Malicious code in omnigodz-random (PyPI) MAL-2025-2980 | Malicious | Not scored | 28 Mar, 2025 | PyPI omnigodz-random |
Malicious release: Malicious code in multiopython (PyPI) MAL-2025-2978 | Malicious | Not scored | 28 Mar, 2025 | PyPI multiopython |
Malicious release: Malicious code in msgspec-python313-pre (PyPI) MAL-2025-2977 | Malicious | Not scored | 28 Mar, 2025 | PyPI msgspec-python313-pre |
Malicious release: Malicious code in license-txt (PyPI) MAL-2025-2972 | Malicious | Not scored | 28 Mar, 2025 | PyPI license-txt |
Malicious release: Malicious code in libmelee (PyPI) MAL-2025-2971 | Malicious | Not scored | 28 Mar, 2025 | PyPI libmelee |
Malicious release: Malicious code in lalpulsar (PyPI) MAL-2025-2970 | Malicious | Not scored | 28 Mar, 2025 | PyPI lalpulsar |
Malicious release: Malicious code in ignore-ssl (PyPI) MAL-2025-2968 | Malicious | Not scored | 28 Mar, 2025 | PyPI ignore-ssl |
Malicious release: Malicious code in gmpykit (PyPI) MAL-2025-2966 | Malicious | Not scored | 28 Mar, 2025 | PyPI gmpykit |
Malicious release: Malicious code in flaskignoressl (PyPI) MAL-2025-2965 | Malicious | Not scored | 28 Mar, 2025 | PyPI flaskignoressl |
Malicious release: Malicious code in fenics-dolfinx (PyPI) MAL-2025-2963 | Malicious | Not scored | 28 Mar, 2025 | PyPI fenics-dolfinx |