Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
PyPI
Package ecosystem PyPI. A cumulative reference aggregating every published CVE with an advisory in this registry; not a page of record.
Totals
| CVEs all-time | CVEs YTD | Packages affected |
|---|---|---|
| 76 | 76 | 25 |
Monthly trend
▁▁▃▂▄▅█
2026-04 1 · 2026-05 2 · 2026-06 9 · 2026-07 6 · 2026-08 13 · 2026-09 15 · 2026-10 30
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-5463 | 9.3 | 88.5 | — | pymetasploit3 - Command Injection via Newline Injection in console.run_module_with_outp… |
| CVE-2026-110650 | 9.3 | 87.1 | — | Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths |
| CVE-2026-110636 | 9.3 | 83.4 | — | pypdftk through 0.5 OS Command Injection via PDF and Output Paths |
| CVE-2026-76850 | 9.3 | 69.4 | — | LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated S… |
| CVE-2026-110642 | 8.5 | 66.2 | — | xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name |
| CVE-2026-110233 | 8.4 | 66.2 | — | rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe |
| CVE-2026-15307 | 8.7 | 65.9 | — | Server-side file-write and request forgery via spatial lookups |
| CVE-2026-15830 | 6.9 | 65.4 | — | Potential denial-of-service vulnerability via nested geometry collections |
| CVE-2026-76841 | 8.7 | 63.1 | — | Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Mode… |
| CVE-2026-105314 | 7.5 | 58.9 | — | — |
| CVE-2026-48207 | 9.8 | 56.3 | — | Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement |
| CVE-2026-105105 | 9.8 | 55.2 | — | Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft comma… |
| CVE-2026-72818 | 8.7 | 53.8 | — | NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input |
| CVE-2026-93688 | 8.7 | 53.0 | — | SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room |
| CVE-2026-84202 | 8.7 | 51.5 | — | ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading |
| CVE-2026-93838 | 8.2 | 50.2 | — | SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx |
| CVE-2026-110594 | 6.9 | 49.9 | — | BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex |
| CVE-2026-77776 | 9.3 | 48.3 | — | Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated… |
| CVE-2026-72848 | 7.7 | 47.8 | — | langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Site… |
| CVE-2026-86099 | 8.8 | 47.5 | — | Chainlit through 2.12.0 Path Traversal via socket.io sessionId |
Most-affected packages
| Package | CVEs |
|---|---|
| django | 16 |
| snowflake-connector-python | 3 |
| blackduck-c-cpp | 2 |
| daphne | 2 |
| fickling | 2 |
| headroom-ai | 2 |
| pretix | 2 |
| reachy_mini | 2 |
| aig-skill-scan | 1 |
| ait-core | 1 |
| chainlit | 1 |
| django-allauth | 1 |
| flair | 1 |
| langchain-community | 1 |
| lmcache | 1 |
