개발EOL · Packages · CVE
마감 임박Prometheus 3.15D-2·Ruby on Rails 8.0D-3·Microsoft .NET 9D-6·Microsoft .NET 8D-6·Firefox 159D-6·전체 캘린더 →
의존성 취약점

무엇이 뚫려 있나

OSV.dev(Apache-2.0)에서 수집합니다. 우리가 추적 중인 패키지에 해당하는 것만 담습니다.

수집 1,282건출처: OSV.dev
CRITICAL66건
HIGH292건
MODERATE325건
LOW59건
등급 미표기540건발행처가 등급을 안 줌
이 페이지는 보안 자문이 아닙니다. 등급은 발행처(GitHub Advisory 등)가 붙인 값을 그대로 옮긴 것이고, CVSS 점수는 우리가 계산하지 않습니다 — OSV 가 주는 것은 숫자가 아니라 벡터 문자열이며, 출처가 발표하지 않은 숫자를 보안 화면에 올리지 않는다는 것이 이 사이트의 원칙입니다. 실제 영향은 사용 방식에 따라 다르므로 각 항목의 원문을 확인하세요.

취약점이 많은 패키지

  1. 1djangopypi324
  2. 2apache-airflowpypi304
  3. 3pillowpypi212
  4. 4nextnpm77
  5. 5axiosnpm56
  6. 6transformerspypi56
  7. 7torchpypi44
  8. 8vitenpm29
누적 건수입니다. 오래된 것과 최신 것이 함께 세어집니다.

분포

생태계별
  1. 1pypi1,042
  2. 2npm223
  3. 3crates17
등급별
  1. 1미표기540
  2. 2MODERATE325
  3. 3HIGH292
  4. 4CRITICAL66
  5. 5LOW59
등급 미표기가 많은 것은 발행처가 등급을 붙이지 않은 경우입니다 — 위험이 없다는 뜻이 아닙니다.

최근 공개

공개일 순입니다.

