python-pip vulnerabilities (Red Hat)
12 vulnerabilities.
-
python-pipRed Hat pip absolute path traversal during download from malicious package indexes 5.6 Medium -
python-pipRed Hat pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
python-pipRed Hat pip self-update functionality can import newly installed modules after wheel installation 5.3 Medium -
python-pipRed Hat pip doesn't reject concatenated ZIP and tar archives 4.6 Medium -
python-pipRed Hat Limited path traversal when installing wheel archives 2.0 Low -
python-pipRed Hat Improper Input Validation in pip 5.7 Medium -
python-pipRed Hat Path Traversal in pip 7.5 High -
python-pipRed Hat Improper Certificate Validation in urllib3 7.5 High -
python-pipRed Hat Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
python-pipRed Hat Exposure of Sensitive Information to an Unauthorized Actor in urllib3 9.8 Critical -
python-pipRed Hat Insufficiently Protected Credentials in Requests 7.5 High -
python-pipRed Hat Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile... 6.8 Medium