python3-pip vulnerabilities (Red Hat)

11 vulnerabilities.

• python3-pip Red Hat pip absolute path traversal during download from malicious package indexes CVE-2026-13346 Fix available 5.6 MediumJuly 29, 2026
• python3-pip Red Hat pip can extract console_scripts and gui_scripts outside installation directory CVE-2026-8643 Fix available 4.1 MediumMay 28, 2026
• python3-pip Red Hat pip self-update functionality can import newly installed modules after wheel installation CVE-2026-6357 Fix available 5.3 MediumApril 27, 2026
• python3-pip Red Hat pip doesn't reject concatenated ZIP and tar archives CVE-2026-3219 Fix available 4.6 MediumApril 20, 2026
• python3-pip Red Hat Improper Input Validation in pip CVE-2021-3572 Public exploitFix available 5.7 MediumJuly 13, 2021
• python3-pip Red Hat Path Traversal in pip CVE-2019-20916 Fix available 7.5 HighSeptember 4, 2020
• python3-pip Red Hat Improper Certificate Validation in urllib3 CVE-2019-11324 Fix available 7.5 HighApril 18, 2019
• python3-pip Red Hat Improper Neutralization of CRLF Sequences in urllib3 library for Python CVE-2019-11236 Fix available 6.1 MediumApril 15, 2019
• python3-pip Red Hat Exposure of Sensitive Information to an Unauthorized Actor in urllib3 CVE-2018-20060 Fix available 9.8 CriticalDecember 11, 2018
• python3-pip Red Hat Insufficiently Protected Credentials in Requests CVE-2018-18074 Public exploitFix available 7.5 HighOctober 9, 2018
• python3-pip Red Hat Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile... CVE-2007-4559 Public exploitFix available EPSS 27.1% 6.8 MediumAugust 28, 2007