pip vulnerabilities (TuxCare)
8 vulnerabilities.
-
pipTuxCare pip absolute path traversal during download from malicious package indexes 5.6 Medium -
pipTuxCare pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
pipTuxCare pip self-update functionality can import newly installed modules after wheel installation 5.3 Medium -
pipTuxCare pip doesn't reject concatenated ZIP and tar archives 4.6 Medium -
pipTuxCare Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 5.9 Medium -
pipTuxCare Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
pipTuxCare Improper Input Validation in pip 5.7 Medium -
pipTuxCare Path Traversal in pip 7.5 High