OSV - Open Source Vulnerabilities

BIT-pip-2025-8869

Bitnami/pip

Fallback tar extraction in pip doesn't check symbolic links point to extraction directory

26 Sep

Fix available

GHSA-4xh5-x5gv-qwph

PyPI/pip

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

24 Sep

Fix available
Severity - 5.9 (Medium)

DLA-4348-1

Debian:11/python-pip

python-pip - security update

26 Oct

Fix available

MINI-j96j-jmq5-jp6m

MinimOS/datadog-agent-fips-7
MinimOS/datadog-agent-fips-7-jmx
MinimOS/datadog-agent-fips-7-oci-compat
MinimOS/datadog-agent-fips-7-core-integrations
MinimOS/datadog-cluster-agent-fips-7
... 3 more

See record for full details

06 Oct

Fix available

MINI-j6ww-7529-624g

MinimOS/py3-virtualenv
MinimOS/py3.10-virtualenv
MinimOS/py3.11-virtualenv
MinimOS/py3.12-virtualenv
MinimOS/py3.13-virtualenv
... 5 more

See record for full details

06 Oct

No fix available

MINI-3r75-2w72-gmff

MinimOS/datadog-agent-7
MinimOS/datadog-agent-7-jmx
MinimOS/datadog-agent-7-oci-compat
MinimOS/datadog-agent-7-core-integrations
MinimOS/datadog-cluster-agent-7
... 4 more

See record for full details

25 Sep

Fix available

MINI-5r44-6qpw-34vc

MinimOS/py3-pip-wheel-bootstrap

See record for full details

25 Sep

Fix available

MINI-f9cq-mwg9-63ww

MinimOS/py3-pip
MinimOS/py3.10-pip-base
MinimOS/py3.11-pip-base
MinimOS/py3.12-pip-base
MinimOS/py3.13-pip-base
... 8 more

See record for full details

25 Sep

Fix available

ECHO-ffe1-1d3c-d9bc

Echo/python-pip

See record for full details

25 Sep

No fix available

BELL-CVE-2025-8869

Alpaquita:23/python3
BellSoft Hardened Containers:23/python3

See record for full details

25 Sep

Fix available

DEBIAN-CVE-2025-8869

Debian:11/python-pip
Debian:12/python-pip
Debian:13/python-pip
Debian:14/python-pip

See record for full details

24 Sep

Fix available
Severity - 5.9 (Medium)

UBUNTU-CVE-2025-8869

Ubuntu:Pro:14.04:LTS/python-pip
Ubuntu:Pro:16.04:LTS/python-pip
Ubuntu:Pro:18.04:LTS/python-pip
Ubuntu:Pro:20.04:LTS/python-pip
Ubuntu:22.04:LTS/python-pip
... 3 more

See record for full details

24 Sep

No fix available
Severity - 5.9 (Medium)