python-pip vulnerabilities (Mageia)
39 vulnerabilities.
-
python-pipMageia tar filter allows writing outside destination via empty-named symlink 6.9 Medium -
python-pipMageia SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High -
python-pipMageia Use-after-free of a server-side SSLContext when sni_callback switches contexts 9.2 Critical -
python-pipMageia Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory 5.9 Medium -
python-pipMageia Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target 5.3 Medium -
python-pipMageia Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() 7.0 High -
python-pipMageia Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure 9.1 Critical -
python-pipMageia Base64 decoding stops at first padded quad by default 6.0 Medium -
python-pipMageia HTTP client proxy tunnel headers not validated for CR/LF 5.7 Medium -
python-pipMageia webbrowser.open() allows leading dashes in URLs 7.0 High -
python-pipMageia Stack overflow parsing XML with deeply nested DTD content models 6.0 Medium -
python-pipMageia Incomplete control character validation in http.cookies 6.0 Medium -
python-pipMageia SourcelessFileLoader does not use io.open_code() 5.7 Medium -
python-pipMageia email BytesGenerator header injection due to unquoted newlines 6.0 Medium -
python-pipMageia base64.b64decode() always accepts "+/" characters, despite setting altchars 6.3 Medium -
python-pipMageia Header injection in http.cookies.Morsel 6.0 Medium -
python-pipMageia POP3 command injection in user-controlled commands 5.9 Medium -
python-pipMageia IMAP command injection in user-controlled commands 5.9 Medium -
python-pipMageia Header injection via newlines in data URL mediatype 6.0 Medium -
python-pipMageia wsgiref.headers.Headers allows header newline injection 5.9 Medium -
python-pipMageia Folding email comments of unfoldable characters doesn't preserve parenthesis 5.7 Medium -
python-pipMageia urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-pipMageia Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
python-pipMageia A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,... 7.5 High -
python-pipMageia Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no... 7.4 High -
python-pipMageia In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into... 7.6 High -
python-pipMageia Improper Input Validation in pip 5.7 Medium -
python-pipMageia Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-pipMageia Improper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows... 9.8 Critical -
python-pipMageia Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection 6.5 Medium -
python-pipMageia CRLF injection in urllib3 6.5 Medium -
python-pipMageia Path Traversal in pip 7.5 High -
python-pipMageia Improper Certificate Validation in urllib3 7.5 High -
python-pipMageia Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
python-pipMageia Improper Authentication in pip 5.9 Medium -
python-pipMageia pip lack of randomness in build directory 2.1 Low -
python-pipMageia Updated python3 and related packages fix security vulnerabilities and prevent an error No score -
python-pipMageia The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly... 4.3 Medium -
python-pipMageia Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... 4.3 Medium