2,258 CVEs
8 in CISA KEV
PyPI Vulnerabilities
CVE security advisories and vulnerability history for PyPI.
2,258
Total CVEs
Published
8
In CISA KEV
Exploited in the wild
439
Public exploits
With known exploit
6.3
Avg CVSS
2006–2026
Overview
PyPI has 2,258 published CVE records since 2006, of which 8 are in CISA's Known Exploited Vulnerabilities catalog and 439 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting PyPI products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.