USN-4961-1
python-pip vulnerability
No scoreFix available
It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository.
What each source reports
OSV No score
python-pip vulnerability
It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository.
- Record
USN-4961-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pipUbuntu:20.04:LTS |
before 20.0.2-5ubuntu1.5, plus listed versions 18.1-518.1-5build118.1-5ubuntu120.0.2-220.0.2-4 Show 5 moreShow less20.0.2-520.0.2-5ubuntu120.0.2-5ubuntu1.120.0.2-5ubuntu1.320.0.2-5ubuntu1.4 |
20.0.2-5ubuntu1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4961-1 is a vulnerability with no CVSS score yet in python-pip, published May 19, 2021. No source lists public exploit code. Fixed in python-pip 20.0.2-5ubuntu1.5.