무엇이 뚫려 있나
OSV.dev(Apache-2.0)에서 수집합니다. 우리가 추적 중인 패키지에 해당하는 것만 담습니다.
CRITICAL57건
HIGH250건
MODERATE285건
LOW56건
등급 미표기511건발행처가 등급을 안 줌
이 페이지는 보안 자문이 아닙니다. 등급은 발행처(GitHub Advisory 등)가 붙인 값을 그대로 옮긴 것이고, CVSS 점수는 우리가 계산하지 않습니다 — OSV 가 주는 것은 숫자가 아니라 벡터 문자열이며, 출처가 발표하지 않은 숫자를 보안 화면에 올리지 않는다는 것이 이 사이트의 원칙입니다. 실제 영향은 사용 방식에 따라 다르므로 각 항목의 원문을 확인하세요.
취약점이 많은 패키지
- 1djangopypi321
- 2apache-airflowpypi285
- 3pillowpypi153
- 4nextnpm66
- 5transformerspypi54
- 6axiosnpm44
- 7torchpypi43
- 8pysparkpypi23
누적 건수입니다. 오래된 것과 최신 것이 함께 세어집니다.
분포
생태계별
- 1pypi957
- 2npm188
- 3crates14
등급별
- 1미표기511
- 2MODERATE285
- 3HIGH250
- 4CRITICAL57
- 5LOW56
등급 미표기가 많은 것은 발행처가 등급을 붙이지 않은 경우입니다 — 위험이 없다는 뜻이 아닙니다.
최근 공개
공개일 순입니다.
| ID | 패키지 | 생태계 | 등급 | 영향 범위 | 수정 버전 | 공개일 |
|---|---|---|---|---|---|---|
| PYSEC-2026-3929 | transformers | pypi | — | >= 0 < 5.10.0 | 5.10.0 | 2026-09-10 |
| PYSEC-2026-3806 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-09-10 |
| GHSA-p293-qw3h-jr36 | next | npm | CRITICAL | >= 13.4.0 < 15.5.24 | 15.5.24 | 2026-09-08 |
| GHSA-2xp9-vwfh-vxw4 | next | npm | CRITICAL | >= 10.0.0 < 15.5.24 | 15.5.24 | 2026-09-08 |
| PYSEC-2026-3966 | pyspark | pypi | — | >= 3.0.0 < 3.5.8 | 3.5.8 | 2026-09-02 |
| PYSEC-2026-3712 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3711 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3710 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3709 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3708 | apache-airflow | pypi | — | >= 3.3.0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3707 | apache-airflow | pypi | — | >= 3.3.0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3706 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3705 | apache-airflow | pypi | — | >= 0 < 3.3.1 | 3.3.1 | 2026-08-12 |
| PYSEC-2026-3717 | django | pypi | — | >= 0 < 5.2.17 | 5.2.17 | 2026-08-04 |
| GHSA-xrqw-3rrv-vx5w | transformers | pypi | HIGH | >= 0 < 5.10.0 | 5.10.0 | 2026-08-02 |
| PYSEC-2026-3496 | pillow | pypi | — | >= 8.2.0 < 12.3.0 | 12.3.0 | 2026-07-23 |
| PYSEC-2026-3495 | pillow | pypi | — | >= 5.1.0 < 12.3.0 | 12.3.0 | 2026-07-23 |
| PYSEC-2026-3494 | pillow | pypi | — | >= 5.2.0 < 12.3.0 | 12.3.0 | 2026-07-23 |
| PYSEC-2026-3493 | pillow | pypi | — | >= 0 < 12.3.0 | 12.3.0 | 2026-07-23 |
| GHSA-q8wf-6r8g-63ch | next | npm | MODERATE | >= 15.5.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-p9j2-gv94-2wf4 | next | npm | HIGH | >= 12.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-m99w-x7hq-7vfj | next | npm | HIGH | >= 13.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-955p-x3mx-jcvp | next | npm | MODERATE | >= 13.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-89xv-2m56-2m9x | next | npm | HIGH | >= 14.1.1 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-6gpp-xcg3-4w24 | next | npm | HIGH | >= 16.0.0 < 16.2.11 | 16.2.11 | 2026-07-22 |
| GHSA-68g3-v927-f742 | next | npm | MODERATE | >= 13.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-4c39-4ccg-62r3 | next | npm | MODERATE | >= 13.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-4633-3j49-mh5q | next | npm | MODERATE | >= 13.0.0 < 15.5.21 | 15.5.21 | 2026-07-22 |
| GHSA-xj96-63gp-2gmr | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-xj6q-8x83-jv6g | axios | npm | MODERATE | >= 1.15.2 < 1.18.0 | 1.18.0 | 2026-07-20 |
| GHSA-vjc4-5qp5-m44j | pillow | pypi | HIGH | >= 8.2.0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-pmv8-rq9r-6j72 | axios | npm | MODERATE | >= 0.28.0 < 0.33.0 | 0.33.0 | 2026-07-20 |
| GHSA-phj9-mv4w-65pm | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-pg7v-jwj7-p798 | pillow | pypi | MODERATE | >= 12.0.0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-mwf2-3pr3-8698 | axios | npm | MODERATE | >= 1.13.0 < 1.18.0 | 1.18.0 | 2026-07-20 |
| GHSA-mmx7-hfxf-jppx | axios | npm | MODERATE | >= 1.0.0 < 1.18.0 | 1.18.0 | 2026-07-20 |
| GHSA-jqh4-m9w3-8hp9 | axios | npm | MODERATE | >= 1.7.0 < 1.18.0 | 1.18.0 | 2026-07-20 |
| GHSA-jjj6-mw9f-p565 | pillow | pypi | HIGH | >= 5.1.0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-hcpx-6fm6-wx23 | axios | npm | MODERATE | >= 0.31.1 < 0.33.0 | 0.33.0 | 2026-07-20 |
| GHSA-gcfj-64vw-6mp9 | axios | npm | HIGH | >= 0.31.1 < 0.33.0 | 0.33.0 | 2026-07-20 |
| GHSA-fj7v-r99m-22gq | pillow | pypi | MODERATE | >= 5.2.0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-f4gw-2p7v-4548 | axios | npm | MODERATE | >= 1.15.0 < 1.18.0 | 1.18.0 | 2026-07-20 |
| GHSA-9hw9-ch79-4vh6 | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-8v84-f9pq-wr9x | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-7q8q-rj6j-mhjq | axios | npm | MODERATE | >= 0.8.0 < 0.33.0 | 0.33.0 | 2026-07-20 |
| GHSA-6r8x-57c9-28j4 | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-62p4-gmf7-7g93 | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-5x94-69rx-g8h2 | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-4x4j-2g7c-83w6 | pillow | pypi | MODERATE | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-45hq-cxwh-f6vc | pillow | pypi | HIGH | >= 0 < 12.3.0 | 12.3.0 | 2026-07-20 |
| GHSA-42h9-826w-cgv3 | axios | npm | MODERATE | >= 0.28.0 < 0.33.0 | 0.33.0 | 2026-07-20 |
| PYSEC-2026-3454 | pillow | pypi | — | >= 0 < 12.3.0 | 12.3.0 | 2026-07-14 |
| PYSEC-2026-3453 | pillow | pypi | — | >= 0 < 12.3.0 | 12.3.0 | 2026-07-14 |
| PYSEC-2026-3452 | pillow | pypi | — | >= 12.0.0 < 12.3.0 | 12.3.0 | 2026-07-14 |
| PYSEC-2026-3451 | pillow | pypi | — | >= 0 < 12.3.0 | 12.3.0 | 2026-07-14 |
