How many CVEs does pypi have?

pypi has 962 published CVE records since 2012, including 35 in the last two years.

How many pypi CVEs are in CISA KEV?

None of pypi's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which pypi products have the most CVEs?

The pypi products with the most published CVEs are tensorflow-cpu, tensorflow-gpu, tensorflow, rdiffweb, mlflow.

What are the most common weakness types in pypi CVEs?

pypi's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-369 (Divide By Zero), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).

Are there public exploits for pypi vulnerabilities?

Yes — 237 of pypi's CVEs have a known public exploit.

How many critical pypi vulnerabilities are there?

pypi has 144 critical and 392 high-severity CVEs.

What is the average severity of pypi CVEs?

The average CVSS base score across pypi's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

962 CVEs

pypi Vulnerabilities

Name: pypi vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for pypi.

962

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

237

Public exploits

PoC or exploit code

7.1

Avg CVSS

2012–2025

Overview

pypi has 962 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 237 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting pypi products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on pypi's vulnerability posture, as a share of its 962 published CVEs.

Average CVSS: 7.1
Critical / high: 56%
Actively exploited (KEV): 0%
Public exploit available: 25%
Patch available: 99%

Severity and exploitation

How the CVSS severity of pypi's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical144

High392

Medium401

Low25

In CISA’s Known Exploited Vulnerabilities catalog

0

None of pypi's CVEs are currently listed in CISA's KEV catalog.

Public exploits

237

237 of pypi's CVEs have a known public exploit available.

Most affected products

The pypi products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in pypi CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish pypi CVE records.

Disclosure activity by year

How many pypi CVEs were published each year.

2018

19

2019

17

2020

93

2021

300

2022

202

2023

139

2024

101

2025

35

Latest pypi CVEs

The most recently disclosed vulnerabilities affecting pypi.

Cadwyn is vulnerable to an XSS attack through its docs page
CWE-79
High · CVSS 7.6
EPSS 0.2%2025-07-21
Arbitrary File Read through Path Traversal in run-llama/llama_index
CWE-29
High · CVSS 7.5
EPSS 0.5%2025-07-07
Pillow Vulnerable to Write Buffer Overflow on BCn encoding
CWE-122
High · CVSS 7.1
EPSS 0.3%2025-07-01
SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
CWE-918
Critical · CVSS 10.0
EPSS 14.7%2025-06-23
Medium vulnerability · 2025-06-23
CWE-918
Medium · CVSS 5.8
EPSS 0.4%2025-06-23
themanojdesai python-a2a api.py create_workflow path traversal
CWE-22
Medium · CVSS 5.1
EPSS 0.7%2025-06-17
Medium vulnerability · 2025-05-31
CWE-277
Medium · CVSS 5.1
EPSS 0.2%2025-05-31
vLLM allows clients to crash the openai server with invalid regex
CWE-248
Medium · CVSS 6.5
EPSS 0.4%2025-05-30
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
CWE-248
Medium · CVSS 6.5
EPSS 0.5%2025-05-30
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
CWE-1333
Medium · CVSS 6.5
EPSS 0.4%2025-05-30
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
CWE-1288
High · CVSS 7.3
EPSS 0.3%2025-05-29
vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel
CWE-208
Low · CVSS 2.6
EPSS 0.2%2025-05-29

Track new pypi CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor pypi CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

vmware1,095 CVEs MediaTek, Inc.1,053 CVEs F51,039 CVEs nvidia993 CVEs Joomla981 CVEs Hewlett Packard Enterprise895 CVEs Schneider Electric881 CVEs ImageMagick814 CVEs

Browse all vendors

Frequently asked questions

Common questions about pypi vulnerabilities.

How many CVEs does pypi have?: pypi has 962 published CVE records since 2012, including 35 in the last two years.
How many pypi CVEs are in CISA KEV?: None of pypi's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which pypi products have the most CVEs?: The pypi products with the most published CVEs are tensorflow-cpu, tensorflow-gpu, tensorflow, rdiffweb, mlflow.
What are the most common weakness types in pypi CVEs?: pypi's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-369 (Divide By Zero), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).
Are there public exploits for pypi vulnerabilities?: Yes — 237 of pypi's CVEs have a known public exploit.
How many critical pypi vulnerabilities are there?: pypi has 144 critical and 392 high-severity CVEs.
What is the average severity of pypi CVEs?: The average CVSS base score across pypi's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track pypi vulnerabilities

Monitor new pypi vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing