python-pip vulnerabilities (openEuler)
20 vulnerabilities.
-
python-pipopenEuler pip absolute path traversal during download from malicious package indexes 5.6 Medium -
python-pipopenEuler pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium -
python-pipopenEuler urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 8.2 High -
python-pipopenEuler pip doesn't reject concatenated ZIP and tar archives 4.6 Medium -
python-pipopenEuler Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function 4.4 Medium -
python-pipopenEuler Limited path traversal when installing wheel archives 2.0 Low -
python-pipopenEuler urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python-pipopenEuler urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python-pipopenEuler Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 5.9 Medium -
python-pipopenEuler urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-pipopenEuler Requests vulnerable to .netrc credentials leak via malicious URLs 5.3 Medium -
python-pipopenEuler Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-pipopenEuler Denial of Service via Quadratic Complexity in kjd/idna 6.2 Medium -
python-pipopenEuler Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
python-pipopenEuler Request body not stripped after redirect in urllib3 4.2 Medium -
python-pipopenEuler `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python-pipopenEuler Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
python-pipopenEuler Improper Input Validation in pip 5.7 Medium -
python-pipopenEuler Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-pipopenEuler Incorrect Calculation and Use of Insufficiently Random Values in Python 5.9 Medium