CodeScopeEOL · Packages · CVE
마감 임박Kubernetes 1.34D-5·Firefox 158D-5·Amazon Corretto 26D-9·Hashicorp Consul 1.22D-9·Alpine Linux 3.21D-10·전체 캘린더 →
의존성 취약점

무엇이 뚫려 있나

OSV.dev(Apache-2.0)에서 수집합니다. 우리가 추적 중인 패키지에 해당하는 것만 담습니다.

수집 1,240건출처: OSV.dev
CRITICAL62건
HIGH282건
MODERATE317건
LOW59건
등급 미표기520건발행처가 등급을 안 줌
이 페이지는 보안 자문이 아닙니다. 등급은 발행처(GitHub Advisory 등)가 붙인 값을 그대로 옮긴 것이고, CVSS 점수는 우리가 계산하지 않습니다 — OSV 가 주는 것은 숫자가 아니라 벡터 문자열이며, 출처가 발표하지 않은 숫자를 보안 화면에 올리지 않는다는 것이 이 사이트의 원칙입니다. 실제 영향은 사용 방식에 따라 다르므로 각 항목의 원문을 확인하세요.

취약점이 많은 패키지

  1. 1djangopypi324
  2. 2apache-airflowpypi304
  3. 3pillowpypi181
  4. 4nextnpm73
  5. 5axiosnpm56
  6. 6transformerspypi56
  7. 7torchpypi43
  8. 8vitenpm28
누적 건수입니다. 오래된 것과 최신 것이 함께 세어집니다.

분포

생태계별
  1. 1pypi1,010
  2. 2npm216
  3. 3crates14
등급별
  1. 1미표기520
  2. 2MODERATE317
  3. 3HIGH282
  4. 4CRITICAL62
  5. 5LOW59
등급 미표기가 많은 것은 발행처가 등급을 붙이지 않은 경우입니다 — 위험이 없다는 뜻이 아닙니다.

최근 공개

공개일 순입니다.

