Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

9

Alpm, Debian, Go & more

Total vulnerabilities tracked

825

From global vulnerability databases

Exclude malware
Package pip

0.6

Low

Ecosystem: Debian

Package: python-pip

5.2

Medium

Ecosystem: Npm

Package: @cloudplatform-single-spa/svp-pipeline

5.2

Medium

Ecosystem: PyPI

Package: datapipe-util

5.2

Medium

Ecosystem: PyPI

Package: spip-pth-demo

5.2

Medium

Ecosystem: Npm

Package: ts-result-pipe

1.1

Low

Ecosystem: Debian

Package: spip

5.2

Medium

Ecosystem: PyPI

Package: data-pipeline-check

5.2

Medium

Ecosystem: Npm

Package: async-pipeline-builder

6.3

Medium

Ecosystem: PyPI

Package: pipecat-ai

5.2

Medium

Ecosystem: Npm

Package: atlassian-marathon-asset-pipeline

5.2

Medium

Ecosystem: RubyGems

Package: knot-rails-assets-pipeline

FLAT-NYLZ3 (CVE-2026-8430)

Server side template injection In spip

7.2

High

Ecosystem: Debian

Package: spip

FLAT-Z6N9G (CVE-2026-8429)

Server side template injection In spip

8.0

High

Ecosystem: Debian

Package: spip

5.2

Medium

Ecosystem: PyPI

Package: my-pipeline-watcher-poc

5.2

Medium

Ecosystem: PyPI

Package: mypypipkg

FLAT-TIG53 (CVE-2026-6357)

Dependency Confusion In pip

1.7

Low

Ecosystem: PyPI

Package: pip

FLAT-CVTM1 (CVE-2025-62373)

Insecure deserialization In pipecat-ai

8.4

High

Ecosystem: PyPI

Package: pipecat-ai

6.0

Medium

Ecosystem: Go

Package: github.com/tektoncd/pipeline

3.8

Low

Ecosystem: Go

Package: github.com/tektoncd/pipeline

5.8

Medium

Ecosystem: Go

Package: github.com/tektoncd/pipeline

3.6

Low

Ecosystem: Go

Package: github.com/tektoncd/pipeline

3.8

Low

Ecosystem: Go

Package: github.com/tektoncd/pipeline

7.7

High

Ecosystem: Maven

Package: io.spinnaker.echo:echo-pipelinetriggers

FLAT-5E195 (CVE-2026-3219)

Insecure object reference In python-pip

1.0

Low

Ecosystem: Debian

Package: python-pip

FLAT-NLIEX (CVE-2018-20225)

Insecure object reference In python-pip

7.5

High

Ecosystem: Alpm

Package: python-pip

FLAT-LKQLV (CVE-2019-6251)

Lack of data validation In epiphany

6.2

Medium

Ecosystem: Alpm

Package: epiphany

FLAT-8KBJV (CVE-2021-3572)

Lack of data validation In python-pip

4.6

Medium

Ecosystem: Alpm

Package: python-pip

6.6

Medium

Ecosystem: Alpm

Package: epiphany

5.2

Medium

Ecosystem: PyPI

Package: pipinpeace-bind

5.2

Medium

Ecosystem: PyPI

Package: pipinpeace-reverse

5.2

Medium

Ecosystem: PyPI

Package: pipinpeace-env

FLAT-F5EA4 (CVE-2026-33549)

Privilege escalation In spip

7.5

High

Ecosystem: Debian

Package: spip

0.6

Low

Ecosystem: Debian

Package: spip

5.2

Medium

Ecosystem: PyPI

Package: qyrm-pipinject4

5.2

Medium

Ecosystem: PyPI

Package: gcpipwrap

3.6

Low

Ecosystem: Go

Package: github.com/tektoncd/pipeline

5.7

Medium

Ecosystem: Go

Package: github.com/tektoncd/pipeline

5.2

Medium

Ecosystem: Npm

Package: demo-pipelinetest

0.6

Low

Ecosystem: Debian

Package: spip

7.7

High

Ecosystem: Debian

Package: spip

FLAT-0T49O (CVE-2026-22206)

Remote command execution In spip

6.1

Medium

Ecosystem: Debian

Package: spip

FLAT-Q7XAB (CVE-2026-27472)

Server-side request forgery (SSRF) In spip

1.3

Low

Ecosystem: Debian

Package: spip

FLAT-O2NA2 (CVE-2026-27473)

Server side cross-site scripting In spip

1.2

Low

Ecosystem: Debian

Package: spip

1.2

Low

Ecosystem: Debian

Package: spip

FLAT-FZ1J4 (CVE-2026-27475)

Insecure deserialization In spip

6.1

Medium

Ecosystem: Debian

Package: spip

6.1

Medium

Ecosystem: Debian

Package: spip

FLAT-I1RKE (CVE-2026-26223)

Server side cross-site scripting In spip

1.2

Low

Ecosystem: Debian

Package: spip

1.3

Low

Ecosystem: Debian

Package: spip

0.5

Low

Ecosystem: Debian

Package: spip

FLAT-AXDGV (CVE-2025-71241)

