py3-pip vulnerabilities (Alpaquita)
9 vulnerabilities.
py3-pipAlpaquitapip absolute path traversal during download from malicious package indexes5.6 Mediumpy3-pipAlpaquitapip can extract console_scripts and gui_scripts outside installation directory4.1 Mediumpy3-pipAlpaquitaurllib3: Decompression-bomb safeguards bypassed in parts of the streaming API8.9 Highpy3-pipAlpaquitaurllib3: Sensitive headers forwarded across origins in proxied low-level redirects8.2 Highpy3-pipAlpaquitapip self-update functionality can import newly installed modules after wheel installation5.3 Mediumpy3-pipAlpaquitapip doesn't reject concatenated ZIP and tar archives4.6 Mediumpy3-pipAlpaquitaLimited path traversal when installing wheel archives2.0 Lowpy3-pipAlpaquitaurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)8.9 Highpy3-pipAlpaquitaurllib3 allows an unbounded number of links in the decompression chain8.9 High