# PyPI package vulnerabilities Source: https://junglewise.ai/threats/vendors/pypi Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/pypi.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7,561 vulnerabilities in PyPI packages: 24 in the last 7 days and 946 in the last 90 days, 456 of them critical and 22 exploited in the wild. The most recent, CVE-2026-100397, was published on 13 November 2026. 277 vulnerabilities in the last four weeks, down 15% on the four before (325). 23 critical against 38, 2 exploited in the wild against 0. 489 packages have a page of their own. ## Counts - Last 7 days: 24 - Last 30 days: 288 - Last 90 days: 946 - All time: 7561 (456 critical, 22 exploited in the wild) ## About PyPI Python package index providing access to Python software packages and libraries. ## Latest PyPI package vulnerabilities - [CVE-2026-100397: Rucio unauthenticated administrator impersonation in SSH challenge tokens](https://junglewise.ai/threats/cve-2026-100397-rucio-unauthenticated-administrator-impersonation-through-ssh) (critical, CVSS 9.8, published 13 Nov 2026) - [CVE-2026-128067: Pillow heap buffer overflow in TIFF encoder with mismatched geometry tags](https://junglewise.ai/threats/cve-2026-128067-pillow-heap-buffer-overflow-saving-tiff-with-libtiff-when-tags) (high, published 13 Nov 2026) - [CVE-2026-128066: Pillow memory denial of service in TIFF and EXIF parsing](https://junglewise.ai/threats/cve-2026-128066-pillow-memory-dos-in-tiff-and-exif-ifd-parsing-via-overlapping) (medium, published 13 Nov 2026) - [CVE-2026-126192: Soup Sieve ReDoS via general sibling combinator in :has()](https://junglewise.ai/threats/cve-2026-126192-soup-sieve-is-a-css-selector-library-designed-to-be-used-with) (medium, published 12 Nov 2026) - [CVE-2026-126190: Soup Sieve polynomial DoS in descendant combinator matching](https://junglewise.ai/threats/cve-2026-126190-soup-sieve-is-a-css-selector-library-designed-to-be-used-with) (high, CVSS 7.5, published 12 Nov 2026) - [CVE-2026-68549: ClickMigrate is a database migration tool for ClickHouse with automatic SQL migration management and version tracking…](https://junglewise.ai/threats/cve-2026-68549-clickmigrate-has-path-traversal-in-revision-m-argument) (low, CVSS 3.3, published 11 Nov 2026) - [CVE-2026-125123: compose-lint command injection via unsanitized stderr output](https://junglewise.ai/threats/cve-2026-125123-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 10 Nov 2026) - [CVE-2026-125122: compose-lint CI command injection in JSON and SARIF output](https://junglewise.ai/threats/cve-2026-125122-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 10 Nov 2026) - [CVE-2026-125121: compose-lint workflow command injection via Unicode whitespace](https://junglewise.ai/threats/cve-2026-125121-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 10 Nov 2026) - [CVE-2026-77433: Kiwi TCMS account confirmation open redirect via protocol-relative URLs](https://junglewise.ai/threats/cve-2026-77433-kiwi-tcms-account-confirmation-open-redirect-through-protocol) (medium, CVSS 6.1, published 9 Nov 2026) - [CVE-2026-102289: zizmor debug logging prints GitHub credentials in cleartext](https://junglewise.ai/threats/cve-2026-102289-zizmor-debug-logging-prints-available-github-credentials-in) (high, CVSS 4, published 9 Nov 2026) - [CVE-2026-123796: compose-lint information disclosure via incomplete .env remediation at finding limit](https://junglewise.ai/threats/cve-2026-123796-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-123373: compose-lint path traversal via symlink following in Compose files](https://junglewise.ai/threats/cve-2026-123373-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-123372: compose-lint unintended secret exposure in CL-0004 and CL-0019 findings](https://junglewise.ai/threats/cve-2026-123372-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-123371: compose-lint information disclosure via symlink policy file](https://junglewise.ai/threats/cve-2026-123371-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-123370: compose-lint fix engine line break handling bypass](https://junglewise.ai/threats/cve-2026-123370-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-123369: compose-lint command injection in GitHub Actions and Azure Pipelines output](https://junglewise.ai/threats/cve-2026-123369-compose-lint-is-a-docker-compose-security-linter-that-identifies) (medium, CVSS 4.3, published 9 Nov 2026) - [CVE-2026-123368: compose-lint symlink path traversal environment variable exposure](https://junglewise.ai/threats/cve-2026-123368-compose-lint-is-a-docker-compose-security-linter-that-identifies) (low, CVSS 3.1, published 9 Nov 2026) - [CVE-2026-123364: OctoPrint stored XSS in connection parameters](https://junglewise.ai/threats/cve-2026-123364-octoprint-provides-a-web-interface-for-controlling-consumer-3d) (medium, CVSS 4, published 9 Nov 2026) - [CVE-2026-103022: Urwid encoding handling denial of service in web display](https://junglewise.ai/threats/cve-2026-103022-urwid-is-a-console-user-interface-library-for-python-prior-to-4) (medium, CVSS 5.3, published 6 Nov 2026) - [CVE-2026-102610: fast-agent unauthenticated remote code execution in serve](https://junglewise.ai/threats/cve-2026-102610-fast-agent-is-a-framework-for-building-running-and-evaluating-ai) (medium, CVSS 6.4, published 6 Nov 2026) - [CVE-2026-55649: GeoNode stored XSS in documents metadata abstract field](https://junglewise.ai/threats/cve-2026-55649-geonode-has-stored-xss-in-documents-metadata-abstract-field) (medium, CVSS 6.3, published 6 Nov 2026) - [CVE-2026-46429: GeoNode unrestricted file upload in upload service](https://junglewise.ai/threats/cve-2026-46429-geonode-has-unrestricted-file-upload) (medium, CVSS 5.5, published 6 Nov 2026) - [CVE-2026-33050: GeoNode OS command injection in uploaded file layer name](https://junglewise.ai/threats/cve-2026-33050-geonode-has-os-command-injection-via-uploaded-file-layer-name) (high, CVSS 8.8, published 6 Nov 2026) - [CVE-2026-113663: AG2 shell command injection in SandboxShellTool](https://junglewise.ai/threats/cve-2026-113663-ag2-is-an-open-source-agentos-from-0-13-2-until-ag2-1-1-1-and) (high, CVSS 8.8, published 5 Nov 2026) ## Most severe PyPI package vulnerabilities - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-0770: Langflow remote code execution in validate endpoint](https://junglewise.ai/threats/cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint) (critical, exploited in the wild, CVSS 9.8, published 23 Jan 2026) - [CVE-2026-39987: Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass](https://junglewise.ai/threats/cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket) (critical, exploited in the wild, CVSS 9.8, published 8 Apr 2026) - [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (critical, exploited in the wild, CVSS 9.8, published 20 Mar 2026) - [CVE-2026-42208: BerriAI LiteLLM SQL injection in Proxy API key verification](https://junglewise.ai/threats/cve-2026-42208-berriai-litellm-sql-injection-in-proxy-api-key-verification) (critical, exploited in the wild, CVSS 9.8, published 8 May 2026) - [CVE-2026-102895: GPUStack authentication bypass via localhost spoofing](https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model) (critical, exploited in the wild, CVSS 9.8, published 4 Nov 2026) - [CVE-2026-64849: MLflow unauthenticated SSRF via unvalidated webhook redirects](https://junglewise.ai/threats/cve-2026-64849-mlflow-server-side-request-forgery) (critical, exploited in the wild, CVSS 9.3, published 17 Aug 2026) - [CVE-2022-33891: Apache Spark OS command injection in Spark UI via impersonation](https://junglewise.ai/threats/cve-2022-33891-apache-spark-os-command-injection-in-spark-ui-via-impersonation) (critical, exploited in the wild, CVSS 8.8, published 19 Jul 2022) - [CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE](https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to) (critical, exploited in the wild, CVSS 8.8, published 6 Dec 2025) - [CVE-2025-62593: PYSEC-2026-520 - Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack](https://junglewise.ai/threats/cve-2025-62593-ray-project-ray-code-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 26 Nov 2025) ## Vulnerabilities per week 277 vulnerabilities in the last four weeks, down 15% on the four before (325). 23 critical against 38, 2 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 138 | 14 | 1 | | 24 Aug 2026 | 122 | 19 | 0 | | 31 Aug 2026 | 26 | 1 | 0 | | 7 Sep 2026 | 39 | 0 | 0 | | 14 Sep 2026 | 107 | 22 | 0 | | 21 Sep 2026 | 81 | 7 | 0 | | 28 Sep 2026 | 58 | 5 | 0 | | 5 Oct 2026 | 79 | 4 | 0 | | 12 Oct 2026 | 23 | 3 | 0 | | 19 Oct 2026 | 169 | 12 | 1 | | 26 Oct 2026 | 57 | 2 | 0 | | 2 Nov 2026 | 28 | 6 | 1 | | 9 Nov 2026 | 19 | 1 | 0 | ## PyPI packages - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities - [exiv2 (PyPI)](https://junglewise.ai/threats/technologies/exiv2): 85 vulnerabilities - [nltk (PyPI)](https://junglewise.ai/threats/technologies/nltk): 82 vulnerabilities - [ansible (PyPI)](https://junglewise.ai/threats/technologies/ansible): 76 vulnerabilities - [salt (PyPI)](https://junglewise.ai/threats/technologies/pypi-salt): 72 vulnerabilities - [pypdf (PyPI)](https://junglewise.ai/threats/technologies/pypdf): 69 vulnerabilities - [apache-superset (PyPI)](https://junglewise.ai/threats/technologies/apache-superset): 68 vulnerabilities - [openssl-encrypt (PyPI)](https://junglewise.ai/threats/technologies/pypi-openssl-encrypt): 60 vulnerabilities - [pyload-ng (PyPI)](https://junglewise.ai/threats/technologies/pyload-ng): 59 vulnerabilities - [aiohttp (PyPI)](https://junglewise.ai/threats/technologies/aiohttp): 56 vulnerabilities - [gradio (PyPI)](https://junglewise.ai/threats/technologies/gradio): 56 vulnerabilities - [praisonaiagents (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonaiagents): 56 vulnerabilities - [nova (PyPI)](https://junglewise.ai/threats/technologies/pypi-nova): 55 vulnerabilities - [openbabel (PyPI)](https://junglewise.ai/threats/technologies/openbabel): 48 vulnerabilities - [langflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-langflow): 48 vulnerabilities - [keystone (PyPI)](https://junglewise.ai/threats/technologies/keystone): 47 vulnerabilities - [gitpython (PyPI)](https://junglewise.ai/threats/technologies/pypi-gitpython): 47 vulnerabilities - [vyper (PyPI)](https://junglewise.ai/threats/technologies/vyper): 47 vulnerabilities - [matrix-synapse (PyPI)](https://junglewise.ai/threats/technologies/matrix-synapse): 45 vulnerabilities - [litellm (PyPI)](https://junglewise.ai/threats/technologies/pypi-litellm): 45 vulnerabilities - [weblate (PyPI)](https://junglewise.ai/threats/technologies/weblate): 44 vulnerabilities - [rdiffweb (PyPI)](https://junglewise.ai/threats/technologies/rdiffweb): 43 vulnerabilities - [moin (PyPI)](https://junglewise.ai/threats/technologies/moin): 41 vulnerabilities - [pyassimp (PyPI)](https://junglewise.ai/threats/technologies/pyassimp): 36 vulnerabilities - [opencv-contrib-python (PyPI)](https://junglewise.ai/threats/technologies/opencv-contrib-python): 32 vulnerabilities - [opencv-python (PyPI)](https://junglewise.ai/threats/technologies/opencv-python): 32 vulnerabilities - [paddlepaddle (PyPI)](https://junglewise.ai/threats/technologies/paddlepaddle): 32 vulnerabilities - [transformers (PyPI)](https://junglewise.ai/threats/technologies/pypi-transformers): 32 vulnerabilities - [torch (PyPI)](https://junglewise.ai/threats/technologies/torch): 32 vulnerabilities - [mcp-atlassian (PyPI)](https://junglewise.ai/threats/technologies/mcp-atlassian): 30 vulnerabilities - [pgadmin4 (PyPI)](https://junglewise.ai/threats/technologies/pgadmin4): 28 vulnerabilities - [Keras (PyPI)](https://junglewise.ai/threats/technologies/keras): 27 vulnerabilities - [praisonai-platform (PyPI)](https://junglewise.ai/threats/technologies/praisonai-platform): 27 vulnerabilities - [glances (PyPI)](https://junglewise.ai/threats/technologies/glances): 26 vulnerabilities - [langchain (PyPI)](https://junglewise.ai/threats/technologies/langchain): 26 vulnerabilities - [twisted (PyPI)](https://junglewise.ai/threats/technologies/pypi-twisted): 26 vulnerabilities - [wagtail (PyPI)](https://junglewise.ai/threats/technologies/pypi-wagtail): 26 vulnerabilities - [tornado (PyPI)](https://junglewise.ai/threats/technologies/tornado): 26 vulnerabilities - [OctoPrint (PyPI)](https://junglewise.ai/threats/technologies/octoprint): 25 vulnerabilities - [pyjwt (PyPI)](https://junglewise.ai/threats/technologies/pypi-pyjwt): 25 vulnerabilities - [urllib3 (PyPI)](https://junglewise.ai/threats/technologies/urllib3): 25 vulnerabilities - [cryptography (PyPI)](https://junglewise.ai/threats/technologies/cryptography): 24 vulnerabilities - [lollms (PyPI)](https://junglewise.ai/threats/technologies/pypi-lollms): 24 vulnerabilities - [virtualenv (PyPI)](https://junglewise.ai/threats/technologies/virtualenv): 24 vulnerabilities - [crawl4ai (PyPI)](https://junglewise.ai/threats/technologies/crawl4ai): 23 vulnerabilities - [mindsdb (PyPI)](https://junglewise.ai/threats/technologies/mindsdb): 23 vulnerabilities - [mistune (PyPI)](https://junglewise.ai/threats/technologies/mistune): 23 vulnerabilities - [authlib (PyPI)](https://junglewise.ai/threats/technologies/authlib): 22 vulnerabilities - [changedetection.io (PyPI)](https://junglewise.ai/threats/technologies/changedetection-io): 22 vulnerabilities - [llama-index (PyPI)](https://junglewise.ai/threats/technologies/llama-index): 22 vulnerabilities - [mobsf (PyPI)](https://junglewise.ai/threats/technologies/mobsf): 22 vulnerabilities - [OpenEXR (PyPI)](https://junglewise.ai/threats/technologies/openexr): 22 vulnerabilities - [pycti (PyPI)](https://junglewise.ai/threats/technologies/pycti): 