HIGH7.5PyPI
GHSA-2c7w-v459-cwgf· CVE-2022-25568, PYSEC-2022-43141MotionEye allows attackers to access sensitive information
Modified: 11/22/2024
package
PyPI/motioneye
pkg:pypi/motioneye
HIGHPyPI
GHSA-g5mq-prx7-c588· CVE-2025-47782, PYSEC-2025-39motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-g9fx-5r4h-pcw3· CVE-2026-31978, PYSEC-2026-2664motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-j67x-q29f-qcvv· CVE-2026-55863, PYSEC-2026-2665motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
Modified: 7/13/2026
HIGH7.2PyPI
GHSA-j945-qm58-4gjx· CVE-2025-60787, PYSEC-2026-1680motionEye vulnerable to RCE via unsanitized motion config parameter
Modified: 7/7/2026
HIGH7.2PyPI
GHSA-m2c7-42rf-c62f· CVE-2021-44255, PYSEC-2026-681Unrestricted Upload of File with Dangerous Type in motionEye
Modified: 7/6/2026
CRITICALPyPI
GHSA-phv5-334h-mxcwmotionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal
Modified: 6/23/2026
CRITICAL9.8PyPI
GHSA-qxvg-h7q2-hcxhmotionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)
Modified: 6/23/2026
CRITICALPyPI
GHSA-r3cw-c95m-wfh9· CVE-2026-46488, PYSEC-2026-428motionEye: Authentication possible via password hash
Modified: 6/29/2026
MEDIUM5.5PyPI
GHSA-rhgp-6wq6-9j67· CVE-2026-32315, PYSEC-2026-2666motionEye's World-Readable Configuration File Exposes Admin Password Hash
Modified: 7/13/2026
HIGHPyPI
GHSA-rw9q-97r9-8gvh· CVE-2026-55488, PYSEC-2026-2667motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2022-43141· CVE-2022-25568, GHSA-2c7w-v459-cwgfModified: 6/10/2026
—PyPI
PYSEC-2025-39· CVE-2025-47782, GHSA-g5mq-prx7-c588Modified: 5/14/2025
HIGH7.2PyPI
PYSEC-2026-1680· CVE-2025-60787, GHSA-j945-qm58-4gjxmotionEye vulnerable to RCE via unsanitized motion config parameter
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-2664· CVE-2026-31978, GHSA-g9fx-5r4h-pcw3motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2665· CVE-2026-55863, GHSA-j67x-q29f-qcvvmotionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2666· CVE-2026-32315, GHSA-rhgp-6wq6-9j67motionEye's World-Readable Configuration File Exposes Admin Password Hash
Modified: 7/13/2026
—PyPI
PYSEC-2026-2667· CVE-2026-55488, GHSA-rw9q-97r9-8gvhmotionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
Modified: 7/13/2026
—PyPI
PYSEC-2026-428· CVE-2026-46488, GHSA-r3cw-c95m-wfh9motionEye: Authentication possible via password hash
Modified: 7/1/2026
HIGH7.2PyPI
PYSEC-2026-681· CVE-2021-44255, GHSA-m2c7-42rf-c62fUnrestricted Upload of File with Dangerous Type in motionEye
Modified: 7/6/2026