Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-qwm4-qh6w-59xr
  • PyPI/pip
 pip would incorrectly handle doubly-encoded package URLs from indexes 29 Jul
  • Fix available
  • Severity - 5.6 (Medium)
PYSEC-2026-3721
  • PyPI/pip
 See record for full details 29 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2876
  • PyPI/pip
 pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere 13 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-2875
  • PyPI/pip
 pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files 13 Jul
  • Fix available
  • Severity - 4.6 (Medium)
PYSEC-2026-1796
  • PyPI/pip
 pip Path Traversal vulnerability 07 Jul
  • Fix available
  • Severity - 2.0 (Low)
PYSEC-2026-1795
  • PyPI/pip
 pip's fallback tar extraction doesn't check symbolic links point to extraction directory 07 Jul
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wf93-45jw-7689
  • PyPI/pip
 pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory 01 Jun
  • Fix available
  • Severity - 4.1 (Medium)
PYSEC-2026-196
  • PyPI/pip
 See record for full details 01 Jun
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-jp4c-xjxw-mgf9
  • PyPI/pip
 pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere 27 Apr
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-58qw-9mgm-455v
  • PyPI/pip
 pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files 20 Apr
  • Fix available
  • Severity - 4.6 (Medium)
GHSA-6vgw-5pg2-w6jp
  • PyPI/pip
 pip Path Traversal vulnerability 02 Feb
  • Fix available
  • Severity - 2.0 (Low)
GHSA-4xh5-x5gv-qwph
  • PyPI/pip
 pip's fallback tar extraction doesn't check symbolic links point to extraction directory 24 Sep 2025
  • Fix available
  • Severity - 5.9 (Medium)
MAL-2025-41700
  • PyPI/malicious-pip-package-for-demo
 Malicious code in malicious-pip-package-for-demo (PyPI) 28 Aug 2025
  • No fix available
MAL-2024-11597
  • PyPI/frexco-pip-requests
 Malicious code in frexco-pip-requests (PyPI) 09 Dec 2024
  • No fix available
MAL-2024-11575
  • PyPI/dftester-pip
 Malicious code in dftester-pip (PyPI) 27 Nov 2024
  • No fix available
MAL-2024-10105
  • PyPI/popeye-pip-v3
 Malicious code in popeye-pip-v3 (PyPI) 22 Jul 2024
  • No fix available
Load more...