python-pip vulnerabilities (Debian)
12 vulnerabilities.
-
python-pipDebian pip absolute path traversal during download from malicious package indexes 5.6 Medium -
python-pipDebian pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
python-pipDebian pip self-update functionality can import newly installed modules after wheel installation 5.3 Medium -
python-pipDebian pip doesn't reject concatenated ZIP and tar archives 4.6 Medium -
python-pipDebian Limited path traversal when installing wheel archives 2.0 Low -
python-pipDebian Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 5.9 Medium -
python-pipDebian Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
python-pipDebian Improper Input Validation in pip 5.7 Medium -
python-pipDebian Path Traversal in pip 7.5 High -
python-pipDebian Improper Authentication in pip 5.9 Medium -
python-pipDebian pip lack of randomness in build directory 2.1 Low -
python-pipDebian Improper Input Validation in pip 6.8 Medium