sh vulnerabilities (PyPI)

1 vulnerability.

• sh PyPI sh _uid does not drop supplementary groups (incomplete privilege drop) CVE-2026-54552 Fix available 7.9 HighJuly 17, 2026