22 vulnerabilities - [glance (PyPI)](https://junglewise.ai/threats/technologies/pypi-glance): 22 vulnerabilities - [neutron (PyPI)](https://junglewise.ai/threats/technologies/pypi-neutron): 22 vulnerabilities - [wger (PyPI)](https://junglewise.ai/threats/technologies/wger): 22 vulnerabilities - [astrbot (PyPI)](https://junglewise.ai/threats/technologies/astrbot): 21 vulnerabilities - [chuanhuchatgpt (PyPI)](https://junglewise.ai/threats/technologies/chuanhuchatgpt): 21 vulnerabilities - [ethyca-fides (PyPI)](https://junglewise.ai/threats/technologies/ethyca-fides): 21 vulnerabilities - [notebook (PyPI)](https://junglewise.ai/threats/technologies/pypi-notebook): 21 vulnerabilities - [filelock (PyPI)](https://junglewise.ai/threats/technologies/filelock): 20 vulnerabilities - [aim (PyPI)](https://junglewise.ai/threats/technologies/pypi-aim): 20 vulnerabilities - [vantage6 (PyPI)](https://junglewise.ai/threats/technologies/vantage6): 20 vulnerabilities - [Zope (PyPI)](https://junglewise.ai/threats/technologies/zope): 20 vulnerabilities - [lemur (PyPI)](https://junglewise.ai/threats/technologies/lemur): 19 vulnerabilities - [nautobot (PyPI)](https://junglewise.ai/threats/technologies/nautobot): 19 vulnerabilities - [docling (PyPI)](https://junglewise.ai/threats/technologies/pypi-docling): 19 vulnerabilities - [calibreweb (PyPI)](https://junglewise.ai/threats/technologies/calibreweb): 18 vulnerabilities - [cobbler (PyPI)](https://junglewise.ai/threats/technologies/cobbler): 18 vulnerabilities - [h2o (PyPI)](https://junglewise.ai/threats/technologies/h2o): 18 vulnerabilities - [mercurial (PyPI)](https://junglewise.ai/threats/technologies/mercurial): 18 vulnerabilities - [onnx (PyPI)](https://junglewise.ai/threats/technologies/onnx): 18 vulnerabilities - [jupyterlab (PyPI)](https://junglewise.ai/threats/technologies/pypi-jupyterlab): 18 vulnerabilities - [scrapy (PyPI)](https://junglewise.ai/threats/technologies/scrapy): 18 vulnerabilities - [bentoml (PyPI)](https://junglewise.ai/threats/technologies/bentoml): 17 vulnerabilities - [nicegui (PyPI)](https://junglewise.ai/threats/technologies/nicegui): 17 vulnerabilities - [jupyter-server (PyPI)](https://junglewise.ai/threats/technologies/pypi-jupyter-server): 17 vulnerabilities - [djust (PyPI)](https://junglewise.ai/threats/technologies/djust): 16 vulnerabilities - [fickling (PyPI)](https://junglewise.ai/threats/technologies/fickling): 16 vulnerabilities - [indico (PyPI)](https://junglewise.ai/threats/technologies/indico): 16 vulnerabilities - [label-studio (PyPI)](https://junglewise.ai/threats/technologies/label-studio): 16 vulnerabilities - [monai (PyPI)](https://junglewise.ai/threats/technologies/monai): 16 vulnerabilities - [modoboa (PyPI)](https://junglewise.ai/threats/technologies/pypi-modoboa): 16 vulnerabilities - [werkzeug (PyPI)](https://junglewise.ai/threats/technologies/werkzeug): 16 vulnerabilities - [agentscope (PyPI)](https://junglewise.ai/threats/technologies/agentscope): 15 vulnerabilities - [copyparty (PyPI)](https://junglewise.ai/threats/technologies/copyparty): 15 vulnerabilities - [horizon (PyPI)](https://junglewise.ai/threats/technologies/horizon): 15 vulnerabilities - [ckan (PyPI)](https://junglewise.ai/threats/technologies/pypi-ckan): 15 vulnerabilities - [openc3 (PyPI)](https://junglewise.ai/threats/technologies/pypi-openc3): 15 vulnerabilities - [sentry (PyPI)](https://junglewise.ai/threats/technologies/pypi-sentry): 15 vulnerabilities - [roundup (PyPI)](https://junglewise.ai/threats/technologies/roundup): 15 vulnerabilities - [trytond (PyPI)](https://junglewise.ai/threats/technologies/trytond): 15 vulnerabilities - [apache-iotdb (PyPI)](https://junglewise.ai/threats/technologies/apache-iotdb): 14 vulnerabilities - [dulwich (PyPI)](https://junglewise.ai/threats/technologies/dulwich): 14 vulnerabilities - [flask-appbuilder (PyPI)](https://junglewise.ai/threats/technologies/flask-appbuilder): 14 vulnerabilities - [kiwitcms (PyPI)](https://junglewise.ai/threats/technologies/kiwitcms): 14 vulnerabilities - [lmdeploy (PyPI)](https://junglewise.ai/threats/technologies/lmdeploy): 14 vulnerabilities - [onionshare-cli (PyPI)](https://junglewise.ai/threats/technologies/onionshare-cli): 14 vulnerabilities - [pip (PyPI)](https://junglewise.ai/threats/technologies/pip): 14 vulnerabilities - [pydantic-ai (PyPI)](https://junglewise.ai/threats/technologies/pydantic-ai): 14 vulnerabilities - [pydantic-ai-slim (PyPI)](https://junglewise.ai/threats/technologies/pydantic-ai-slim): 14 vulnerabilities - [pyftpdlib (PyPI)](https://junglewise.ai/threats/technologies/pyftpdlib): 14 vulnerabilities - [swift (PyPI)](https://junglewise.ai/threats/technologies/pypi-swift): 14 vulnerabilities - [zenml (PyPI)](https://junglewise.ai/threats/technologies/pypi-zenml): 14 vulnerabilities - [waitress (PyPI)](https://junglewise.ai/threats/technologies/waitress): 14 vulnerabilities - [datamodel-code-generator (PyPI)](https://junglewise.ai/threats/technologies/pypi-datamodel-code-generator): 13 vulnerabilities - [starlette (PyPI)](https://junglewise.ai/threats/technologies/pypi-starlette): 13 vulnerabilities - [pyspark (PyPI)](https://junglewise.ai/threats/technologies/pyspark): 13 vulnerabilities - [pywasm3 (PyPI)](https://junglewise.ai/threats/technologies/pywasm3): 13 vulnerabilities - [homeassistant (PyPI)](https://junglewise.ai/threats/technologies/homeassistant): 12 vulnerabilities - [inventree (PyPI)](https://junglewise.ai/threats/technologies/inventree): 12 vulnerabilities - [justhtml (PyPI)](https://junglewise.ai/threats/technologies/justhtml): 12 vulnerabilities - [keylime (PyPI)](https://junglewise.ai/threats/technologies/keylime): 12 vulnerabilities - [lunasvg (PyPI)](https://junglewise.ai/threats/technologies/lunasvg): 12 vulnerabilities - [motioneye (PyPI)](https://junglewise.ai/threats/technologies/motioneye): 12 vulnerabilities - [ray (PyPI)](https://junglewise.ai/threats/technologies/ray): 12 vulnerabilities - [yt-dlp (PyPI)](https://junglewise.ai/threats/technologies/yt-dlp): 12 vulnerabilities - [GDAL (PyPI)](https://junglewise.ai/threats/technologies/gdal): 11 vulnerabilities - [jinja2 (PyPI)](https://junglewise.ai/threats/technologies/jinja2): 11 vulnerabilities - [langroid (PyPI)](https://junglewise.ai/threats/technologies/langroid): 11 vulnerabilities - [lief (PyPI)](https://junglewise.ai/threats/technologies/lief): 11 vulnerabilities - [opencv-contrib-python-headless (PyPI)](https://junglewise.ai/threats/technologies/opencv-contrib-python-headless): 11 vulnerabilities - [opencv-python-headless (PyPI)](https://junglewise.ai/threats/technologies/opencv-python-headless): 11 vulnerabilities - [pretix (PyPI)](https://junglewise.ai/threats/technologies/pypi-pretix): 11 vulnerabilities - [Zope2 (PyPI)](https://junglewise.ai/threats/technologies/zope2): 11 vulnerabilities - [bbot (PyPI)](https://junglewise.ai/threats/technologies/bbot): 