CRITICAL9.1PyPI
GHSA-6mww-xvh7-fq4f· CVE-2018-1002150, PYSEC-2018-86Koji hub call does not perform correct access checks
Modified: 2/18/2025
package
PyPI/koji
pkg:pypi/koji
MEDIUM6.5PyPI
GHSA-7498-c9fm-g64p· CVE-2019-17109, PYSEC-2019-183koji hub allows arbitrary upload destinations
Modified: 9/27/2024
MEDIUM5.4PyPI
GHSA-g2vg-8hfg-79vj· CVE-2024-9427, PYSEC-2026-1501Koji Cross-site Scripting
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-vwp5-w4rq-g4cc· CVE-2017-1002153Koji blacklisted paths workaround
Modified: 6/10/2026
—PyPI
PYSEC-2018-86· CVE-2018-1002150, GHSA-6mww-xvh7-fq4fModified: 11/8/2023
—PyPI
PYSEC-2019-183· CVE-2019-17109, GHSA-7498-c9fm-g64pModified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2026-1501· CVE-2024-9427, GHSA-g2vg-8hfg-79vjKoji Cross-site Scripting
Modified: 7/7/2026