| PYSEC-2026-2874 | pillow | pypi | — | >= 4.2.0 < 12.2.0 | 12.2.0 | 2026-07-13 |
| PYSEC-2026-2449 | django | pypi | — | >= 4.2 < 4.2.29 | 4.2.29 | 2026-07-13 |
| PYSEC-2026-2448 | django | pypi | — | >= 4.2 < 4.2.29 | 4.2.29 | 2026-07-13 |
| PYSEC-2026-2357 | apache-airflow | pypi | — | >= 1.10.0 < 1.12.0 | 1.12.0 | 2026-07-13 |
| PYSEC-2026-2356 | apache-airflow | pypi | — | >= 0 < 3.2.1rc1 | 3.2.1rc1 | 2026-07-13 |
| PYSEC-2026-2355 | apache-airflow | pypi | — | >= 0 < 2.11.1 | 2.11.1 | 2026-07-13 |
| PYSEC-2026-2354 | apache-airflow | pypi | — | >= 0 < 3.2.2 | 3.2.2 | 2026-07-13 |
| PYSEC-2026-2353 | apache-airflow | pypi | — | >= 0 < 3.2.0 | 3.2.0 | 2026-07-13 |
| PYSEC-2026-2352 | apache-airflow | pypi | — | >= 3.0.0 < 3.2.0 | 3.2.0 | 2026-07-13 |
| PYSEC-2026-2351 | apache-airflow | pypi | — | >= 0 < 3.2.1rc1 | 3.2.1rc1 | 2026-07-13 |
| PYSEC-2026-2350 | apache-airflow | pypi | — | >= 2.3.0 < 2.6.1 | 2.6.1 | 2026-07-13 |
| PYSEC-2026-2349 | apache-airflow | pypi | — | >= 3.0.0 < 3.2.2 | 3.2.2 | 2026-07-13 |
| PYSEC-2026-2348 | apache-airflow | pypi | — | >= 0 < 2.11.1 | 2.11.1 | 2026-07-13 |
| PYSEC-2026-2347 | apache-airflow | pypi | — | >= 0 < 2.11.1 | 2.11.1 | 2026-07-13 |
| PYSEC-2026-2346 | apache-airflow | pypi | — | >= 2.0.0 < 3.2.2 | 3.2.2 | 2026-07-13 |
| PYSEC-2026-2345 | apache-airflow | pypi | — | >= 0 < 3.2.2 | 3.2.2 | 2026-07-13 |
| PYSEC-2026-2344 | apache-airflow | pypi | — | >= 0 < 3.1.8 | 3.1.8 | 2026-07-13 |
| PYSEC-2026-2343 | apache-airflow | pypi | — | >= 0 < 3.2.2 | 3.2.2 | 2026-07-13 |
| PYSEC-2026-770 | apache-airflow | pypi | — | >= 0 < 2.3.0 | 2.3.0 | 2026-07-07 |
| PYSEC-2026-2092 | django | pypi | — | >= 5.2 < 5.2.16 | 5.2.16 | 2026-07-07 |
| PYSEC-2026-2091 | django | pypi | — | >= 5.2 < 5.2.16 | 5.2.16 | 2026-07-07 |
| PYSEC-2026-2090 | django | pypi | — | >= 5.2 < 5.2.16 | 5.2.16 | 2026-07-07 |
| PYSEC-2026-2088 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| PYSEC-2026-2087 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| PYSEC-2026-2086 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| PYSEC-2026-2083 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| PYSEC-2026-2082 | apache-airflow | pypi | — | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| PYSEC-2026-1988 | transformers | pypi | — | >= 0 < 4.53.0 | 4.53.0 | 2026-07-07 |
| PYSEC-2026-1987 | transformers | pypi | — | >= 0 < 4.51.0 | 4.51.0 | 2026-07-07 |
| PYSEC-2026-1986 | transformers | pypi | — | >= 0 < 4.52.1 | 4.52.1 | 2026-07-07 |
| PYSEC-2026-1985 | transformers | pypi | — | >= 0 < 4.51.0 | 4.51.0 | 2026-07-07 |
| PYSEC-2026-1984 | transformers | pypi | — | >= 0 < 4.50.0 | 4.50.0 | 2026-07-07 |
| PYSEC-2026-1983 | transformers | pypi | — | >= 0 < 4.53.0 | 4.53.0 | 2026-07-07 |
