PyPI glance

Name: PyPI glance
Brand: PyPI

productUS

pkg:pypi/glance

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical1high16medium4low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-0212US	medium4.0	2.99% (87th)	Exploit	2012.2.3	2013-02-24	2 versions
CVE-2012-4573US	medium5.5	3.35% (89th)	—	11.0.0a0	2012-11-11	2 versions
CVE-2015-5162US	high7.5	3.09% (88th)	—	14.0.0	2016-10-07	< 14.0.0
CVE-2014-9623US	medium4.0	2.87% (87th)	—	11.0.0a0	2015-01-23	< 11.0.0a0
CVE-2015-1195US	medium6.5	2.79% (86th)	—	11.0.0a0	2015-01-21	< 11.0.0a0
CVE-2012-5482US	medium5.5	2.74% (86th)	—	11.0.0a0	2012-11-11	2 versions
CVE-2015-5286US	medium6.8	2.40% (84th)	—	2014.2.4	2015-10-26	2 versions
CVE-2014-5356US	medium4.0	2.15% (82nd)	—	11.0.0a0	2014-08-25	< 11.0.0a0
CVE-2015-1881US	medium4.0	2.12% (82nd)	—	11.0.0a0	2015-02-24	< 11.0.0a0
CVE-2017-7200US	medium5.8	2.06% (81st)	—	11.0.0a0	2017-03-21	< 11.0.0a0
CVE-2015-5251US	medium5.5OT elevated	2.05% (81st)	—	2014.2.4	2015-10-26	2 versions
CVE-2014-0162US	medium6.0	2.00% (81st)	—	2013.2.4	2014-04-27	2013.2 → 2013.2.4
CVE-2014-9684US	medium4.0	2.00% (81st)	—	11.0.0a0	2015-02-24	< 11.0.0a0
CVE-2015-5163US	low3.5	1.50% (74th)	—	2015.1.2	2015-08-19	2015.1.0 → 2015.1.2
CVE-2016-0757US	medium4.3	1.48% (74th)	—	11.0.2	2016-04-13	11.0.0 → 11.0.2
CVE-2013-1840US	low3.5	1.37% (72nd)	—	11.0.0a0	2013-03-22	2 versions
CVE-2015-8234US	medium5.5	1.26% (70th)	—	no fix	2017-03-29	≤ 11.0.0
CVE-2022-47951US	medium5.7	1.03% (64th)	—	24.1.1	2023-01-26	2 versions
CVE-2024-32498US	medium6.5	0.83% (58th)	—	no fix	2024-07-05	≤ 28.0.1
CVE-2022-4134US	low2.8	0.33% (26th)	—	no fix	2023-03-06	≤ 25.1.0
CVE-2014-1948US	low2.6	0.31% (24th)	—	11.0.0a0	2014-02-14	< 11.0.0a0
CVE-2026-34881US	—	0.28% (20th)	—	29.2.0	2026-03-31	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2645 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-399CWE-3994 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-552Files or Directories Accessible to External Parties2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan