Python Packaging Authority Pip vulnerabilities
- pip maintainers pip pip absolute path traversal during download from malicious package indexes 5.6 Medium
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 more pip can extract console_scripts and gui_scripts outside installation directory 4.1 Medium
- pip maintainers pip pip doesn't reject concatenated ZIP and tar archives 4.6 Medium
- pip maintainers pip Limited path traversal when installing wheel archives 2.0 Low
- pip maintainers pip Fallback tar extraction in pip doesn't check symbolic links point to extraction directory 5.9 Medium