| PYSEC-2026-1982 | transformers | pypi | — | >= 0 < 4.48.0 | 4.48.0 | 2026-07-07 |
| PYSEC-2026-1981 | transformers | pypi | — | >= 0 < 4.53.0 | 4.53.0 | 2026-07-07 |
| PYSEC-2026-1980 | transformers | pypi | — | >= 0 < 4.53.0 | 4.53.0 | 2026-07-07 |
| PYSEC-2026-1979 | transformers | pypi | — | >= 4.49.0 < 4.51.0 | 4.51.0 | 2026-07-07 |
| PYSEC-2026-1978 | transformers | pypi | — | >= 0 < 4.38.0 | 4.38.0 | 2026-07-07 |
| PYSEC-2026-1977 | transformers | pypi | — | >= 0 < 4.52.1 | 4.52.1 | 2026-07-07 |
| PYSEC-2026-1970 | torch | pypi | — | >= 0 < 2.8.0 | 2.8.0 | 2026-07-07 |
| PYSEC-2026-1873 | requests | pypi | — | >= 0 < 2.32.0 | 2.32.0 | 2026-07-07 |
| PYSEC-2026-1872 | requests | pypi | — | >= 0 < 2.32.4 | 2.32.4 | 2026-07-07 |
| PYSEC-2026-1845 | pytest | pypi | — | >= 0 < 9.0.3 | 9.0.3 | 2026-07-07 |
| PYSEC-2026-1812 | pydantic | pypi | — | >= 0 < 1.10.13 | 1.10.13 | 2026-07-07 |
| PYSEC-2026-1794 | pillow | pypi | — | >= 0 < 10.0.1 | 10.0.1 | 2026-07-07 |
| PYSEC-2026-1793 | pillow | pypi | — | >= 0 < 10.3.0 | 10.3.0 | 2026-07-07 |
| PYSEC-2026-1377 | flask | pypi | — | >= 3.1.0 < 3.1.1 | 3.1.1 | 2026-07-07 |
| PYSEC-2026-1297 | django | pypi | — | >= 0 < 4.2.16 | 4.2.16 | 2026-07-07 |
| PYSEC-2026-1296 | django | pypi | — | >= 4.2 < 4.2.25 | 4.2.25 | 2026-07-07 |
| PYSEC-2026-1135 | apache-airflow | pypi | — | >= 3.0.0 < 3.0.5 | 3.0.5 | 2026-07-07 |
| PYSEC-2026-1134 | apache-airflow | pypi | — | >= 0 < 2.10.3 | 2.10.3 | 2026-07-07 |
| PYSEC-2026-1133 | apache-airflow | pypi | — | >= 3.0.0 < 3.1.1 | 3.1.1 | 2026-07-07 |
| PYSEC-2026-1132 | apache-airflow | pypi | — | >= 2.8.2 < 2.8.4 | 2.8.4 | 2026-07-07 |
| PYSEC-2026-1131 | apache-airflow | pypi | — | >= 1.10.0 < 2.7.0 | 2.7.0 | 2026-07-07 |
| PYSEC-2026-1130 | apache-airflow | pypi | — | >= 0 < 2.7.0 | 2.7.0 | 2026-07-07 |
| PYSEC-2026-1129 | apache-airflow | pypi | — | >= 3.0.0 < 3.1.1 | 3.1.1 | 2026-07-07 |
| PYSEC-2026-1128 | apache-airflow | pypi | — | >= 2.7.0 < 2.9.0 | 2.9.0 | 2026-07-07 |
| GHSA-crhf-3pfg-w68w | django | pypi | MODERATE | >= 0 < 5.2.16 | 5.2.16 | 2026-07-07 |
| GHSA-9933-5rrp-mfwx | apache-airflow | pypi | MODERATE | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| GHSA-8qcx-xf44-272x | django | pypi | MODERATE | >= 0 < 5.2.16 | 5.2.16 | 2026-07-07 |
| GHSA-563f-2439-rmq4 | apache-airflow | pypi | MODERATE | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| GHSA-4fh7-7jx4-8f6c | apache-airflow | pypi | MODERATE | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| GHSA-3h9f-r86x-qvjx | django | pypi | LOW | >= 0 < 5.2.16 | 5.2.16 | 2026-07-07 |
| GHSA-3322-mjxh-9mp5 | apache-airflow | pypi | MODERATE | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |
| GHSA-2943-9672-r45w | apache-airflow | pypi | CRITICAL | >= 0 < 3.3.0 | 3.3.0 | 2026-07-07 |