TuxCare rebuilt pip to address 3 CVEs. Fixed in 9.0.0.post3+tuxcare.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1790060501.json"