pipenv vulnerabilities (Ubuntu)

2 vulnerabilities.

• pipenv Ubuntu pip absolute path traversal during download from malicious package indexes CVE-2026-13346 Fix available 5.6 MediumJuly 29, 2026
• pipenv Ubuntu Pipenv's requirements.txt parsing allows malicious index url in comments CVE-2022-21668 Public exploitFix available 8.0 HighJanuary 10, 2022