ID패키지생태계등급영향 범위수정 버전공개일
GHSA-xvh5-g6gv-559vpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-xgh8-jp6q-p5x8pillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-21
GHSA-w889-685w-c8fhpillowpypiCRITICAL>= 2.6.0 < 13.0.013.0.02026-10-21
GHSA-vfpm-58rq-9qcgvitenpmMODERATE>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-rq7h-c2jc-7f22vitenpmMODERATE>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-rfgq-q3w2-pmv2pillowpypiMODERATE>= 9.1.0 < 13.0.013.0.02026-10-21
GHSA-jg86-v3jv-hrpmpillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-j4m9-6w36-pw47pillowpypiHIGH>= 10.0.0 < 13.0.013.0.02026-10-21
GHSA-gg2r-wvfm-q9rxpillowpypiHIGH>= 4.1.0 < 13.0.013.0.02026-10-21
GHSA-fc9g-5qg7-mf45pillowpypiMODERATE>= 9.2.0 < 13.0.013.0.02026-10-21
GHSA-f2ph-cmg5-wxc8storybooknpmCRITICAL>= 8.0.0 < 8.6.198.6.192026-10-21
GHSA-f2g6-542v-9j58pillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-cp9v-662q-vvx9pillowpypiHIGH>= 12.0.0 < 13.0.013.0.02026-10-21
GHSA-9jrq-w75r-8gcwvitenpmLOW>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-7mwm-ghpf-9vrmpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-74r2-7ff9-mjj2pillowpypiMODERATE>= 5.4.0 < 13.0.013.0.02026-10-21
GHSA-5xm2-6676-qcp9pillowpypiHIGH>= 8.1.0 < 13.0.013.0.02026-10-21
GHSA-4rr5-89j8-mwwmpillowpypiMODERATE>= 11.3.0 < 13.0.013.0.02026-10-21
GHSA-4558-3h8r-v8xppillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-21
GHSA-332p-7hrc-92wfpillowpypiCRITICAL>= 2.0.0 < 13.0.013.0.02026-10-21
GHSA-27h8-gf7j-v5hcpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-254f-3936-288hpillowpypiMODERATE>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-22hg-r758-rrw9pillowpypiHIGH>= 7.2.0 < 13.0.013.0.02026-10-21
GHSA-vx6w-vv9f-6gvgpillowpypiMODERATE>= 2.3.0 < 13.0.013.0.02026-10-20
GHSA-r825-w8mm-5pxwvitenpmMODERATE>= 0 < 2.14.22.14.22026-10-20
GHSA-q45j-58j2-45rgpillowpypiHIGH>= 5.3.0 < 13.0.013.0.02026-10-20
GHSA-pchr-8j38-3x4ppillowpypiHIGH>= 0 < 13.0.013.0.02026-10-20
GHSA-p4wg-p73j-c528pillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-20
GHSA-c6hw-5grf-ff96pillowpypiHIGH>= 8.1.0 < 13.0.013.0.02026-10-20
GHSA-8g5g-8vmr-9782pillowpypiCRITICAL>= 0 < 13.0.013.0.02026-10-20
GHSA-698v-4r3x-3vcvvitenpmMODERATE>= 0 < 2.14.22.14.22026-10-20
GHSA-65qm-jvmh-6pqgpillowpypiHIGH>= 9.2.0 < 13.0.013.0.02026-10-20
GHSA-58r4-6rv3-gfh8pillowpypiHIGH>= 0 < 13.0.013.0.02026-10-20
GHSA-587h-7wmj-h5pmvitenpmHIGH>= 0 < 2.14.22.14.22026-10-20
GHSA-462x-pgg6-55fppillowpypiMODERATE>= 8.2.0 < 13.0.013.0.02026-10-20
GHSA-mcj8-r9mp-w47pnextnpmMODERATE>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-f87g-xv8r-7p7xnextnpmMODERATE>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-cjq9-62q9-8jv4nextnpmHIGH>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-4jqv-mc3x-m676nextnpmMODERATE>= 15.0.0 < 15.5.2715.5.272026-10-07
GHSA-3w37-wq28-93x7nextnpmMODERATE>= 16.3.0 < 16.3.816.3.82026-10-07
GHSA-39w2-rjm5-chcvnextnpmLOW>= 16.0.0 < 16.3.816.3.82026-10-07
PYSEC-2026-4174transformerspypi—>= 4.49.0—2026-10-01
PYSEC-2026-4035djangopypi—>= 0 < 5.2.175.2.172026-10-01
GHSA-x97p-jq2g-jp4faxiosnpmHIGH>= 0.28.0 < 0.34.00.34.02026-09-30
GHSA-vh66-26gq-q6x8axiosnpmMODERATE>= 1.7.0 < 1.20.01.20.02026-09-30
GHSA-vcvr-r3jv-pc5jnextnpmCRITICAL>= 16.2.0 < 16.3.616.3.62026-09-30
GHSA-r4gj-5m52-g5whaxiosnpmHIGH>= 1.17.0 < 1.20.01.20.02026-09-30
GHSA-mghh-pgcx-3jjjaxiosnpmHIGH>= 1.15.0 < 1.20.01.20.02026-09-30
GHSA-m9gg-hp2v-232j@grpc/grpc-jsnpmHIGH>= 0 < 1.13.61.13.62026-09-30
GHSA-m8m8-qj5v-23w3axiosnpmHIGH>= 1.15.2 < 1.20.01.20.02026-09-30
GHSA-j8rh-479h-cp32axiosnpmMODERATE>= 1.0.0 < 1.20.01.20.02026-09-30
GHSA-f596-whhp-79r4@grpc/grpc-jsnpmLOW>= 0 < 1.13.61.13.62026-09-30
GHSA-c29m-xwm3-cm6raxiosnpmHIGH>= 1.16.1 < 1.20.01.20.02026-09-30
GHSA-9fr6-4gfg-395gaxiosnpmMODERATE>= 0.27.2 < 0.34.00.34.02026-09-30
GHSA-542g-h47m-68v8axiosnpmHIGH>= 1.13.0 < 1.20.01.20.02026-09-30
GHSA-4hqw-qxg8-jxx2axiosnpmMODERATE>= 1.12.0 < 1.20.01.20.02026-09-30
GHSA-44g4-m2mj-wpvxaxiosnpmMODERATE>= 1.15.0 < 1.20.01.20.02026-09-30
GHSA-3pq3-5fj3-cg6vaxiosnpmHIGH>= 1.13.0 < 1.20.01.20.02026-09-30