ID패키지생태계등급영향 범위수정 버전공개일
GHSA-8g5g-mxqh-grgjvitenpmMODERATE>= 6.4.4 < 6.4.56.4.52026-10-29
GHSA-654x-cwwv-5j9cpillowpypiMODERATE>= 11.2.1 < 13.0.013.0.02026-10-23
GHSA-5x8w-8jj5-q52hpillowpypiCRITICAL>= 0 < 13.0.013.0.02026-10-23
GHSA-5wjr-9356-4wc8tokiocratesMODERATE>= 1.54.0 < 1.54.11.54.12026-10-23
GHSA-v9pv-5gc8-w2m6pillowpypiCRITICAL>= 11.0.0 < 13.0.013.0.02026-10-22
GHSA-px85-f4q5-jh77storybooknpmHIGH>= 8.0.0 < 8.6.198.6.192026-10-22
GHSA-p8hx-v2p6-rp84pillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-22
GHSA-p3m5-59mp-jv5rnextnpmHIGH>= 13.0.0 < 15.5.2815.5.282026-10-22
GHSA-mrfp-p49p-3hf2pillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-22
GHSA-h694-7cp9-m8p3nextnpmMODERATE>= 16.3.0 < 16.3.816.3.82026-10-22
GHSA-g842-9rc4-69pwpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-22
GHSA-g7cr-3p24-7wf7pillowpypiHIGH>= 9.4.0 < 13.0.013.0.02026-10-22
GHSA-g4qv-2jxx-769hpillowpypiHIGH>= 11.0.0 < 13.0.013.0.02026-10-22
GHSA-9v9v-9qvf-h2hjpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-22
GHSA-78g4-xqwv-q3g8pillowpypiHIGH>= 11.1.0 < 13.0.013.0.02026-10-22
GHSA-673q-mjm6-r5xrnextnpmCRITICAL>= 16.0.0 < 16.4.116.4.12026-10-22
GHSA-4rm8-3hmm-39fgpillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-22
GHSA-3j72-p6qg-6xp7pillowpypiHIGH>= 0 < 13.0.013.0.02026-10-22
GHSA-24rc-8hj2-v98cpillowpypiMODERATE>= 9.1.0 < 13.0.013.0.02026-10-22
GHSA-2464-fhr4-w9xwnextnpmCRITICAL>= 10.0.0 < 15.5.2815.5.282026-10-22
RUSTSEC-2026-0384tokiocrates—>= 1.54.0 < 1.54.11.54.12026-10-21
PYSEC-2026-4343pillowpypi—>= 0 < 13.0.013.0.02026-10-21
PYSEC-2026-4342pillowpypi—>= 11.0.0 < 13.0.013.0.02026-10-21
PYSEC-2026-4341pillowpypi—>= 0 < 13.0.013.0.02026-10-21
PYSEC-2026-4340pillowpypi—>= 0 < 13.0.013.0.02026-10-21
PYSEC-2026-4339pillowpypi—>= 11.0.0 < 13.0.013.0.02026-10-21
PYSEC-2026-4338pillowpypi—>= 0 < 13.0.013.0.02026-10-21
PYSEC-2026-4337pillowpypi—>= 0 < 13.0.013.0.02026-10-21
PYSEC-2026-4336pillowpypi—>= 11.2.1 < 13.0.013.0.02026-10-21
GHSA-xvh5-g6gv-559vpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-xgh8-jp6q-p5x8pillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-21
GHSA-w889-685w-c8fhpillowpypiCRITICAL>= 2.6.0 < 13.0.013.0.02026-10-21
GHSA-vfpm-58rq-9qcgvitenpmMODERATE>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-rq7h-c2jc-7f22vitenpmMODERATE>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-rfgq-q3w2-pmv2pillowpypiMODERATE>= 9.1.0 < 13.0.013.0.02026-10-21
GHSA-jg86-v3jv-hrpmpillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-j4m9-6w36-pw47pillowpypiHIGH>= 10.0.0 < 13.0.013.0.02026-10-21
GHSA-gg2r-wvfm-q9rxpillowpypiHIGH>= 4.1.0 < 13.0.013.0.02026-10-21
GHSA-fc9g-5qg7-mf45pillowpypiMODERATE>= 9.2.0 < 13.0.013.0.02026-10-21
GHSA-f2ph-cmg5-wxc8storybooknpmCRITICAL>= 8.0.0 < 8.6.198.6.192026-10-21
GHSA-f2g6-542v-9j58pillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-cp9v-662q-vvx9pillowpypiHIGH>= 12.0.0 < 13.0.013.0.02026-10-21
GHSA-9jrq-w75r-8gcwvitenpmLOW>= 8.3.0 < 8.3.38.3.32026-10-21
GHSA-7mwm-ghpf-9vrmpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-74r2-7ff9-mjj2pillowpypiMODERATE>= 5.4.0 < 13.0.013.0.02026-10-21
GHSA-5xm2-6676-qcp9pillowpypiHIGH>= 8.1.0 < 13.0.013.0.02026-10-21
GHSA-4rr5-89j8-mwwmpillowpypiMODERATE>= 11.3.0 < 13.0.013.0.02026-10-21
GHSA-4558-3h8r-v8xppillowpypiMODERATE>= 0 < 13.0.013.0.02026-10-21
GHSA-332p-7hrc-92wfpillowpypiCRITICAL>= 2.0.0 < 13.0.013.0.02026-10-21
GHSA-27h8-gf7j-v5hcpillowpypiHIGH>= 0 < 13.0.013.0.02026-10-21
GHSA-254f-3936-288hpillowpypiMODERATE>= 5.1.0 < 13.0.013.0.02026-10-21
GHSA-22hg-r758-rrw9pillowpypiHIGH>= 7.2.0 < 13.0.013.0.02026-10-21
GHSA-vx6w-vv9f-6gvgpillowpypiMODERATE>= 2.3.0 < 13.0.013.0.02026-10-20
GHSA-r825-w8mm-5pxwvitenpmMODERATE>= 0 < 2.14.22.14.22026-10-20
GHSA-q45j-58j2-45rgpillowpypiHIGH>= 5.3.0 < 13.0.013.0.02026-10-20
GHSA-pchr-8j38-3x4ppillowpypiHIGH>= 0 < 13.0.013.0.02026-10-20
GHSA-p4wg-p73j-c528pillowpypiHIGH>= 5.1.0 < 13.0.013.0.02026-10-20
GHSA-c6hw-5grf-ff96pillowpypiHIGH>= 8.1.0 < 13.0.013.0.02026-10-20
GHSA-8g5g-8vmr-9782pillowpypiCRITICAL>= 0 < 13.0.013.0.02026-10-20
GHSA-698v-4r3x-3vcvvitenpmMODERATE>= 0 < 2.14.22.14.22026-10-20
GHSA-65qm-jvmh-6pqgpillowpypiHIGH>= 9.2.0 < 13.0.013.0.02026-10-20
GHSA-58r4-6rv3-gfh8pillowpypiHIGH>= 0 < 13.0.013.0.02026-10-20
GHSA-587h-7wmj-h5pmvitenpmHIGH>= 0 < 2.14.22.14.22026-10-20
GHSA-462x-pgg6-55fppillowpypiMODERATE>= 8.2.0 < 13.0.013.0.02026-10-20
PYSEC-2026-4335pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4334pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4333pillowpypi—>= 12.0.0 < 13.0.013.0.02026-10-19
PYSEC-2026-4332pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4331pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4330pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4329pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4328pillowpypi—>= 11.3.0 < 13.0.013.0.02026-10-19
PYSEC-2026-4327pillowpypi—>= 0 < 13.0.013.0.02026-10-19
PYSEC-2026-4326pillowpypi—>= 0 < 13.0.013.0.02026-10-19
RUSTSEC-2026-0386tokiocrates—>= 0.3.2 < 1.51.61.51.62026-10-13
GHSA-mcj8-r9mp-w47pnextnpmMODERATE>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-f87g-xv8r-7p7xnextnpmMODERATE>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-cjq9-62q9-8jv4nextnpmHIGH>= 16.0.0 < 16.3.816.3.82026-10-07
GHSA-4jqv-mc3x-m676nextnpmMODERATE>= 15.0.0 < 15.5.2715.5.272026-10-07
GHSA-3w37-wq28-93x7nextnpmMODERATE>= 16.3.0 < 16.3.816.3.82026-10-07
GHSA-39w2-rjm5-chcvnextnpmLOW>= 16.0.0 < 16.3.816.3.82026-10-07
PYSEC-2026-4174transformerspypi—>= 4.49.0—2026-10-01
PYSEC-2026-4035djangopypi—>= 0 < 5.2.175.2.172026-10-01
GHSA-mrhx-c7xc-m3w5zodnpmHIGH>= 0 < 4.6.64.6.62026-10-01
GHSA-x97p-jq2g-jp4faxiosnpmHIGH>= 0.28.0 < 0.34.00.34.02026-09-30
GHSA-vh66-26gq-q6x8axiosnpmMODERATE>= 1.7.0 < 1.20.01.20.02026-09-30
GHSA-vcvr-r3jv-pc5jnextnpmCRITICAL>= 16.2.0 < 16.3.616.3.62026-09-30
GHSA-r4gj-5m52-g5whaxiosnpmHIGH>= 1.17.0 < 1.20.01.20.02026-09-30
GHSA-mghh-pgcx-3jjjaxiosnpmHIGH>= 1.15.0 < 1.20.01.20.02026-09-30
GHSA-m9gg-hp2v-232j@grpc/grpc-jsnpmHIGH>= 0 < 1.13.61.13.62026-09-30
GHSA-m8m8-qj5v-23w3axiosnpmHIGH>= 1.15.2 < 1.20.01.20.02026-09-30
GHSA-j8rh-479h-cp32axiosnpmMODERATE>= 1.0.0 < 1.20.01.20.02026-09-30
GHSA-f596-whhp-79r4@grpc/grpc-jsnpmLOW>= 0 < 1.13.61.13.62026-09-30
GHSA-c29m-xwm3-cm6raxiosnpmHIGH>= 1.16.1 < 1.20.01.20.02026-09-30
GHSA-9fr6-4gfg-395gaxiosnpmMODERATE>= 0.27.2 < 0.34.00.34.02026-09-30
GHSA-542g-h47m-68v8axiosnpmHIGH>= 1.13.0 < 1.20.01.20.02026-09-30
GHSA-4hqw-qxg8-jxx2axiosnpmMODERATE>= 1.12.0 < 1.20.01.20.02026-09-30
GHSA-44g4-m2mj-wpvxaxiosnpmMODERATE>= 1.15.0 < 1.20.01.20.02026-09-30
GHSA-3pq3-5fj3-cg6vaxiosnpmHIGH>= 1.13.0 < 1.20.01.20.02026-09-30
PYSEC-2026-3990apache-airflowpypi—>= 3.0.0 < 3.3.23.3.22026-09-21
PYSEC-2026-3989apache-airflowpypi—>= 0—2026-09-21
PYSEC-2026-3988apache-airflowpypi—>= 0 < 3.3.23.3.22026-09-21
PYSEC-2026-3929transformerspypi—>= 0 < 5.10.05.10.02026-09-10
PYSEC-2026-3806apache-airflowpypi—>= 0 < 3.3.03.3.02026-09-10
GHSA-p293-qw3h-jr36nextnpmCRITICAL>= 13.4.0 < 15.5.2415.5.242026-09-08
GHSA-2xp9-vwfh-vxw4nextnpmCRITICAL>= 10.0.0 < 15.5.2415.5.242026-09-08
PYSEC-2026-3966pysparkpypi—>= 3.0.0 < 3.5.83.5.82026-09-02
GHSA-9437-39hj-3c93pysparkpypiMODERATE>= 3.0.0 < 3.5.83.5.82026-09-02
GHSA-x9r9-c232-4q39transformerspypiHIGH>= 4.49.0—2026-09-01
PYSEC-2026-3994apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3993apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3992apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3991apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3712apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3711apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3710apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3709apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12
PYSEC-2026-3708apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3707apache-airflowpypi—>= 3.3.0 < 3.3.13.3.12026-08-12
PYSEC-2026-3706apache-airflowpypi—>= 0 < 3.3.13.3.12026-08-12