10 vulnerabilities - [bleach (PyPI)](https://junglewise.ai/threats/technologies/bleach): 10 vulnerabilities - [django-cms (PyPI)](https://junglewise.ai/threats/technologies/django-cms): 10 vulnerabilities - [fastmcp (PyPI)](https://junglewise.ai/threats/technologies/fastmcp): 10 vulnerabilities - [lightrag-hku (PyPI)](https://junglewise.ai/threats/technologies/lightrag-hku): 10 vulnerabilities - [litestar (PyPI)](https://junglewise.ai/threats/technologies/litestar): 10 vulnerabilities - [llama-index-core (PyPI)](https://junglewise.ai/threats/technologies/llama-index-core): 10 vulnerabilities - [prefect (PyPI)](https://junglewise.ai/threats/technologies/prefect): 10 vulnerabilities - [pymongo (PyPI)](https://junglewise.ai/threats/technologies/pymongo): 10 vulnerabilities - [bugsink (PyPI)](https://junglewise.ai/threats/technologies/pypi-bugsink): 10 vulnerabilities - [compose-lint (PyPI)](https://junglewise.ai/threats/technologies/pypi-compose-lint): 10 vulnerabilities - [hermes-agent (PyPI)](https://junglewise.ai/threats/technologies/pypi-hermes-agent): 10 vulnerabilities - [mcp (PyPI)](https://junglewise.ai/threats/technologies/pypi-mcp): 10 vulnerabilities - [metagpt (PyPI)](https://junglewise.ai/threats/technologies/pypi-metagpt): 10 vulnerabilities - [sglang (PyPI)](https://junglewise.ai/threats/technologies/pypi-sglang): 10 vulnerabilities - [sqlparse (PyPI)](https://junglewise.ai/threats/technologies/sqlparse): 10 vulnerabilities - [stigmem-node (PyPI)](https://junglewise.ai/threats/technologies/stigmem-node): 10 vulnerabilities - [trac (PyPI)](https://junglewise.ai/threats/technologies/trac): 10 vulnerabilities - [aubio (PyPI)](https://junglewise.ai/threats/technologies/aubio): 9 vulnerabilities - [cinder (PyPI)](https://junglewise.ai/threats/technologies/cinder): 9 vulnerabilities - [compliance-trestle (PyPI)](https://junglewise.ai/threats/technologies/compliance-trestle): 9 vulnerabilities - [dtale (PyPI)](https://junglewise.ai/threats/technologies/dtale): 9 vulnerabilities - [jupyterhub (PyPI)](https://junglewise.ai/threats/technologies/jupyterhub): 9 vulnerabilities - [langchain-core (PyPI)](https://junglewise.ai/threats/technologies/langchain-core): 9 vulnerabilities - [lightning (PyPI)](https://junglewise.ai/threats/technologies/lightning): 9 vulnerabilities - [numpy (PyPI)](https://junglewise.ai/threats/technologies/numpy): 9 vulnerabilities - [geonode (PyPI)](https://junglewise.ai/threats/technologies/pypi-geonode): 9 vulnerabilities - [ironic (PyPI)](https://junglewise.ai/threats/technologies/pypi-ironic): 9 vulnerabilities - [pyasn1 (PyPI)](https://junglewise.ai/threats/technologies/pypi-pyasn1): 9 vulnerabilities - [python-keystoneclient (PyPI)](https://junglewise.ai/threats/technologies/python-keystoneclient): 9 vulnerabilities - [python-multipart (PyPI)](https://junglewise.ai/threats/technologies/python-multipart): 9 vulnerabilities - [pytorch-lightning (PyPI)](https://junglewise.ai/threats/technologies/pytorch-lightning): 9 vulnerabilities - [ryu (PyPI)](https://junglewise.ai/threats/technologies/ryu): 9 vulnerabilities - [strawberry-graphql (PyPI)](https://junglewise.ai/threats/technologies/strawberry-graphql): 9 vulnerabilities - [ujson (PyPI)](https://junglewise.ai/threats/technologies/ujson): 9 vulnerabilities - [uv (PyPI)](https://junglewise.ai/threats/technologies/uv): 9 vulnerabilities - [codechecker (PyPI)](https://junglewise.ai/threats/technologies/codechecker): 8 vulnerabilities - [dbgpt (PyPI)](https://junglewise.ai/threats/technologies/dbgpt): 8 vulnerabilities - [democritus-networking (PyPI)](https://junglewise.ai/threats/technologies/democritus-networking): 8 vulnerabilities - [democritus-strings (PyPI)](https://junglewise.ai/threats/technologies/democritus-strings): 8 vulnerabilities - [djangorestframework (PyPI)](https://junglewise.ai/threats/technologies/djangorestframework): 8 vulnerabilities - [docling-slim (PyPI)](https://junglewise.ai/threats/technologies/docling-slim): 8 vulnerabilities - [flyto-core (PyPI)](https://junglewise.ai/threats/technologies/flyto-core): 8 vulnerabilities - [ipython (PyPI)](https://junglewise.ai/threats/technologies/ipython): 8 vulnerabilities - [jwcrypto (PyPI)](https://junglewise.ai/threats/technologies/jwcrypto): 8 vulnerabilities - [langflow-base (PyPI)](https://junglewise.ai/threats/technologies/langflow-base): 8 vulnerabilities - [lxml (PyPI)](https://junglewise.ai/threats/technologies/lxml): 8 vulnerabilities - [asyncssh (PyPI)](https://junglewise.ai/threats/technologies/pypi-asyncssh): 8 vulnerabilities - [sagemaker (PyPI)](https://junglewise.ai/threats/technologies/pypi-sagemaker): 8 vulnerabilities - [requests (PyPI)](https://junglewise.ai/threats/technologies/requests): 8 vulnerabilities - [snowflake-connector-python (PyPI)](https://junglewise.ai/threats/technologies/snowflake-connector-python): 8 vulnerabilities - [web2py (PyPI)](https://junglewise.ai/threats/technologies/web2py): 8 vulnerabilities - [apache-atlas (PyPI)](https://junglewise.ai/threats/technologies/apache-atlas): 7 vulnerabilities - [bitdefender (PyPI)](https://junglewise.ai/threats/technologies/bitdefender): 7 vulnerabilities - [democritus-hypothesis (PyPI)](https://junglewise.ai/threats/technologies/democritus-hypothesis): 7 vulnerabilities - [executorch (PyPI)](https://junglewise.ai/threats/technologies/executorch): 7 vulnerabilities - [Flask-Security-Too (PyPI)](https://junglewise.ai/threats/technologies/flask-security-too): 7 vulnerabilities - [fschat (PyPI)](https://junglewise.ai/threats/technologies/fschat): 7 vulnerabilities - [graphite-web (PyPI)](https://junglewise.ai/threats/technologies/graphite-web): 7 vulnerabilities - [matrix-sydent (PyPI)](https://junglewise.ai/threats/technologies/matrix-sydent): 7 vulnerabilities - [mayan-edms (PyPI)](https://junglewise.ai/threats/technologies/mayan-edms): 7 vulnerabilities - [omero-web (PyPI)](https://junglewise.ai/threats/technologies/omero-web): 7 vulnerabilities - [products-cmfplone (PyPI)](https://junglewise.ai/threats/technologies/products-cmfplone): 7 vulnerabilities - [ansible-core (PyPI)](https://junglewise.ai/threats/technologies/pypi-ansible-core): 7 vulnerabilities - [copier (PyPI)](https://junglewise.ai/threats/technologies/pypi-copier): 7 vulnerabilities - [langchain-community (PyPI)](https://junglewise.ai/threats/technologies/pypi-langchain-community): 7 vulnerabilities - [ollama (PyPI)](https://junglewise.ai/threats/technologies/pypi-ollama): 7 vulnerabilities - [pysaml2 (PyPI)](https://junglewise.ai/threats/technologies/pypi-pysaml2): 7 vulnerabilities - [rucio-webui (PyPI)](https://junglewise.ai/threats/technologies/rucio-webui): 7 vulnerabilities - [social-auth-core (PyPI)](https://junglewise.ai/threats/technologies/social-auth-core): 7 vulnerabilities - [tryton (PyPI)](https://junglewise.ai/threats/technologies/tryton): 7 vulnerabilities - [tuf (PyPI)](https://junglewise.ai/threats/technologies/tuf): 7 vulnerabilities - [ait-core (PyPI)](https://junglewise.ai/threats/technologies/ait-core): 6 vulnerabilities - [ajenti-panel (PyPI)](https://junglewise.ai/threats/technologies/ajenti-panel): 6 vulnerabilities - [apache-airflow-providers-apache-hive (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow-providers-apache-hive): 6 vulnerabilities - [buildbot (PyPI)](https://junglewise.ai/threats/technologies/buildbot): 6 vulnerabilities - [democritus-file-system (PyPI)](https://junglewise.ai/threats/technologies/democritus-file-system): 6 vulnerabilities - [DIRAC (PyPI)](https://junglewise.ai/threats/technologies/dirac): 6 vulnerabilities - [Flask-Cors (PyPI)](https://junglewise.ai/threats/technologies/flask-cors): 6 vulnerabilities - [grpcio (PyPI)](https://junglewise.ai/threats/technologies/grpcio): 6 vulnerabilities - [guarddog (PyPI)](https://junglewise.ai/threats/technologies/guarddog): 6 vulnerabilities - [ipa (PyPI)](https://junglewise.ai/threats/technologies/ipa): 6 vulnerabilities - [mailman (PyPI)](https://junglewise.ai/threats/technologies/mailman): 6 vulnerabilities - [mem0ai (PyPI)](https://junglewise.ai/threats/technologies/mem0ai): 6 vulnerabilities - [mesop (PyPI)](https://junglewise.ai/threats/technologies/mesop): 6 vulnerabilities - [Mezzanine (PyPI)](https://junglewise.ai/threats/technologies/mezzanine): 6 vulnerabilities - [mitmproxy (PyPI)](https://junglewise.ai/threats/technologies/mitmproxy): 6 vulnerabilities - [nbconvert (PyPI)](https://junglewise.ai/threats/technologies/nbconvert): 6 vulnerabilities - [oauthenticator (PyPI)](https://junglewise.ai/threats/technologies/oauthenticator): 6 vulnerabilities - [openviking (PyPI)](https://junglewise.ai/threats/technologies/openviking): 6 vulnerabilities - [apache-airflow-providers-google (PyPI)](https://junglewise.ai/threats/technologies/pypi-apache-airflow-providers-google): 6 vulnerabilities - [chainlit (PyPI)](https://junglewise.ai/threats/technologies/pypi-chainlit): 6 vulnerabilities - [esphome (PyPI)](https://junglewise.ai/threats/technologies/pypi-esphome): 6 vulnerabilities - [freeipa (PyPI)](https://junglewise.ai/threats/technologies/pypi-freeipa): 6 vulnerabilities - [joserfc (PyPI)](https://junglewise.ai/threats/technologies/pypi-joserfc): 6 vulnerabilities - [langchain-chatchat (PyPI)](https://junglewise.ai/threats/technologies/pypi-langchain-chatchat): 6 vulnerabilities - [mage-ai (PyPI)](https://junglewise.ai/threats/technologies/pypi-mage-ai): 6 vulnerabilities - [paramiko (PyPI)](https://junglewise.ai/threats/technologies/pypi-paramiko): 6 vulnerabilities - [restrictedpython (PyPI)](https://junglewise.ai/threats/technologies/pypi-restrictedpython): 6 vulnerabilities - [saleor (PyPI)](https://junglewise.ai/threats/technologies/pypi-saleor): 6 vulnerabilities - [setuptools (PyPI)](https://junglewise.ai/threats/technologies/pypi-setuptools): 6 vulnerabilities - [wabt (PyPI)](https://junglewise.ai/threats/technologies/pypi-wabt): 6 vulnerabilities - [whoogle-search (PyPI)](https://junglewise.ai/threats/technologies/pypi-whoogle-search): 6 vulnerabilities - [python-gnupg (PyPI)](https://junglewise.ai/threats/technologies/python-gnupg): 6 vulnerabilities - [soupsieve (PyPI)](https://junglewise.ai/threats/technologies/soupsieve): 6 vulnerabilities - [thumbor (PyPI)](https://junglewise.ai/threats/technologies/thumbor): 6 vulnerabilities - [torchserve (PyPI)](https://junglewise.ai/threats/technologies/torchserve): 6 vulnerabilities - [AccessControl (PyPI)](https://junglewise.ai/threats/technologies/accesscontrol): 5 vulnerabilities - [apache-airflow-core (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow-core): 5 vulnerabilities - [certifi (PyPI)](https://junglewise.ai/threats/technologies/certifi): 5 vulnerabilities - [composio-core (PyPI)](https://junglewise.ai/threats/technologies/composio-core): 5 vulnerabilities - [ecdsa (PyPI)](https://junglewise.ai/threats/technologies/ecdsa): 5 vulnerabilities - [feedparser (PyPI)](https://junglewise.ai/threats/technologies/feedparser): 5 vulnerabilities - [flask (PyPI)](https://junglewise.ai/threats/technologies/flask): 5 vulnerabilities - [httpie (PyPI)](https://junglewise.ai/threats/technologies/httpie): 5 vulnerabilities - [httpx2 (PyPI)](https://junglewise.ai/threats/technologies/httpx2): 5 vulnerabilities - [hydra-core (PyPI)](https://junglewise.ai/threats/technologies/hydra-core): 5 vulnerabilities - [kallithea (PyPI)](https://junglewise.ai/threats/technologies/kallithea): 5 vulnerabilities - [kedro (PyPI)](https://junglewise.ai/threats/technologies/kedro): 5 vulnerabilities - [langchain-experimental (PyPI)](https://junglewise.ai/threats/technologies/langchain-experimental): 5 vulnerabilities - [langgraph-checkpoint-sqlite (PyPI)](https://junglewise.ai/threats/technologies/langgraph-checkpoint-sqlite): 5 vulnerabilities - [linuxfabrik-lib (PyPI)](https://junglewise.ai/threats/technologies/linuxfabrik-lib): 5 vulnerabilities - [lmdb (PyPI)](https://junglewise.ai/threats/technologies/lmdb): 5 vulnerabilities - [Mako (PyPI)](https://junglewise.ai/threats/technologies/mako): 5 vulnerabilities - [mrab-regex (PyPI)](https://junglewise.ai/threats/technologies/mrab-regex): 5 vulnerabilities - [ms-swift (PyPI)](https://junglewise.ai/threats/technologies/ms-swift): 5 vulnerabilities - [nemo-toolkit (PyPI)](https://junglewise.ai/threats/technologies/nemo-toolkit): 5 vulnerabilities - [nvflare (PyPI)](https://junglewise.ai/threats/technologies/nvflare): 5 vulnerabilities - [oauthlib (PyPI)](https://junglewise.ai/threats/technologies/oauthlib): 5 vulnerabilities - [pdm (PyPI)](https://junglewise.ai/threats/technologies/pdm): 5 vulnerabilities - [poetry (PyPI)](https://junglewise.ai/threats/technologies/poetry): 5 vulnerabilities - [pyarrow (PyPI)](https://junglewise.ai/threats/technologies/pyarrow): 5 vulnerabilities - [pygments (PyPI)](https://junglewise.ai/threats/technologies/pygments): 5 vulnerabilities - [pymdown-extensions (PyPI)](https://junglewise.ai/threats/technologies/pymdown-extensions): 5 vulnerabilities - [eml-parser (PyPI)](https://junglewise.ai/threats/technologies/pypi-eml-parser): 5 vulnerabilities - [invokeai (PyPI)](https://junglewise.ai/threats/technologies/pypi-invokeai): 5 vulnerabilities - [protobuf (PyPI)](https://junglewise.ai/threats/technologies/pypi-protobuf): 5 vulnerabilities - [pyopenssl (PyPI)](https://junglewise.ai/threats/technologies/pypi-pyopenssl): 5 vulnerabilities - [python-jose (PyPI)](https://junglewise.ai/threats/technologies/pypi-python-jose): 5 vulnerabilities - [redis (PyPI)](https://junglewise.ai/threats/technologies/pypi-redis): 5 vulnerabilities - [streamlit (PyPI)](https://junglewise.ai/threats/technologies/pypi-streamlit): 5 vulnerabilities - [wasmtime (PyPI)](https://junglewise.ai/threats/technologies/pypi-wasmtime): 5 vulnerabilities - [weasyprint (PyPI)](https://junglewise.ai/threats/technologies/pypi-weasyprint): 5 vulnerabilities - [PyYAML (PyPI)](https://junglewise.ai/threats/technologies/pyyaml): 5 vulnerabilities - [red-discordbot (PyPI)](https://junglewise.ai/threats/technologies/red-discordbot): 5 vulnerabilities - [reportlab (PyPI)](https://junglewise.ai/threats/technologies/reportlab): 5 vulnerabilities - [repox (PyPI)](https://junglewise.ai/threats/technologies/repox): 5 vulnerabilities - [sanic (PyPI)](https://junglewise.ai/threats/technologies/sanic): 5 vulnerabilities - [smolagents (PyPI)](https://junglewise.ai/threats/technologies/smolagents): 5 vulnerabilities - [SQLAlchemy (PyPI)](https://junglewise.ai/threats/technologies/sqlalchemy): 5 vulnerabilities - [tendenci (PyPI)](https://junglewise.ai/threats/technologies/tendenci): 5 vulnerabilities - [tripleo-heat-templates (PyPI)](https://junglewise.ai/threats/technologies/tripleo-heat-templates): 5 vulnerabilities - [vantage6-server (PyPI)](https://junglewise.ai/threats/technologies/vantage6-server): 5 vulnerabilities - [wlc (PyPI)](https://junglewise.ai/threats/technologies/wlc): 5 vulnerabilities - [zeroconf (PyPI)](https://junglewise.ai/threats/technologies/zeroconf): 5 vulnerabilities - [apache-airflow-providers-amazon (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow-providers-amazon): 4 vulnerabilities - [apache-dolphinscheduler (PyPI)](https://junglewise.ai/threats/technologies/apache-dolphinscheduler): 4 vulnerabilities - [apache-submarine (PyPI)](https://junglewise.ai/threats/technologies/apache-submarine): 4 vulnerabilities - [asteval (PyPI)](https://junglewise.ai/threats/technologies/asteval): 4 vulnerabilities - [autobahn (PyPI)](https://junglewise.ai/threats/technologies/autobahn): 4 vulnerabilities - [awsiotsdk (PyPI)](https://junglewise.ai/threats/technologies/awsiotsdk): 4 vulnerabilities - [barbican (PyPI)](https://junglewise.ai/threats/technologies/barbican): 4 vulnerabilities - [bottle (PyPI)](https://junglewise.ai/threats/technologies/bottle): 4 vulnerabilities - [CairoSVG (PyPI)](https://junglewise.ai/threats/technologies/cairosvg): 4 vulnerabilities - [cbor2 (PyPI)](https://junglewise.ai/threats/technologies/cbor2): 4 vulnerabilities - [chromadb (PyPI)](https://junglewise.ai/threats/technologies/chromadb): 4 vulnerabilities - [ciguard (PyPI)](https://junglewise.ai/threats/technologies/ciguard): 4 vulnerabilities - [datasette (PyPI)](https://junglewise.ai/threats/technologies/datasette): 4 vulnerabilities - [dbt-mcp (PyPI)](https://junglewise.ai/threats/technologies/dbt-mcp): 4 vulnerabilities - [democritus-urls (PyPI)](https://junglewise.ai/threats/technologies/democritus-urls): 4 vulnerabilities - [django-helpdesk (PyPI)](https://junglewise.ai/threats/technologies/django-helpdesk): 4 vulnerabilities - [django-unicorn (PyPI)](https://junglewise.ai/threats/technologies/django-unicorn): 4 vulnerabilities - [edumfa (PyPI)](https://junglewise.ai/threats/technologies/edumfa): 4 vulnerabilities - [freetakserver-ui (PyPI)](https://junglewise.ai/threats/technologies/freetakserver-ui): 4 vulnerabilities - [ha-mcp (PyPI)](https://junglewise.ai/threats/technologies/ha-mcp): 4 vulnerabilities - [indy-node (PyPI)](https://junglewise.ai/threats/technologies/indy-node): 4 vulnerabilities - [jupyterlite-core (PyPI)](https://junglewise.ai/threats/technologies/jupyterlite-core): 4 vulnerabilities - [langgraph (PyPI)](https://junglewise.ai/threats/technologies/langgraph): 4 vulnerabilities - [lin-cms (PyPI)](https://junglewise.ai/threats/technologies/lin-cms): 4 vulnerabilities - [lxml_html_clean (PyPI)](https://junglewise.ai/threats/technologies/lxml-html-clean): 4 vulnerabilities - [markdown2 (PyPI)](https://junglewise.ai/threats/technologies/markdown2): 4 vulnerabilities - [MaterialX (PyPI)](https://junglewise.ai/threats/technologies/materialx): 4 vulnerabilities - [mcp-server-git (PyPI)](https://junglewise.ai/threats/technologies/mcp-server-git): 4 vulnerabilities - [micropython-copy (PyPI)](https://junglewise.ai/threats/technologies/micropython-copy): 4 vulnerabilities - [micropython-io (PyPI)](https://junglewise.ai/threats/technologies/micropython-io): 4 vulnerabilities - [omnigent (PyPI)](https://junglewise.ai/threats/technologies/omnigent): 4 vulnerabilities - [pandasai (PyPI)](https://junglewise.ai/threats/technologies/pandasai): 4 vulnerabilities - [pipecat-ai (PyPI)](https://junglewise.ai/threats/technologies/pipecat-ai): 4 vulnerabilities - [plone.app.dexterity (PyPI)](https://junglewise.ai/threats/technologies/plone-app-dexterity): 4 vulnerabilities - [plone.app.event (PyPI)](https://junglewise.ai/threats/technologies/plone-app-event): 4 vulnerabilities - [pretalx (PyPI)](https://junglewise.ai/threats/technologies/pretalx): 4 vulnerabilities - [psd-tools (PyPI)](https://junglewise.ai/threats/technologies/psd-tools): 4 vulnerabilities - [py7zr (PyPI)](https://junglewise.ai/threats/technologies/py7zr): 4 vulnerabilities - [pyinstaller (PyPI)](https://junglewise.ai/threats/technologies/pyinstaller): 4 vulnerabilities - [pypdf2 (PyPI)](https://junglewise.ai/threats/technologies/pypdf2): 4 vulnerabilities - [banks (PyPI)](https://junglewise.ai/threats/technologies/pypi-banks): 4 vulnerabilities - [black (PyPI)](https://junglewise.ai/threats/technologies/pypi-black): 4 vulnerabilities - [clearml (PyPI)](https://junglewise.ai/threats/technologies/pypi-clearml): 4 vulnerabilities - [dbt-core (PyPI)](https://junglewise.ai/threats/technologies/pypi-dbt-core): 4 vulnerabilities - [feast (PyPI)](https://junglewise.ai/threats/technologies/pypi-feast): 4 vulnerabilities - [frappe (PyPI)](https://junglewise.ai/threats/technologies/pypi-frappe): 4 vulnerabilities - [gerapy (PyPI)](https://junglewise.ai/threats/technologies/pypi-gerapy): 4 vulnerabilities - [guardrails-ai (PyPI)](https://junglewise.ai/threats/technologies/pypi-guardrails-ai): 4 vulnerabilities - [httplib2 (PyPI)](https://junglewise.ai/threats/technologies/pypi-httplib2): 4 vulnerabilities - [khoj (PyPI)](https://junglewise.ai/threats/technologies/pypi-khoj): 4 vulnerabilities - [koji (PyPI)](https://junglewise.ai/threats/technologies/pypi-koji): 4 vulnerabilities - [langsmith (PyPI)](https://junglewise.ai/threats/technologies/pypi-langsmith): 4 vulnerabilities - [llamafactory (PyPI)](https://junglewise.ai/threats/technologies/pypi-llamafactory): 4 vulnerabilities - [mcp-memory-service (PyPI)](https://junglewise.ai/threats/technologies/pypi-mcp-memory-service): 4 vulnerabilities - [mpxj (PyPI)](https://junglewise.ai/threats/technologies/pypi-mpxj): 4 vulnerabilities - [pycrypto (PyPI)](https://junglewise.ai/threats/technologies/pypi-pycrypto): 4 vulnerabilities - [rembg (PyPI)](https://junglewise.ai/threats/technologies/pypi-rembg): 4 vulnerabilities - [rucio (PyPI)](https://junglewise.ai/threats/technologies/pypi-rucio): 4 vulnerabilities - [slixmpp (PyPI)](https://junglewise.ai/threats/technologies/pypi-slixmpp): 