PYSEC-2026-3990apache-airflowpypi—>= 3.0.0 < 3.3.23.3.22026-09-21
PYSEC-2026-3989apache-airflowpypi—>= 0—2026-09-21
PYSEC-2026-3988apache-airflowpypi—>= 0 < 3.3.23.3.22026-09-21
PYSEC-2026-3929transformerspypi—>= 0 < 5.10.05.10.02026-09-10
PYSEC-2026-3806apache-airflowpypi—>= 0 < 3.3.03.3.02026-09-10
GHSA-p293-qw3h-jr36nextnpmCRITICAL>= 13.4.0 < 15.5.2415.5.242026-09-08
GHSA-2xp9-vwfh-vxw4nextnpmCRITICAL>= 10.0.0 < 15.5.2415.5.242026-09-08
PYSEC-2026-3966pysparkpypi—>= 3.0.0 < 3.5.83.5.82026-09-02
GHSA-9437-39hj-3c93pysparkpypiMODERATE>= 3.0.0 < 3.5.83.5.82026-09-02
GHSA-x9r9-c232-4q39transformerspypiHIGH>= 4.49.0—2026-09-01
PYSEC-2026-3994apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3993apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3992apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3991apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3712apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3711apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3710apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3709apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3708apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3707apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3706apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3705apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
GHSA-q4c3-7575-55j2apache-airflowpypiHIGH>= 3.3.0 < 3.3.13.3.12026-08-12
GHSA-j4jc-cq9h-xrhrapache-airflowpypiHIGH>= 0 < 3.3.13.3.12026-08-12
GHSA-g4qj-5vxv-wggfapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-fcmm-42r9-mmmmapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-f643-3rc2-j27wapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-f3c2-j7g8-vpp8apache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-cjv4-7hp2-2x9hapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-c56v-8w4g-3mfmapache-airflowpypiMODERATE>= 3.3.0 < 3.3.13.3.12026-08-12
GHSA-8prw-8m6x-8w6fapache-airflowpypiHIGH>= 3.3.0 < 3.3.13.3.12026-08-12
GHSA-75mg-c62r-v95gapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-5247-m8w9-2v4mapache-airflowpypiMODERATE>= 0 < 3.3.13.3.12026-08-12
GHSA-2qjv-p2gc-mjg2apache-airflowpypiHIGH>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3717djangopypi—>= 0 < 5.2.175.2.172026-08-04
GHSA-wvqv-fj8w-qmhmdjangopypiHIGH>= 0 < 5.2.175.2.172026-08-04
GHSA-q238-5cxm-5c9hdjangopypiMODERATE>= 0 < 5.2.175.2.172026-08-04
GHSA-xrqw-3rrv-vx5wtransformerspypiHIGH>= 0 < 5.10.05.10.02026-08-02
PYSEC-2026-3496pillowpypi—>= 8.2.0 < 12.3.012.3.02026-07-23
PYSEC-2026-3495pillowpypi—>= 5.1.0 < 12.3.012.3.02026-07-23
PYSEC-2026-3494pillowpypi—>= 5.2.0 < 12.3.012.3.02026-07-23
PYSEC-2026-3493pillowpypi—>= 0 < 12.3.012.3.02026-07-23
GHSA-q8wf-6r8g-63chnextnpmMODERATE>= 15.5.0 < 15.5.2115.5.212026-07-22
GHSA-p9j2-gv94-2wf4nextnpmHIGH>= 12.0.0 < 15.5.2115.5.212026-07-22
GHSA-m99w-x7hq-7vfjnextnpmHIGH>= 13.0.0 < 15.5.2115.5.212026-07-22
GHSA-955p-x3mx-jcvpnextnpmMODERATE>= 13.0.0 < 15.5.2115.5.212026-07-22
GHSA-89xv-2m56-2m9xnextnpmHIGH>= 14.1.1 < 15.5.2115.5.212026-07-22
GHSA-6gpp-xcg3-4w24nextnpmHIGH>= 16.0.0 < 16.2.1116.2.112026-07-22
GHSA-68g3-v927-f742nextnpmMODERATE>= 13.0.0 < 15.5.2115.5.212026-07-22
GHSA-4c39-4ccg-62r3nextnpmMODERATE>= 13.0.0 < 15.5.2115.5.212026-07-22
GHSA-4633-3j49-mh5qnextnpmMODERATE>= 13.0.0 < 15.5.2115.5.212026-07-22
GHSA-xj96-63gp-2gmrpillowpypiHIGH>= 0 < 12.3.012.3.02026-07-20
GHSA-xj6q-8x83-jv6gaxiosnpmMODERATE>= 1.15.2 < 1.18.01.18.02026-07-20
GHSA-vjc4-5qp5-m44jpillowpypiHIGH>= 8.2.0 < 12.3.012.3.02026-07-20
GHSA-pmv8-rq9r-6j72axiosnpmMODERATE>= 0.28.0 < 0.33.00.33.02026-07-20
GHSA-phj9-mv4w-65pmpillowpypiHIGH>= 0 < 12.3.012.3.02026-07-20
GHSA-pg7v-jwj7-p798pillowpypiMODERATE>= 12.0.0 < 12.3.012.3.02026-07-20
GHSA-mwf2-3pr3-8698axiosnpmMODERATE>= 1.13.0 < 1.18.01.18.02026-07-20
GHSA-mmx7-hfxf-jppxaxiosnpmMODERATE>= 1.0.0 < 1.18.01.18.02026-07-20
GHSA-jqh4-m9w3-8hp9axiosnpmMODERATE>= 1.7.0 < 1.18.01.18.02026-07-20
GHSA-jjj6-mw9f-p565pillowpypiHIGH>= 5.1.0 < 12.3.012.3.02026-07-20
GHSA-hcpx-6fm6-wx23axiosnpmMODERATE>= 0.31.1 < 0.33.00.33.02026-07-20