Pip Maintainers Pip vulnerabilities
- pip maintainers pippip absolute path traversal during download from malicious package indexes5.6 Medium
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directory4.1 Medium
- pip maintainers pippip self-update functionality can import newly installed modules after wheel installation5.3 Medium
- pip maintainers pippip doesn't reject concatenated ZIP and tar archives4.6 Medium
- pip maintainers pipLimited path traversal when installing wheel archives2.0 Low
- pip maintainers pipFallback tar extraction in pip doesn't check symbolic links point to extraction directory5.9 Medium
- pip maintainers pipMercurial configuration injectable in repo revision when installing via pip5.5 Medium