PyPI packages vulnerabilities and fixes

CVEs that mention PyPI packages, ranked by priority. 1 tracked.

PyPI packages has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-20. Highest priority: CVE-2026-113717 (score 13/100).

• CVE-2026-113717 LOW 2.3 virtualenv is a tool for creating isolated virtual python environments

FAQ

How do I fix PyPI packages vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is PyPI packages being exploited right now?

None of the tracked PyPI packages CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which PyPI packages CVE should I patch first?

CVE-2026-113717 currently ranks highest (13/100): virtualenv is a tool for creating isolated virtual python environments.

← Back to latest CVEs