Server side cross-site scripting In spip

0.5

Low

Ecosystem: Debian

Package: spip

1.2

Low

Ecosystem: Debian

Package: spip

5.2

Medium

Ecosystem: PyPI

Package: dev-pipline-test

5.2

Medium

Ecosystem: PyPI

Package: ctf-pipline-test

5.2

Medium

Ecosystem: PyPI

Package: thread-pipeline-test

5.2

Medium

Ecosystem: PyPI

Package: moveworks-pipeline-test

5.2

Medium

Ecosystem: Npm

Package: adobe_pipeline_test

5.2

Medium

Ecosystem: PyPI

Package: pipelinepoision-test

5.2

Medium

Ecosystem: PyPI

Package: pipeline-poision-test

0.4

Low

Ecosystem: PyPI

Package: pip

4.9

Medium

Ecosystem: Maven

Package: org.apache.streampipes:streampipes-parent

FLAT-H1TQ5 (CVE-2023-53900)

Insecure file upload In spip

1.1

Low

Ecosystem: Debian

Package: spip

1.3

Low

Ecosystem: Maven

Package: org.jenkinsci.plugins:pipeline-reporter-by-redpen

5.7

Medium

Ecosystem: Maven

Package: com.datapipe.jenkins.plugins:hashicorp-vault-plugin

5.2

Medium

Ecosystem: Npm

Package: @viapip/eslint-config

5.2

Medium

Ecosystem: Npm

Package: grus-pipe-websockets-grunt

5.2

Medium

Ecosystem: Npm

Package: supercluster-webdriver-manager-pipe-alphard

5.2

Medium

Ecosystem: Npm

Package: pipe-grid-byte-old-array

5.2

Medium

Ecosystem: Npm

Package: analyze-boolean-pipe-import-epsilon

5.2

Medium

Ecosystem: Npm

Package: duplex-lacerta-link-pipe

5.2

Medium

Ecosystem: Npm

Package: easy-pipe-signal-proxy-uglify

5.2

Medium

Ecosystem: Npm

Package: speleology-pipe-pino-puppeteer

5.2

Medium

Ecosystem: Npm

Package: chalk-cluster-nucleosynthesis-pipe

5.2

Medium

Ecosystem: Npm

Package: electron-builder-pipe-markdownlint-nextjs

5.2

Medium

Ecosystem: Npm

Package: pipe-cloud-try-assert-grid

5.2

Medium

Ecosystem: Npm

Package: pipe-orogeny-await-kaus

5.2

Medium

Ecosystem: Npm

Package: debug-user-pipe-sun-simple

5.2

Medium

Ecosystem: Npm

Package: pipe-virgo-perseus-auth

5.2

Medium

Ecosystem: Npm

Package: integer-pipe-beta-orchestrate-simulate

5.2

Medium

Ecosystem: Npm

Package: postcss-loader-install-thuban-pipe

5.2

Medium

Ecosystem: Npm

Package: process-daemon-pipe-try-bundle

5.2

Medium

Ecosystem: Npm

Package: optimize-pipe-signal-dog-index

5.2

Medium

Ecosystem: Npm

Package: pipe-cz-conventional-changelog-meissa-canopus

5.2

Medium

Ecosystem: Npm

Package: pipe-pino-pretty-toml-meteor

5.2

Medium

Ecosystem: Npm

Package: pipe-auth0-barnard-tool

5.2

Medium

Ecosystem: Npm

Package: gridsome-slides-pipe-socketio

5.2

Medium

Ecosystem: Npm

Package: config-pipe-promise-start

5.2

Medium

Ecosystem: Npm

Package: runtime-short-fork-yaml-pipe

5.2

Medium

Ecosystem: Npm

Package: bundle-static-pipe-mu-float

5.2

Medium

Ecosystem: Npm

Package: pipe-byte-spy-fork-notify

5.2

Medium

Ecosystem: Npm

Package: paleontology-saturnology-standard-pipe

5.2

Medium

Ecosystem: Npm

Package: development-rollup-pipe-koa

5.2

Medium

Ecosystem: Npm

Package: kronos-pipe-delphinus-centauri

5.2

Medium

Ecosystem: Npm

Package: alpha-view-grep-abstract-pipe

5.2

Medium

Ecosystem: Npm

Package: socket-sigma-minify-pipe-array

5.2

Medium

Ecosystem: Npm

Package: pipe-wavefunction-test-redis

5.2

Medium

Ecosystem: Npm

Package: registry-pipe-version-chariklo

5.2

Medium

Ecosystem: Npm

Package: pipe-simple-virtualize-void-stack

5.2

Medium

Ecosystem: Npm

Package: changelog-tachyon-writable-pipe

5.2

Medium

Ecosystem: Npm

Package: pipe-parallax-build-kinetic

5.2

Medium

Ecosystem: Npm

Package: double-benchmark-pipe-hash-virtualize