OSV - Open Source Vulnerabilities

OESA-2025-2794

openEuler:22.03-LTS-SP3/python-pip

python-pip security update

05 Dec 2025

Fix available

OESA-2025-2741

openEuler:22.03-LTS-SP4/python-pip

python-pip security update

28 Nov 2025

Fix available

MINI-c3j7-c3p2-x3j8

MinimOS/airflow-2
MinimOS/airflow-2-compat

See record for full details

17 Nov 2025

No fix available

DLA-4348-1

Debian:11/python-pip

python-pip - security update

26 Oct 2025

Fix available

MINI-j96j-jmq5-jp6m

MinimOS/datadog-agent-fips-7
MinimOS/datadog-agent-fips-7-core-integrations
MinimOS/datadog-agent-fips-7-fakeintake
MinimOS/datadog-agent-fips-7-jmx
MinimOS/datadog-agent-fips-7-oci-compat
... 3 more

See record for full details

06 Oct 2025

Fix available

MINI-j6ww-7529-624g

MinimOS/py3-supported-virtualenv
MinimOS/py3-virtualenv
MinimOS/py3.10-virtualenv
MinimOS/py3.10-virtualenv-bin
MinimOS/py3.11-virtualenv
... 5 more

See record for full details

06 Oct 2025

No fix available

BIT-pip-2025-8869

Bitnami/pip

Fallback tar extraction in pip doesn't check symbolic links point to extraction directory

26 Sep 2025

Fix available
Severity - 5.9 (Medium)

MINI-3r75-2w72-gmff

MinimOS/datadog-agent-7
MinimOS/datadog-agent-7-core-integrations
MinimOS/datadog-agent-7-fakeintake
MinimOS/datadog-agent-7-jmx
MinimOS/datadog-agent-7-oci-compat
... 4 more

See record for full details

25 Sep 2025

Fix available

MINI-5r44-6qpw-34vc

MinimOS/py3-pip-wheel-bootstrap

See record for full details

25 Sep 2025

Fix available

MINI-m28w-xvw5-pv5r

Not specified

See record for full details

25 Sep 2025

No fix available

MINI-f9cq-mwg9-63ww

MinimOS/py3-pip
MinimOS/py3-pip-wheel
MinimOS/py3-supported-pip
MinimOS/py3.10-pip
MinimOS/py3.10-pip-base
... 8 more

See record for full details

25 Sep 2025

Fix available

ECHO-ffe1-1d3c-d9bc

Echo/python-pip

See record for full details

25 Sep 2025

Fix available

BELL-CVE-2025-8869

Alpaquita:23/python3
BellSoft Hardened Containers:23/python3

See record for full details

25 Sep 2025

Fix available

GHSA-4xh5-x5gv-qwph

PyPI/pip

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

24 Sep 2025

Fix available
Severity - 5.9 (Medium)

DEBIAN-CVE-2025-8869

Debian:11/python-pip
Debian:12/python-pip
Debian:13/python-pip
Debian:14/python-pip

See record for full details

24 Sep 2025

Fix available
Severity - 5.9 (Medium)

UBUNTU-CVE-2025-8869

Ubuntu:Pro:14.04:LTS/python-pip
Ubuntu:Pro:16.04:LTS/python-pip
Ubuntu:Pro:18.04:LTS/python-pip
Ubuntu:Pro:20.04:LTS/python-pip

See record for full details

24 Sep 2025

No fix available
Severity - 5.9 (Medium)