pip vulnerabilities (Root)

8 vulnerabilities.

• pip Root AIKIDO-2026-949486 in pip - Patched by Root AIKIDO-2026-949486 Fix available No scoreNovember 2, 2026
• pip Root pip can extract console_scripts and gui_scripts outside installation directory CVE-2026-8643 Fix available 4.1 MediumMay 28, 2026
• pip Root pip self-update functionality can import newly installed modules after wheel installation CVE-2026-6357 Fix available 5.3 MediumApril 27, 2026
• pip Root pip doesn't reject concatenated ZIP and tar archives CVE-2026-3219 Fix available 4.6 MediumApril 20, 2026
• pip Root Fallback tar extraction in pip doesn't check symbolic links point to extraction directory CVE-2025-8869 Fix available 5.9 MediumSeptember 24, 2025
• pip Root Mercurial configuration injectable in repo revision when installing via pip CVE-2023-5752 Fix available 5.5 MediumOctober 24, 2023
• pip Root Improper Input Validation in pip CVE-2021-3572 Public exploitFix available 5.7 MediumJuly 13, 2021
• pip Root Path Traversal in pip CVE-2019-20916 Fix available 7.5 HighSeptember 4, 2020