rootio-python-pip vulnerabilities (Root)
6 vulnerabilities.
-
rootio-python-pipRoot pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
rootio-python-pipRoot urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
rootio-python-pipRoot urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
rootio-python-pipRoot Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 5.9 Medium -
rootio-python-pipRoot Requests `Session` object does not verify requests after making first request with verify=False 5.6 Medium -
rootio-python-pipRoot An issue was discovered in pip (all versions) because it installs the version with the highest... 7.8 High