Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
ROOT-OS-DEBIAN-12-CVE-2018-20225
  • Root:Debian:12/python-pip
  • Root:Debian:12/rootio-python-pip
CVE-2018-20225 in python-pip - Patched by Root 25 Aug
  • Fix available
CGA-8x49-p253-mmm8
  • Chainguard/py3.9-pip
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-hqhm-rp8r-7cfp
  • Chainguard/py3.9-pip
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-8g9x-p8cj-p743
  • Chainguard/pulumi
  • Wolfi/pulumi
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-9mjq-gwjw-jcrx
  • Chainguard/pulumi
  • Wolfi/pulumi
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-88qh-x6m9-v75g
  • Chainguard/conda
  • Wolfi/conda
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-jj96-rcfc-x4ww
  • Chainguard/conda
  • Wolfi/conda
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-mm9w-2xhf-xfjg
  • Chainguard/py3-pip
  • Wolfi/py3-pip
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
CGA-vpm2-mrg6-82rr
  • Chainguard/py3-pip
  • Wolfi/py3-pip
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.8 (High)
ECHO-072a-9ff7-3371
  • Echo/python-3.11
  • Echo/python-pip
  • Echo:PyPI/pip
Disputed by NVD and pip upstream. The CVE describes pip's --extra-index-url behavior where the highest version number is installed regardless of which index it comes from. The pip team considers this intended functionality, not a security flaw. Red Hat closed as WONTFIX; Ubuntu priority: Negligible. Affects all pip versions with no fix planned. 15 Sep 2025
  • Fix available
MINI-4fr4-36h6-gcc5
  • MinimOS/py3-pip
  • MinimOS/py3-pip-auto
  • MinimOS/py3-pip-wheel
  • MinimOS/py3-supported-pip
  • MinimOS/py3.10-pip
  • ... 9 more
See record for full details 29 May 2025
  • Fix available
UBUNTU-CVE-2018-20225
  • Ubuntu:Pro:14.04:LTS/python-pip
  • Ubuntu:Pro:16.04:LTS/python-pip
  • Ubuntu:Pro:18.04:LTS/python-pip
  • Ubuntu:Pro:20.04:LTS/python-pip
See record for full details 08 May 2020
  • No fix available
  • Severity - 7.8 (High)