devpi vulnerabilities

CVEs whose affected-version data names the devpi package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54723Medium· 6.5

1w ago

devpi is a Python package index staging server and packaging, testing, and release tool

devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.20.2 and 7.0.0b3, a server configured with the primary or deprecated master role allows an unauthenticated, modified GET request to the +…

▾ Sunlitdevpi · devpiEPSS 0.32%via NVD