4 vulnerabilities - [vanna (PyPI)](https://junglewise.ai/threats/technologies/pypi-vanna): 4 vulnerabilities - [qutebrowser (PyPI)](https://junglewise.ai/threats/technologies/qutebrowser): 4 vulnerabilities - [radicale (PyPI)](https://junglewise.ai/threats/technologies/radicale): 4 vulnerabilities - [skops (PyPI)](https://junglewise.ai/threats/technologies/skops): 4 vulnerabilities - [streampipes (PyPI)](https://junglewise.ai/threats/technologies/streampipes): 4 vulnerabilities - [typed-ast (PyPI)](https://junglewise.ai/threats/technologies/typed-ast): 4 vulnerabilities - [unstructured (PyPI)](https://junglewise.ai/threats/technologies/unstructured): 4 vulnerabilities - [vtk (PyPI)](https://junglewise.ai/threats/technologies/vtk): 4 vulnerabilities - [xgrammar (PyPI)](https://junglewise.ai/threats/technologies/xgrammar): 4 vulnerabilities - [xml2rfc (PyPI)](https://junglewise.ai/threats/technologies/xml2rfc): 4 vulnerabilities - [zodb3 (PyPI)](https://junglewise.ai/threats/technologies/zodb3): 4 vulnerabilities - [admesh (PyPI)](https://junglewise.ai/threats/technologies/admesh): 3 vulnerabilities - [aiosmtplib (PyPI)](https://junglewise.ai/threats/technologies/aiosmtplib): 3 vulnerabilities - [aioxmpp (PyPI)](https://junglewise.ai/threats/technologies/aioxmpp): 3 vulnerabilities - [ansible-runner (PyPI)](https://junglewise.ai/threats/technologies/ansible-runner): 3 vulnerabilities - [anyio (PyPI)](https://junglewise.ai/threats/technologies/anyio): 3 vulnerabilities - [apache-airflow-providers-apache-spark (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow-providers-apache-spark): 3 vulnerabilities - [apache-airflow-providers-cncf-kubernetes (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow-providers-cncf-kubernetes): 3 vulnerabilities - [apache-libcloud (PyPI)](https://junglewise.ai/threats/technologies/apache-libcloud): 3 vulnerabilities - [asyncua (PyPI)](https://junglewise.ai/threats/technologies/asyncua): 3 vulnerabilities - [atomic-agents-stack (PyPI)](https://junglewise.ai/threats/technologies/atomic-agents-stack): 3 vulnerabilities - [aws-encryption-sdk (PyPI)](https://junglewise.ai/threats/technologies/aws-encryption-sdk): 3 vulnerabilities - [aws-sam-cli (PyPI)](https://junglewise.ai/threats/technologies/aws-sam-cli): 3 vulnerabilities - [awscli (PyPI)](https://junglewise.ai/threats/technologies/awscli): 3 vulnerabilities - [backend-ai (PyPI)](https://junglewise.ai/threats/technologies/backend-ai): 3 vulnerabilities - [bitlyshortener (PyPI)](https://junglewise.ai/threats/technologies/bitlyshortener): 3 vulnerabilities - [borgbackup (PyPI)](https://junglewise.ai/threats/technologies/borgbackup): 3 vulnerabilities - [boxlite (PyPI)](https://junglewise.ai/threats/technologies/boxlite): 3 vulnerabilities - [couchbase (PyPI)](https://junglewise.ai/threats/technologies/couchbase): 3 vulnerabilities - [crewai-tools (PyPI)](https://junglewise.ai/threats/technologies/crewai-tools): 3 vulnerabilities - [ctx (PyPI)](https://junglewise.ai/threats/technologies/ctx): 3 vulnerabilities - [d8s-networking (PyPI)](https://junglewise.ai/threats/technologies/d8s-networking): 3 vulnerabilities - [d8s-python (PyPI)](https://junglewise.ai/threats/technologies/d8s-python): 3 vulnerabilities - [d8s-xml (PyPI)](https://junglewise.ai/threats/technologies/d8s-xml): 3 vulnerabilities - [dagster (PyPI)](https://junglewise.ai/threats/technologies/dagster): 3 vulnerabilities - [ddtrace (PyPI)](https://junglewise.ai/threats/technologies/ddtrace): 3 vulnerabilities - [deluge (PyPI)](https://junglewise.ai/threats/technologies/deluge): 3 vulnerabilities - [democritus-csv (PyPI)](https://junglewise.ai/threats/technologies/democritus-csv): 3 vulnerabilities - [dfir-unfurl (PyPI)](https://junglewise.ai/threats/technologies/dfir-unfurl): 3 vulnerabilities - [django-allauth (PyPI)](https://junglewise.ai/threats/technologies/django-allauth): 3 vulnerabilities - [django-tinymce (PyPI)](https://junglewise.ai/threats/technologies/django-tinymce): 3 vulnerabilities - [djblets (PyPI)](https://junglewise.ai/threats/technologies/djblets): 3 vulnerabilities - [docassemble-webapp (PyPI)](https://junglewise.ai/threats/technologies/docassemble-webapp): 3 vulnerabilities - [docling-core (PyPI)](https://junglewise.ai/threats/technologies/docling-core): 3 vulnerabilities - [doris-mcp-server (PyPI)](https://junglewise.ai/threats/technologies/doris-mcp-server): 3 vulnerabilities - [eventlet (PyPI)](https://junglewise.ai/threats/technologies/eventlet): 3 vulnerabilities - [exotel (PyPI)](https://junglewise.ai/threats/technologies/exotel): 3 vulnerabilities - [fastapi-guard (PyPI)](https://junglewise.ai/threats/technologies/fastapi-guard): 3 vulnerabilities - [fava (PyPI)](https://junglewise.ai/threats/technologies/fava): 3 vulnerabilities - [flaskbb (PyPI)](https://junglewise.ai/threats/technologies/flaskbb): 3 vulnerabilities - [graphql-core (PyPI)](https://junglewise.ai/threats/technologies/graphql-core): 3 vulnerabilities - [gstreamer-plugins (PyPI)](https://junglewise.ai/threats/technologies/gstreamer-plugins): 3 vulnerabilities - [gunicorn (PyPI)](https://junglewise.ai/threats/technologies/gunicorn): 3 vulnerabilities - [invenio-communities (PyPI)](https://junglewise.ai/threats/technologies/invenio-communities): 3 vulnerabilities - [ipsilon (PyPI)](https://junglewise.ai/threats/technologies/ipsilon): 3 vulnerabilities - [jupyter_enterprise_gateway (PyPI)](https://junglewise.ai/threats/technologies/jupyter-enterprise-gateway): 3 vulnerabilities - [jupyter-server-proxy (PyPI)](https://junglewise.ai/threats/technologies/jupyter-server-proxy): 3 vulnerabilities - [jupyterlab-git (PyPI)](https://junglewise.ai/threats/technologies/jupyterlab-git): 3 vulnerabilities - [kas (PyPI)](https://junglewise.ai/threats/technologies/kas): 3 vulnerabilities - [keyring (PyPI)](https://junglewise.ai/threats/technologies/keyring): 3 vulnerabilities - [langgraph-api (PyPI)](https://junglewise.ai/threats/technologies/langgraph-api): 3 vulnerabilities - [local-deep-research (PyPI)](https://junglewise.ai/threats/technologies/local-deep-research): 3 vulnerabilities - [localstack (PyPI)](https://junglewise.ai/threats/technologies/localstack): 3 vulnerabilities - [loguru (PyPI)](https://junglewise.ai/threats/technologies/loguru): 3 vulnerabilities - [Markdown (PyPI)](https://junglewise.ai/threats/technologies/markdown): 3 vulnerabilities - [meta-ads-mcp (PyPI)](https://junglewise.ai/threats/technologies/meta-ads-mcp): 3 vulnerabilities - [ml-logger (PyPI)](https://junglewise.ai/threats/technologies/ml-logger): 3 vulnerabilities - [mysql-connector-python (PyPI)](https://junglewise.ai/threats/technologies/mysql-connector-python): 3 vulnerabilities - [nono-py (PyPI)](https://junglewise.ai/threats/technologies/nono-py): 3 vulnerabilities - [openapi-python-client (PyPI)](https://junglewise.ai/threats/technologies/openapi-python-client): 3 vulnerabilities - [openslides (PyPI)](https://junglewise.ai/threats/technologies/openslides): 3 vulnerabilities - [openstack-heat (PyPI)](https://junglewise.ai/threats/technologies/openstack-heat): 3 vulnerabilities - [openvpn-monitor (PyPI)](https://junglewise.ai/threats/technologies/openvpn-monitor): 3 vulnerabilities - [pdfminer-six (PyPI)](https://junglewise.ai/threats/technologies/pdfminer-six): 3 vulnerabilities - [plone-app-theming (PyPI)](https://junglewise.ai/threats/technologies/plone-app-theming): 3 vulnerabilities - [plone-supermodel (PyPI)](https://junglewise.ai/threats/technologies/plone-supermodel): 3 vulnerabilities - [postquantum-feldman-vss (PyPI)](https://junglewise.ai/threats/technologies/postquantum-feldman-vss): 3 vulnerabilities - [pptagent (PyPI)](https://junglewise.ai/threats/technologies/pptagent): 3 vulnerabilities - [products-pluggableauthservice (PyPI)](https://junglewise.ai/threats/technologies/products-pluggableauthservice): 3 vulnerabilities - [proot-distro (PyPI)](https://junglewise.ai/threats/technologies/proot-distro): 3 vulnerabilities - [pyd3tn (PyPI)](https://junglewise.ai/threats/technologies/pyd3tn): 3 vulnerabilities - [agno (PyPI)](https://junglewise.ai/threats/technologies/pypi-agno): 3 vulnerabilities - [ajenti (PyPI)](https://junglewise.ai/threats/technologies/pypi-ajenti): 3 vulnerabilities - [anki (PyPI)](https://junglewise.ai/threats/technologies/pypi-anki): 3 vulnerabilities - [apache-airflow-providers-fab (PyPI)](https://junglewise.ai/threats/technologies/pypi-apache-airflow-providers-fab): 3 vulnerabilities - [avro (PyPI)](https://junglewise.ai/threats/technologies/pypi-avro): 3 vulnerabilities - [brotli (PyPI)](https://junglewise.ai/threats/technologies/pypi-brotli): 3 vulnerabilities - [capstone (PyPI)](https://junglewise.ai/threats/technologies/pypi-capstone): 3 vulnerabilities - [diffusers (PyPI)](https://junglewise.ai/threats/technologies/pypi-diffusers): 3 vulnerabilities - [duckdb (PyPI)](https://junglewise.ai/threats/technologies/pypi-duckdb): 3 vulnerabilities - [fastapi-code-generator (PyPI)](https://junglewise.ai/threats/technologies/pypi-fastapi-code-generator): 3 vulnerabilities - [fprime (PyPI)](https://junglewise.ai/threats/technologies/pypi-fprime): 3 vulnerabilities - [gpustack (PyPI)](https://junglewise.ai/threats/technologies/pypi-gpustack): 3 vulnerabilities - [horovod (PyPI)](https://junglewise.ai/threats/technologies/pypi-horovod): 3 vulnerabilities - [keystonemiddleware (PyPI)](https://junglewise.ai/threats/technologies/pypi-keystonemiddleware): 3 vulnerabilities - [langgraph-checkpoint (PyPI)](https://junglewise.ai/threats/technologies/pypi-langgraph-checkpoint): 3 vulnerabilities - [langgraph-sdk (PyPI)](https://junglewise.ai/threats/technologies/pypi-langgraph-sdk): 3 vulnerabilities - [lmcache (PyPI)](https://junglewise.ai/threats/technologies/pypi-lmcache): 3 vulnerabilities - [marimo (PyPI)](https://junglewise.ai/threats/technologies/pypi-marimo): 3 vulnerabilities - [mercury (PyPI)](https://junglewise.ai/threats/technologies/pypi-mercury): 3 vulnerabilities - [mistral (PyPI)](https://junglewise.ai/threats/technologies/pypi-mistral): 3 vulnerabilities - [netron (PyPI)](https://junglewise.ai/threats/technologies/pypi-netron): 3 vulnerabilities - [octavia (PyPI)](https://junglewise.ai/threats/technologies/pypi-octavia): 3 vulnerabilities - [rsa (PyPI)](https://junglewise.ai/threats/technologies/pypi-rsa): 3 vulnerabilities - [snorkel (PyPI)](https://junglewise.ai/threats/technologies/pypi-snorkel): 3 vulnerabilities - [taipy (PyPI)](https://junglewise.ai/threats/technologies/pypi-taipy): 3 vulnerabilities - [thrift (PyPI)](https://junglewise.ai/threats/technologies/pypi-thrift): 3 vulnerabilities - [pyspector (PyPI)](https://junglewise.ai/threats/technologies/pyspector): 3 vulnerabilities - [python-engineio (PyPI)](https://junglewise.ai/threats/technologies/python-engineio): 3 vulnerabilities - [python-ldap (PyPI)](https://junglewise.ai/threats/technologies/python-ldap): 3 vulnerabilities - [qiskit (PyPI)](https://junglewise.ai/threats/technologies/qiskit): 3 vulnerabilities - [quokka (PyPI)](https://junglewise.ai/threats/technologies/quokka): 3 vulnerabilities - [redshift-connector (PyPI)](https://junglewise.ai/threats/technologies/redshift-connector): 3 vulnerabilities - [rpyc (PyPI)](https://junglewise.ai/threats/technologies/rpyc): 3 vulnerabilities - [safeurl-python (PyPI)](https://junglewise.ai/threats/technologies/safeurl-python): 3 vulnerabilities - [scapy (PyPI)](https://junglewise.ai/threats/technologies/scapy): 3 vulnerabilities - [scikit-learn (PyPI)](https://junglewise.ai/threats/technologies/scikit-learn): 3 vulnerabilities - [scipy (PyPI)](https://junglewise.ai/threats/technologies/scipy): 3 vulnerabilities - [scitokens (PyPI)](https://junglewise.ai/threats/technologies/scitokens): 3 vulnerabilities - [selenium (PyPI)](https://junglewise.ai/threats/technologies/selenium): 3 vulnerabilities - [sickrage (PyPI)](https://junglewise.ai/threats/technologies/sickrage): 3 vulnerabilities - [sosreport (PyPI)](https://junglewise.ai/threats/technologies/sosreport): 3 vulnerabilities - [spotipy (PyPI)](https://junglewise.ai/threats/technologies/spotipy): 3 vulnerabilities - [sqlfluff (PyPI)](https://junglewise.ai/threats/technologies/sqlfluff): 3 vulnerabilities - [starlite (PyPI)](https://junglewise.ai/threats/technologies/starlite): 3 vulnerabilities - [stata-mcp (PyPI)](https://junglewise.ai/threats/technologies/stata-mcp): 3 vulnerabilities - [strands-agents (PyPI)](https://junglewise.ai/threats/technologies/strands-agents): 3 vulnerabilities - [supervisor (PyPI)](https://junglewise.ai/threats/technologies/supervisor): 3 vulnerabilities - [taguette (PyPI)](https://junglewise.ai/threats/technologies/taguette): 3 vulnerabilities - [upsonic (PyPI)](https://junglewise.ai/threats/technologies/upsonic): 3 vulnerabilities - [vantage6-node (PyPI)](https://junglewise.ai/threats/technologies/vantage6-node): 3 vulnerabilities - [vibe-trading-ai (PyPI)](https://junglewise.ai/threats/technologies/vibe-trading-ai): 3 vulnerabilities - [wabt-bin (PyPI)](https://junglewise.ai/threats/technologies/wabt-bin): 3 vulnerabilities - [wagtail-2fa (PyPI)](https://junglewise.ai/threats/technologies/wagtail-2fa): 3 vulnerabilities - [webargs (PyPI)](https://junglewise.ai/threats/technologies/webargs): 3 vulnerabilities - [webob (PyPI)](https://junglewise.ai/threats/technologies/webob): 3 vulnerabilities - [wsgidav (PyPI)](https://junglewise.ai/threats/technologies/wsgidav): 3 vulnerabilities - [xinference (PyPI)](https://junglewise.ai/threats/technologies/xinference): 3 vulnerabilities - [ydata-profiling (PyPI)](https://junglewise.ai/threats/technologies/ydata-profiling): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "PyPI package vulnerabilities", https://junglewise.ai/threats/vendors/pypi, 13 November 2026.